meridian: v1.42.0

1.42.0 (2026-05-06)

Features

• diagnostics: surface resolved Claude executable + source in /health and startup log (#485) (c875cb4)
• register OAuth token as profile (closes #446) (e2c9b81)
• tokenRefresh: background scheduler keeps refresh chain warm (becf7f7)
• tokenRefresh: make scheduler activity visible in default logs (59270c2)
• tokenRefresh: proactive ensureFreshToken before SDK call (0b82dfc)

Bug Fixes

• errors: broaden isExpiredTokenError to catch generic 401s (91e1bb3)
• plugins: convert Windows paths to file:// URLs for ESM import (554d70c)
• plugins: gate pathToFileURL on win32 + add loader to windows-smoke CI (150a456)
• profiles: clean oauth-token isolation dir on profile remove (39dd273)
• profiles: isolate oauth-token profile from host ~/.claude (d400c55)
• proxy: fall back to process.cwd() when SDK cwd doesn't exist (#381) (#473) (232f727)
• proxy: forward auth headers on /v1/chat/completions internal hop (#470) (6567639), closes #415
• query: preserve CLAUDE_CONFIG_DIR for oauth-token profiles under sharedMemory (274dbf1)
• security: require auth on /settings/api/* and /settings (closes #477) (#486) (5db6341)
• tokenRefresh: generation-track scheduler to kill orphan chains (aac7c9a)