feat(auth): multi-account OAuth support with auto-relogin

[mguttmann]

Summary

• Add support for multiple OAuth accounts per provider with automatic credential rotation
• Implement browser-based auto-relogin for expired tokens using Puppeteer
• Track per-request credentials with AsyncLocalStorage context

Closes #11830

Changes

Backend

File	Description
auth/index.ts	Multi-record OAuth store (add/remove/list accounts)
auth/rotating-fetch.ts	Automatic failover on rate limits or auth failures
auth/browser.ts	Puppeteer-based session management for auto-relogin
auth/credential-manager.ts	Event-driven failover notifications
auth/context.ts	AsyncLocalStorage for per-request credential tracking
config/config.ts	oauth config block (cooldowns, retries, max attempts)
cli/cmd/auth.ts	Browser session management CLI commands
server/routes/provider.ts	Account CRUD, usage, browser session API endpoints
server/server.ts	Root-level auth routes
provider/provider.ts	Rotating-fetch integration

Frontend

File	Description
settings-providers.tsx	Manage accounts, set active, view usage
session-context-tab.tsx	Show active account per session
dialog-settings.tsx	Settings tabs structure

SDK

• Regenerated from server routes with all new endpoints

[github-actions]

The following comment was made by an LLM, it may be inaccurate:

Potential Duplicate PRs Found

1. feat(auth): OAuth Marathon - multi-account credential rotation (feat(auth): OAuth Marathon - multi-account credential rotation #8590)

   • feat(auth): OAuth Marathon - multi-account credential rotation #8590
   • Why related: Directly addresses multi-account credential rotation, which is the core feature of PR feat(auth): multi-account OAuth support with auto-relogin #11832. Likely overlaps on the same functionality.

2. feat(openai-oauth) OpenAI OAuth multi account support (feat(openai-oauth) OpenAI OAuth multi account support #8536)

   • feat(openai-oauth) OpenAI OAuth multi account support #8536
   • Why related: Implements multi-account OAuth support, though potentially specific to OpenAI. May have shared patterns with the generic multi-account implementation in feat(auth): multi-account OAuth support with auto-relogin #11832.

3. feat(usage): unified usage tracking with auth refresh ([FEATURE] Add unified usage tracking via /usage (#9545) #9281) (feat(usage): unified usage tracking with auth refresh (#9281) #9545)

   • feat(usage): unified usage tracking with auth refresh (#9281) #9545
   • Why related: Includes auth refresh logic which relates to the auto-relogin functionality in feat(auth): multi-account OAuth support with auto-relogin #11832.

I'd recommend reviewing #8590 most closely as it appears to address the same multi-account credential rotation feature set.

[mguttmann]

Thanks for the duplicate analysis! Here's how this PR compares to the flagged ones:

PR	Status	Comparison
#8590 (OAuth Marathon)	Open	Similar goal. This PR builds on that concept with additional features: Puppeteer-based auto-relogin for expired tokens, AsyncLocalStorage per-request credential context, event-driven failover via credential-manager, and a complete Settings UI for managing accounts
#8536 (OpenAI multi-account)	Open	OpenAI-specific. This PR is provider-agnostic — works with any OAuth provider, not just OpenAI
#9545 (usage tracking + auth refresh)	Open	Partial overlap on auth refresh. This PR has a dedicated browser.ts (828 lines) for full browser session management, not just token refresh

Key differentiators of this PR:

• 🔄 rotating-fetch.ts — Automatic failover with configurable cooldowns, retries, and max attempts
• 🌐 browser.ts — Puppeteer-based auto-relogin for expired tokens (no manual re-auth needed)
• 📊 Full account management UI in Settings (add/remove accounts, set active, view usage)
• 🧵 auth/context.ts — AsyncLocalStorage for per-request credential tracking
• ⚙️ oauth config block with tunable rotation parameters

This is a clean split from the closed #9972 — focused solely on multi-account + auto-relogin (YOLO mode is in separate PR #11833).

[mguttmann]

[mguttmann]

[dan-myles]

YO I NEED THIS

[mguttmann]

Thanks! 🙌 If you want to try it now, you can build from the branch — it's fully working and all CI checks pass.

[NotFiliberto]

i need this too

[NotFiliberto]

any change to have this merged in the main branch?

[mguttmann]

Hey @NotFiliberto — I'd love to see it merged too! It's up to the OpenCode maintainers at this point. CI is green, the feature is complete, and it's been working well in my daily builds. Currently waiting on developer feedback / review. Fingers crossed! 🤞

[kfiramar]

That'd be extremely helpful

[MiasmaAnagnorisis]

Thank you for implementing this! Really appreciate having legitimate multi-account OAuth rotation without needing workarounds.

[rkdxodud-tyk]

Oh i need this