@rynfar/meridian 1.27.5 → 1.28.1

package/README.md

@@ -61,8 +61,70 @@ Meridian bridges that gap. It runs locally, accepts standard Anthropic API reque
 - **Auto token refresh** — expired OAuth tokens are refreshed automatically; requests continue without interruption
 - **Passthrough mode** — forward tool calls to the client instead of executing internally
 - **Multimodal** — images, documents, and file attachments pass through to Claude
+- **Multi-profile** — switch between Claude accounts instantly, no restart needed
 - **Telemetry dashboard** — real-time performance metrics at `/telemetry`
 
+## Multi-Profile Support
+
+Meridian can route requests to different Claude accounts. Each **profile** is a named auth context — a separate Claude login with its own OAuth tokens. Switch between personal and work accounts, or share a single Meridian instance across teams.
+
+### Adding profiles
+
+```bash
+# Add your personal account
+meridian profile add personal
+# → Opens browser for Claude login
+
+# Add your work account (sign out of claude.ai first, then sign into the work account)
+meridian profile add work
+```
+
+> **⚠ Important:** Claude's OAuth reuses your browser session. Before adding a second account, sign out of claude.ai and sign into the other account first.
+
+### Switching profiles
+
+```bash
+# CLI (while proxy is running)
+meridian profile switch work
+
+# Per-request header (any agent)
+curl -H "x-meridian-profile: work" ...
+```
+
+You can also switch profiles from the web UI at `http://127.0.0.1:3456/profiles` — a dropdown appears in the nav bar on all pages when profiles are configured.
+
+### Profile commands
+
+| Command | Description |
+|---------|-------------|
+| `meridian profile add <name>` | Add a profile and authenticate via browser |
+| `meridian profile list` | List profiles and auth status |
+| `meridian profile switch <name>` | Switch the active profile (requires running proxy) |
+| `meridian profile login <name>` | Re-authenticate an expired profile |
+| `meridian profile remove <name>` | Remove a profile and its credentials |
+
+### How it works
+
+Each profile stores its credentials in an isolated `CLAUDE_CONFIG_DIR` under `~/.config/meridian/profiles/<name>/`. When a request arrives, Meridian resolves the profile in priority order:
+
+1. `x-meridian-profile` request header (per-request override)
+2. Active profile (set via `meridian profile switch` or the web UI)
+3. First configured profile
+
+Session state is scoped per profile — switching accounts won't cross-contaminate conversation history.
+
+### Environment variable configuration
+
+For advanced setups (CI, Docker), profiles can also be provided via environment variable:
+
+```bash
+export MERIDIAN_PROFILES='[{"id":"personal","claudeConfigDir":"/path/to/config1"},{"id":"work","claudeConfigDir":"/path/to/config2"}]'
+export MERIDIAN_DEFAULT_PROFILE=personal
+meridian
+```
+
+When `MERIDIAN_PROFILES` is set, it takes precedence over disk-configured profiles. When unset, Meridian auto-discovers profiles from `~/.config/meridian/profiles.json` on each request.
+
 ## Agent Setup
 
 ### OpenCode
@@ -282,8 +344,14 @@ src/proxy/
 │   ├── lineage.ts         ← Per-message hashing, mutation classification (pure)
 │   ├── fingerprint.ts     ← Conversation fingerprinting
 │   └── cache.ts           ← LRU session caches
+├── profiles.ts            ← Multi-profile: resolve, list, switch auth contexts
+├── profileCli.ts          ← CLI commands for profile management
 ├── sessionStore.ts        ← Cross-proxy file-based session persistence
 └── passthroughTools.ts    ← Tool forwarding mode
+telemetry/
+├── ...
+├── profileBar.ts          ← Shared profile switcher bar
+└── profilePage.ts         ← Profile management page
 plugin/
 └── meridian.ts            ← OpenCode plugin (session headers + agent mode)
 ```
@@ -333,6 +401,8 @@ Implement the `AgentAdapter` interface in `src/proxy/adapters/`. See [`adapters/
 | `MERIDIAN_NO_FILE_CHANGES` | `CLAUDE_PROXY_NO_FILE_CHANGES` | unset | Disable "Files changed" summary in responses |
 | `MERIDIAN_SONNET_MODEL` | `CLAUDE_PROXY_SONNET_MODEL` | `sonnet` | Sonnet context tier: `sonnet` (200k, default) or `sonnet[1m]` (1M, requires Extra Usage†) |
 | `MERIDIAN_DEFAULT_AGENT` | — | `opencode` | Default adapter for unrecognized agents: `opencode`, `pi`, `crush`, `droid`, `passthrough`. Requires restart. |
+| `MERIDIAN_PROFILES` | — | unset | JSON array of profile configs (overrides disk discovery). See [Multi-Profile Support](#multi-profile-support). |
+| `MERIDIAN_DEFAULT_PROFILE` | — | *(first profile)* | Default profile ID when no header is sent |
 
 †Sonnet 1M requires Extra Usage on all plans including Max ([docs](https://code.claude.com/docs/en/model-config#extended-context)). Opus 1M is included with Max/Team/Enterprise at no extra cost.
 
@@ -351,6 +421,9 @@ Implement the `AgentAdapter` interface in `src/proxy/adapters/`. See [`adapters/
 | `GET /telemetry/requests` | Recent request metrics (JSON) |
 | `GET /telemetry/summary` | Aggregate statistics (JSON) |
 | `GET /telemetry/logs` | Diagnostic logs (JSON) |
+| `GET /profiles` | Profile management page |
+| `GET /profiles/list` | List profiles with auth status (JSON) |
+| `POST /profiles/active` | Switch the active profile |
 
 Health response example:
 
@@ -371,6 +444,11 @@ Health response example:
 |---------|-------------|
 | `meridian` | Start the proxy server |
 | `meridian setup` | Configure the OpenCode plugin in `~/.config/opencode/opencode.json` |
+| `meridian profile add <name>` | Add a profile and authenticate via browser |
+| `meridian profile list` | List all profiles and their auth status |
+| `meridian profile switch <name>` | Switch the active profile (requires running proxy) |
+| `meridian profile login <name>` | Re-authenticate an expired profile |
+| `meridian profile remove <name>` | Remove a profile and its credentials |
 | `meridian refresh-token` | Manually refresh the Claude OAuth token (exits 0/1) |
 
 ## Programmatic API

package/dist/cli-340h1chz.js

@@ -0,0 +1,33 @@
+// src/proxy/settings.ts
+import { existsSync, readFileSync, writeFileSync, mkdirSync } from "node:fs";
+import { join, dirname } from "node:path";
+import { homedir } from "node:os";
+var SETTINGS_FILE = join(homedir(), ".config", "meridian", "settings.json");
+function loadSettings() {
+  try {
+    if (!existsSync(SETTINGS_FILE))
+      return {};
+    return JSON.parse(readFileSync(SETTINGS_FILE, "utf-8"));
+  } catch {
+    return {};
+  }
+}
+function saveSettings(updates) {
+  const current = loadSettings();
+  const merged = { ...current, ...updates };
+  try {
+    mkdirSync(dirname(SETTINGS_FILE), { recursive: true });
+    writeFileSync(SETTINGS_FILE, JSON.stringify(merged, null, 2) + `
+`, { mode: 384 });
+  } catch (err) {
+    console.warn(`[meridian] Failed to write ${SETTINGS_FILE}: ${err instanceof Error ? err.message : err}`);
+  }
+}
+function getSetting(key) {
+  return loadSettings()[key];
+}
+function setSetting(key, value) {
+  saveSettings({ [key]: value });
+}
+
+export { getSetting, setSetting };

package/dist/cli-g9ypdz51.js

@@ -0,0 +1,113 @@
+// src/telemetry/profileBar.ts
+var profileBarCss = `
+  .meridian-profile-bar {
+    position: sticky; top: 0; z-index: 100;
+    display: none; align-items: center; gap: 12px;
+    padding: 8px 24px;
+    background: rgba(13, 17, 23, 0.92);
+    backdrop-filter: blur(12px);
+    border-bottom: 1px solid var(--border, #30363d);
+    font-size: 12px;
+    color: var(--muted, #8b949e);
+  }
+  .meridian-profile-bar.visible { display: flex; }
+  .meridian-profile-bar .profile-label {
+    font-weight: 500; text-transform: uppercase; letter-spacing: 0.5px;
+    font-size: 10px; color: var(--muted, #8b949e);
+  }
+  .meridian-profile-bar select {
+    background: var(--surface, #161b22); color: var(--text, #e6edf3);
+    border: 1px solid var(--border, #30363d); border-radius: 6px;
+    padding: 4px 24px 4px 10px; font-size: 12px; cursor: pointer;
+    appearance: none;
+    background-image: url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' width='12' height='12' viewBox='0 0 12 12'%3E%3Cpath d='M3 5l3 3 3-3' fill='none' stroke='%238b949e' stroke-width='1.5'/%3E%3C/svg%3E");
+    background-repeat: no-repeat; background-position: right 6px center;
+  }
+  .meridian-profile-bar select:hover { border-color: var(--accent, #58a6ff); }
+  .meridian-profile-bar select:focus { outline: none; border-color: var(--accent, #58a6ff); box-shadow: 0 0 0 1px var(--accent, #58a6ff); }
+  .meridian-profile-bar .profile-status {
+    font-size: 11px; color: var(--green, #3fb950); opacity: 0;
+    transition: opacity 0.3s;
+  }
+  .meridian-profile-bar .profile-status.show { opacity: 1; }
+  .meridian-profile-bar .profile-type {
+    font-size: 10px; padding: 2px 8px; border-radius: 4px;
+    background: var(--surface, #161b22); border: 1px solid var(--border, #30363d);
+  }
+  .meridian-profile-bar .spacer { flex: 1; }
+  .meridian-profile-bar .profile-nav a {
+    color: var(--muted, #8b949e); text-decoration: none; font-size: 11px;
+    padding: 4px 8px; border-radius: 4px; transition: color 0.15s;
+  }
+  .meridian-profile-bar .profile-nav a:hover { color: var(--text, #e6edf3); }
+  .meridian-profile-bar .profile-nav a.active { color: var(--accent, #58a6ff); }
+`;
+var profileBarHtml = `
+<div class="meridian-profile-bar" id="meridianProfileBar">
+  <span class="profile-label">Profile</span>
+  <select id="meridianProfileSelect"></select>
+  <span class="profile-type" id="meridianProfileType"></span>
+  <span class="profile-status" id="meridianProfileStatus">✓ Switched</span>
+  <div class="spacer"></div>
+  <div class="profile-nav">
+    <a href="/" id="nav-home">Home</a>
+    <a href="/profiles" id="nav-profiles">Profiles</a>
+    <a href="/telemetry" id="nav-telemetry">Telemetry</a>
+  </div>
+</div>
+`;
+var profileBarJs = `
+(function() {
+  var profileBar = document.getElementById('meridianProfileBar');
+  var profileSelect = document.getElementById('meridianProfileSelect');
+  var profileType = document.getElementById('meridianProfileType');
+  var profileStatus = document.getElementById('meridianProfileStatus');
+  var statusTimeout;
+
+  // Highlight active nav link
+  var path = location.pathname;
+  var navLinks = document.querySelectorAll('.profile-nav a');
+  navLinks.forEach(function(a) {
+    if (a.getAttribute('href') === path || (path === '/telemetry' && a.id === 'nav-telemetry') || (path === '/' && a.id === 'nav-home')) {
+      a.classList.add('active');
+    }
+  });
+
+  function esc(s) { var d = document.createElement('div'); d.textContent = s; return d.innerHTML; }
+
+  function loadProfiles() {
+    fetch('/profiles/list').then(function(r) { return r.json(); }).then(function(data) {
+      if (!data.profiles || data.profiles.length === 0) {
+        profileBar.classList.remove('visible');
+        return;
+      }
+      profileBar.classList.add('visible');
+      var current = data.profiles.find(function(p) { return p.isActive; });
+      profileSelect.innerHTML = data.profiles.map(function(p) {
+        return '<option value="' + esc(p.id) + '"' + (p.isActive ? ' selected' : '') + '>' + esc(p.id) + '</option>';
+      }).join('');
+      if (current) profileType.textContent = current.type;
+    }).catch(function() {});
+  }
+
+  profileSelect.onchange = function() {
+    fetch('/profiles/active', {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({ profile: profileSelect.value })
+    }).then(function(r) { return r.json(); }).then(function(data) {
+      if (data.success) {
+        profileStatus.classList.add('show');
+        clearTimeout(statusTimeout);
+        statusTimeout = setTimeout(function() { profileStatus.classList.remove('show'); }, 2000);
+        loadProfiles();
+      }
+    }).catch(function() {});
+  };
+
+  loadProfiles();
+  setInterval(loadProfiles, 10000);
+})();
+`;
+
+export { profileBarCss, profileBarHtml, profileBarJs };

package/dist/cli-vdp9s10c.js

@@ -0,0 +1,115 @@
+import {
+  getSetting,
+  setSetting
+} from "./cli-340h1chz.js";
+
+// src/proxy/profiles.ts
+import { existsSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import { homedir } from "node:os";
+var CONFIG_FILE = join(homedir(), ".config", "meridian", "profiles.json");
+var DISK_CACHE_TTL_MS = 5000;
+var diskProfilesCache = [];
+var diskProfilesCacheAt = 0;
+function loadProfilesFromDisk() {
+  if (diskProfilesCacheAt > 0 && Date.now() - diskProfilesCacheAt < DISK_CACHE_TTL_MS) {
+    return diskProfilesCache;
+  }
+  try {
+    if (!existsSync(CONFIG_FILE)) {
+      diskProfilesCache = [];
+    } else {
+      diskProfilesCache = JSON.parse(readFileSync(CONFIG_FILE, "utf-8"));
+    }
+    diskProfilesCacheAt = Date.now();
+    return diskProfilesCache;
+  } catch (err) {
+    console.warn(`[meridian] Failed to read ${CONFIG_FILE}: ${err instanceof Error ? err.message : err}`);
+    diskProfilesCacheAt = Date.now();
+    diskProfilesCache = [];
+    return [];
+  }
+}
+var DEFAULT_PROFILE_ID = "default";
+var activeProfileId;
+function setActiveProfile(profileId) {
+  activeProfileId = profileId;
+  setSetting("activeProfile", profileId);
+}
+function getActiveProfileId() {
+  return activeProfileId;
+}
+function resetActiveProfile() {
+  activeProfileId = undefined;
+}
+function restoreActiveProfile(configProfiles) {
+  if (activeProfileId)
+    return;
+  if (!diskDiscoveryEnabled)
+    return;
+  const saved = getSetting("activeProfile");
+  if (!saved)
+    return;
+  const effective = getEffectiveProfiles(configProfiles);
+  if (effective.length === 0 || effective.some((p) => p.id === saved)) {
+    activeProfileId = saved;
+  } else {
+    console.warn(`[meridian] Saved active profile "${saved}" not found. Using default.`);
+  }
+}
+var diskDiscoveryEnabled = false;
+function enableDiskProfileDiscovery() {
+  diskDiscoveryEnabled = true;
+}
+function getEffectiveProfiles(configProfiles) {
+  const fromConfig = configProfiles ?? [];
+  if (!diskDiscoveryEnabled)
+    return fromConfig;
+  const fromDisk = loadProfilesFromDisk();
+  const configIds = new Set(fromConfig.map((p) => p.id));
+  return [...fromConfig, ...fromDisk.filter((p) => !configIds.has(p.id))];
+}
+function hasProfiles(configProfiles) {
+  return getEffectiveProfiles(configProfiles).length > 0;
+}
+function resolveProfile(profiles, defaultProfile, requestedId) {
+  const effective = getEffectiveProfiles(profiles);
+  if (effective.length === 0) {
+    return { id: DEFAULT_PROFILE_ID, type: "claude-max", env: {} };
+  }
+  const resolvedId = requestedId || activeProfileId || defaultProfile || effective[0].id;
+  const profile = effective.find((p) => p.id === resolvedId);
+  if (!profile) {
+    console.warn(`[meridian] Unknown profile "${resolvedId}". Using first configured profile.`);
+    return buildResolvedProfile(effective[0]);
+  }
+  return buildResolvedProfile(profile);
+}
+function buildResolvedProfile(profile) {
+  const type = profile.type ?? "claude-max";
+  if (type === "api") {
+    const env2 = {};
+    if (profile.apiKey)
+      env2.ANTHROPIC_API_KEY = profile.apiKey;
+    if (profile.baseUrl)
+      env2.ANTHROPIC_BASE_URL = profile.baseUrl;
+    return { id: profile.id, type, env: env2 };
+  }
+  const env = {};
+  if (profile.claudeConfigDir)
+    env.CLAUDE_CONFIG_DIR = profile.claudeConfigDir;
+  return { id: profile.id, type, env };
+}
+function listProfiles(profiles, defaultProfile) {
+  const effective = getEffectiveProfiles(profiles);
+  if (effective.length === 0)
+    return [];
+  const currentActive = activeProfileId || defaultProfile || effective[0].id;
+  return effective.map((p) => ({
+    id: p.id,
+    type: p.type ?? "claude-max",
+    isActive: p.id === currentActive
+  }));
+}
+
+export { loadProfilesFromDisk, setActiveProfile, getActiveProfileId, resetActiveProfile, restoreActiveProfile, enableDiskProfileDiscovery, getEffectiveProfiles, hasProfiles, resolveProfile, listProfiles };