fix(storage): keep per-project account files under ~/.opencode/projects

Author: ndycode

AGENTS.md

@@ -64,7 +64,7 @@ npm run lint        # eslint
 ## NOTES
 - OAuth callback: `http://127.0.0.1:1455/auth/callback`.
 - ChatGPT backend requires `store: false`, include `reasoning.encrypted_content`.
-- Per-project accounts: `.opencode/openai-codex-accounts.json` (walks up to find project root).
+- Per-project accounts: `~/.opencode/projects/<project-key>/openai-codex-accounts.json` (walks up to find project root).
 - Global accounts: `~/.opencode/openai-codex-accounts.json`.
 - Prompt templates synced from Codex CLI GitHub releases with ETag caching.
 - 5xx server errors trigger account rotation and health penalty (same as network errors).

CHANGELOG.md

@@ -2,6 +2,16 @@
 
 all notable changes to this project. dates are ISO format (YYYY-MM-DD).
 
+## [4.12.5] - 2026-02-04
+
+### changed
+
+- **per-project storage location**: project-scoped account files now live under `~/.opencode/projects/<project-key>/openai-codex-accounts.json` instead of writing into `<project>/.opencode/`.
+
+### added
+
+- **legacy migration**: when the new project-scoped path is empty, the plugin now auto-migrates legacy `<project>/.opencode/openai-codex-accounts.json` data on first load.
+
 ## [4.12.0] - 2026-01-30
 
 ### breaking

README.md

@@ -439,10 +439,10 @@ Total accounts: 4
 
 **Per-project accounts (v4.10.0+):**
 
-By default, each project directory gets its own account storage. This means you can have different active accounts per project. Works from subdirectories too — the plugin walks up to find the project root (v4.11.0). Disable with `perProjectAccounts: false` in your config.
+By default, each project gets its own account storage namespace. This means you can keep different active accounts per project without writing account files into your repo. Works from subdirectories too; the plugin walks up to find the project root (v4.11.0). Disable with `perProjectAccounts: false` in your config.
 
 **Storage locations:**
-- Per-project: `{project-root}/.opencode/openai-codex-accounts.json`
+- Per-project: `~/.opencode/projects/{project-key}/openai-codex-accounts.json`
 - Global (when per-project disabled): `~/.opencode/openai-codex-accounts.json`
 
 ---
@@ -460,7 +460,7 @@ OpenCode uses `~/.config/opencode/` on **all platforms** including Windows.
 | Main config | `~/.config/opencode/opencode.json` |
 | Auth tokens | `~/.opencode/auth/openai.json` |
 | Multi-account (global) | `~/.opencode/openai-codex-accounts.json` |
-| Multi-account (per-project) | `{project}/.opencode/openai-codex-accounts.json` |
+| Multi-account (per-project) | `~/.opencode/projects/{project-key}/openai-codex-accounts.json` |
 | Plugin config | `~/.opencode/openai-codex-auth-config.json` |
 | Debug logs | `~/.opencode/logs/codex-plugin/` |
 
@@ -635,7 +635,7 @@ Create `~/.opencode/openai-codex-auth-config.json` for optional settings:
 
 | Option | Default | What It Does |
 |--------|---------|--------------|
-| `perProjectAccounts` | `true` | Each project gets its own account storage |
+| `perProjectAccounts` | `true` | Each project gets its own account storage namespace under `~/.opencode/projects/` |
 | `toastDurationMs` | `5000` | How long toast notifications stay visible (ms) |
 
 ### Retry Behavior
@@ -700,3 +700,4 @@ By using this plugin, you acknowledge:
 - "ChatGPT", "GPT-5", "Codex", and "OpenAI" are trademarks of OpenAI, L.L.C.
 
 </details>
+

docs/configuration.md

@@ -220,7 +220,7 @@ result: project uses `high`, other projects use `medium`.
 | `~/.opencode/openai-codex-auth-config.json` | plugin config |
 | `~/.opencode/auth/openai.json` | oauth tokens |
 | `~/.opencode/openai-codex-accounts.json` | global account storage |
-| `<project>/.opencode/openai-codex-accounts.json` | per-project account storage |
+| `~/.opencode/projects/<project-key>/openai-codex-accounts.json` | per-project account storage |
 | `~/.opencode/logs/codex-plugin/` | debug logs |
 
 ---
@@ -284,7 +284,7 @@ look for `hasModelSpecificConfig: true`. if it's false, config lookup failed - c
 
 ### per-project accounts not working
 
-make sure you're in a project directory (has `.git`, `package.json`, etc). the plugin auto-detects and falls back to global storage otherwise.
+make sure you're in a project directory (has `.git`, `package.json`, etc). the plugin auto-detects the project root and uses a namespaced file under `~/.opencode/projects/`. if no project root is found, it falls back to global storage.
 
 check which storage is being used:
 ```bash

lib/storage.ts

@@ -4,7 +4,7 @@ import { ACCOUNT_LIMITS } from "./constants.js";
 import { createLogger } from "./logger.js";
 import { MODEL_FAMILIES, type ModelFamily } from "./prompts/codex.js";
 import { AnyAccountStorageSchema, getValidationErrors } from "./schemas.js";
-import { getConfigDir, getProjectConfigDir, findProjectRoot, resolvePath } from "./storage/paths.js";
+import { getConfigDir, getProjectConfigDir, getProjectGlobalConfigDir, findProjectRoot, resolvePath } from "./storage/paths.js";
 import {
   migrateV1ToV3,
   type CooldownReason,
@@ -18,6 +18,7 @@ import {
 export type { CooldownReason, RateLimitStateV3, AccountMetadataV1, AccountStorageV1, AccountMetadataV3, AccountStorageV3 };
 
 const log = createLogger("storage");
+const ACCOUNTS_FILE_NAME = "openai-codex-accounts.json";
 
 /**
  * Custom error class for storage operations with platform-aware hints.
@@ -113,23 +114,28 @@ async function ensureGitignore(storagePath: string): Promise<void> {
 }
 
 let currentStoragePath: string | null = null;
+let currentLegacyProjectStoragePath: string | null = null;
 
 export function setStoragePath(projectPath: string | null): void {
   if (!projectPath) {
     currentStoragePath = null;
+    currentLegacyProjectStoragePath = null;
     return;
   }
 
   const projectRoot = findProjectRoot(projectPath);
   if (projectRoot) {
-    currentStoragePath = join(getProjectConfigDir(projectRoot), "openai-codex-accounts.json");
+    currentStoragePath = join(getProjectGlobalConfigDir(projectRoot), ACCOUNTS_FILE_NAME);
+    currentLegacyProjectStoragePath = join(getProjectConfigDir(projectRoot), ACCOUNTS_FILE_NAME);
   } else {
     currentStoragePath = null;
+    currentLegacyProjectStoragePath = null;
   }
 }
 
 export function setStoragePathDirect(path: string | null): void {
   currentStoragePath = path;
+  currentLegacyProjectStoragePath = null;
 }
 
 /**
@@ -140,7 +146,40 @@ export function getStoragePath(): string {
   if (currentStoragePath) {
     return currentStoragePath;
   }
-  return join(getConfigDir(), "openai-codex-accounts.json");
+  return join(getConfigDir(), ACCOUNTS_FILE_NAME);
+}
+
+async function migrateLegacyProjectStorageIfNeeded(): Promise<AccountStorageV3 | null> {
+  if (
+    !currentStoragePath ||
+    !currentLegacyProjectStoragePath ||
+    currentLegacyProjectStoragePath === currentStoragePath ||
+    !existsSync(currentLegacyProjectStoragePath)
+  ) {
+    return null;
+  }
+
+  try {
+    const legacyContent = await fs.readFile(currentLegacyProjectStoragePath, "utf-8");
+    const legacyData = JSON.parse(legacyContent) as unknown;
+    const normalized = normalizeAccountStorage(legacyData);
+    if (!normalized) return null;
+
+    await saveAccounts(normalized);
+    log.info("Migrated legacy project account storage", {
+      from: currentLegacyProjectStoragePath,
+      to: currentStoragePath,
+      accounts: normalized.accounts.length,
+    });
+    return normalized;
+  } catch (error) {
+    log.warn("Failed to migrate legacy project account storage", {
+      from: currentLegacyProjectStoragePath,
+      to: currentStoragePath,
+      error: String(error),
+    });
+    return null;
+  }
 }
 
 function selectNewestAccount<T extends AccountLike>(
@@ -425,6 +464,8 @@ export async function loadAccounts(): Promise<AccountStorageV3 | null> {
   } catch (error) {
     const code = (error as NodeJS.ErrnoException).code;
     if (code === "ENOENT") {
+      const migrated = await migrateLegacyProjectStorageIfNeeded();
+      if (migrated) return migrated;
       return null;
     }
     log.error("Failed to load account storage", { error: String(error) });

lib/storage/paths.ts

@@ -4,10 +4,13 @@
  */
 
 import { existsSync } from "node:fs";
-import { dirname, join, resolve } from "node:path";
+import { createHash } from "node:crypto";
+import { basename, dirname, join, resolve } from "node:path";
 import { homedir, tmpdir } from "node:os";
 
 const PROJECT_MARKERS = [".git", "package.json", "Cargo.toml", "go.mod", "pyproject.toml", ".opencode"];
+const PROJECTS_DIR = "projects";
+const PROJECT_KEY_HASH_LENGTH = 12;
 
 export function getConfigDir(): string {
 	return join(homedir(), ".opencode");
@@ -17,6 +20,38 @@ export function getProjectConfigDir(projectPath: string): string {
 	return join(projectPath, ".opencode");
 }
 
+function normalizeProjectPath(projectPath: string): string {
+	const resolvedPath = resolve(projectPath);
+	const normalizedSeparators = resolvedPath.replace(/\\/g, "/");
+	return process.platform === "win32"
+		? normalizedSeparators.toLowerCase()
+		: normalizedSeparators;
+}
+
+function sanitizeProjectName(projectPath: string): string {
+	const name = basename(projectPath);
+	const sanitized = name.replace(/[^a-zA-Z0-9._-]+/g, "-").replace(/^-+|-+$/g, "");
+	return sanitized || "project";
+}
+
+export function getProjectStorageKey(projectPath: string): string {
+	const normalizedPath = normalizeProjectPath(projectPath);
+	const hash = createHash("sha256")
+		.update(normalizedPath)
+		.digest("hex")
+		.slice(0, PROJECT_KEY_HASH_LENGTH);
+	const projectName = sanitizeProjectName(normalizedPath).slice(0, 40);
+	return `${projectName}-${hash}`;
+}
+
+/**
+ * Per-project storage is namespaced under ~/.opencode/projects
+ * to avoid writing account files into user repositories.
+ */
+export function getProjectGlobalConfigDir(projectPath: string): string {
+	return join(getConfigDir(), PROJECTS_DIR, getProjectStorageKey(projectPath));
+}
+
 export function isProjectDirectory(dir: string): boolean {
 	return PROJECT_MARKERS.some((marker) => existsSync(join(dir, marker)));
 }

test/paths.test.ts

@@ -10,6 +10,8 @@ import { existsSync } from "node:fs";
 import {
 	getConfigDir,
 	getProjectConfigDir,
+	getProjectGlobalConfigDir,
+	getProjectStorageKey,
 	isProjectDirectory,
 	findProjectRoot,
 	resolvePath,
@@ -47,6 +49,25 @@ describe("Storage Paths Module", () => {
 		});
 	});
 
+	describe("getProjectStorageKey", () => {
+		it("returns deterministic key for same project path", () => {
+			const projectPath = "/home/user/myproject";
+			const first = getProjectStorageKey(projectPath);
+			const second = getProjectStorageKey(projectPath);
+			expect(first).toBe(second);
+			expect(first).toMatch(/^myproject-[a-f0-9]{12}$/);
+		});
+	});
+
+	describe("getProjectGlobalConfigDir", () => {
+		it("returns ~/.opencode/projects/<key>", () => {
+			const projectPath = "/home/user/myproject";
+			const result = getProjectGlobalConfigDir(projectPath);
+			expect(result).toContain(path.join(homedir(), ".opencode", "projects"));
+			expect(result).toContain("myproject-");
+		});
+	});
+
 	describe("isProjectDirectory", () => {
 		const markers = [".git", "package.json", "Cargo.toml", "go.mod", "pyproject.toml", ".opencode"];
 

test/storage.test.ts

@@ -708,11 +708,12 @@ describe("storage", () => {
       expect(path).toContain(".opencode");
     });
 
-    it("sets project-relative path when project root found (line 125 coverage)", () => {
+    it("sets project-scoped path under global .opencode when project root found", () => {
       setStoragePath(process.cwd());
       const path = getStoragePath();
       expect(path).toContain("openai-codex-accounts.json");
       expect(path).toContain(".opencode");
+      expect(path).toContain("projects");
     });
   });