ops-accounts
GitHub多提供商AI账号管理工具，支持Claude、Grok等平台的会话状态查看、OAuth设置、令牌刷新及自动重认证。本次更新移除CRS中继服务，确立CLIProxyAPI为唯一多账号路径，简化架构并提升安全性。
Trigger Scenarios
Install
npx skills add Lifecycle-Innovations-Limited/claude-ops --skill ops-accounts -g -y
SKILL.md
Frontmatter
{
"name": "ops-accounts",
"effort": "medium",
"maxTurns": 40,
"description": "Multi-provider AI account manager (Claude, Grok\/xAI, OpenAI\/Codex, Factory, Cursor). Status, setup, switch, refresh, reauth, util, and the CLIProxyAPI pool. Canonical replacement for \/ops:rotate and \/ops:rotate-setup (those remain aliases).",
"allowed-tools": [
"Bash",
"Read",
"Write",
"Edit",
"AskUserQuestion"
],
"argument-hint": "[status|list|setup|switch|refresh|reauth|util|rotate-now|seats|gateway|help] [provider] [args…]"
}
OPS ► ACCOUNTS
Canonical multi-provider seat manager. Same layers Anthropic has for Claude — for every provider:
| Layer | Verbs |
|---|---|
| Status / list | status, list |
| Setup / OAuth capture | setup |
| Switch active seat | switch, rotate-now (Claude) |
| Refresh tokens | refresh |
| Unattended reauth | reauth |
| Utilization / quota | util |
| Pooled seats across accounts | CLIProxyAPI (see /ops:ops-fleet) |
Aliases (compat): /ops:rotate → this skill (Claude-focused shortcuts).
/ops:rotate-setup → setup (wizard). /ops:account → same as this skill.
Providers
| Provider | Engine | Reauth | Util |
|---|---|---|---|
| Claude | scripts/account-rotation/rotate.mjs + staged enrollment |
signed stage/activate only | 5h/7d |
| Grok | slots + grok-cli-auth-proxy |
device-code + Google (dcli); residential egress cascade | weekly / 429 |
| OpenAI / Codex | codex-rotate when present |
OAuth bridge | usage best-effort |
| Factory | adapter TBD / quota-feed seeds | native | quota-feed patterns |
| Cursor | adapter TBD | browser/device OAuth | plan limits if available |
CLIProxyAPI is the only supported multi-account path. It holds one OAuth seat file per account and answers locally; rotate.mjs writes those seat files as part of a rotation. The earlier relay backend (claude-relay-service) has been removed — it required a static bearer token in settings.json for every session. For Grok, multi-seat round-robin lives on grok-cli-auth-proxy.
Router (bin/ops-accounts)
Always prefer:
PLUGIN_ROOT="${CLAUDE_PLUGIN_ROOT:-$(ls -d "$HOME/.claude/plugins/cache/ops-marketplace/ops"/*/ 2>/dev/null | sort -V | tail -1)}"
"$PLUGIN_ROOT/bin/ops-accounts" <cmd> …
| Command | Action |
|---|---|
status / list |
All configured providers (no secrets) |
util [claude|grok|all] |
Quota / utilization best-effort |
switch claude / rotate-now |
Claude keychain rotate (force-rotate / rotate.mjs) |
switch grok |
Next SuperGrok seat (grok-rotate switch) |
refresh [all|claude|grok] |
Keepalive / RT refresh |
reauth claude <email> |
Fails closed with staged-enrollment handoff |
reauth grok <email> |
Device reauth with residential cascade env |
setup / setup claude |
Claude direct auth is disabled; staged enrollment required |
setup grok |
Add/reauth SuperGrok seat |
seats |
Local multi-provider seat-state |
gateway |
Local OpenAI-compat gateway: status/start/path/self-test/config |
Claude setup / OAuth
When $ARGUMENTS is setup, setup claude, or this skill is invoked via
ops-rotate-setup alias: follow the full wizard in
skills/ops-rotate-setup/SKILL.md. That file
remains the detailed Claude setup procedure; this skill is the entrypoint.
Claude day-2 ops (status/rotate-now/list/reauth) also match
skills/ops-rotate/SKILL.md — treat that as Claude detail appendix.
Local seat-state
"$PLUGIN_ROOT/bin/ops-accounts" seats status
"$PLUGIN_ROOT/bin/ops-accounts" seats import-claude-config
node "$PLUGIN_ROOT/scripts/account-rotation/seat-state.mjs" toggle claude <email> false
File: $CLAUDE_PLUGIN_DATA_DIR/account-rotation/seat-state.json (or OPS_ACCOUNTS_STATE_PATH).
Grok notes
- CLI models often use
base_url→ host OAuth proxy → SuperGrok seats. grok-rotate/auth.jsonis the SuperGrok seat set; keep auth-slots in sync after reauth.- Reauth egress: EFG SOCKS (
GROK_REAUTH_SOCKS) → Bright Data tiers via
scripts/account-rotation/grok-reauth-egress.sh(residential cascade). - Proxy RR status:
curl -sS http://127.0.0.1:31845/accounts(no tokens).
Rules
- Never print tokens, cookies, OTP codes, or vault dumps.
- Never write real emails into committed files.
- Prefer
bin/ops-accountsover ad-hoc host paths. - A missing CLIProxyAPI is not a failure — single-seat rotation works without it.
- Dead RT →
reauth, never a relay install. - Background long OAuth (Rule 4).
Phase map
0 contract + this skill · 1 Claude parity · 2 CLIProxyAPI pool · 3 Grok complete ·
4 Codex+Factory · 5 Cursor · 6 companions · 7 host cutover · 8 local gateway
Version History
-
5751870
Current 2026-08-19 11:47
移除CRS中继模块，将CLIProxyAPI设为唯一多账号路径；重命名通用配置模块以去CRS化；更新路由逻辑直接使用OAuth凭证而非中继后端。
- 64bad13 2026-08-12 08:59
