@javargasm/opencode-kiro-auth 0.3.1 → 0.5.0

package/README.md

@@ -146,6 +146,31 @@ bun test --watch
 bun run build
 ```
 
+### Debug logging
+
+Structured file logging is **opt-in** via the `KIRO_FILE_LOG` environment
+variable. When enabled, every turn of a conversation is written to
+`/tmp/kiro-logs/session-{id}.log` (full request/response bodies) plus a
+`session-{id}.last-request.json` dump of the most recent request. The id is
+derived from OpenCode's session id, so all turns of one conversation — including
+after a restart (`opencode -s <id>`) — share a single file.
+
+It is **off by default** because the logs are verbose and may contain sensitive
+prompt content. Enable it for the current shell:
+
+```bash
+export KIRO_FILE_LOG=1
+```
+
+To keep it always on, add it to your shell profile (macOS uses zsh):
+
+```bash
+echo 'export KIRO_FILE_LOG=1' >> ~/.zshrc && source ~/.zshrc
+```
+
+Accepted truthy values: `1`, `true`, `yes`, `on` (case-insensitive). Rebuild the
+plugin (`bun run build`) and restart OpenCode after changing it.
+
 ### Project Structure
 
 ```

package/dist/debug.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"debug.d.ts","sourceRoot":"","sources":["../src/debug.ts"],"names":[],"mappings":"AAYA,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAgF3D,eAAO,MAAM,GAAG;iBACD,MAAM,SAAS,OAAO;gBACvB,MAAM,SAAS,OAAO;gBACtB,MAAM,SAAS,OAAO;iBACrB,MAAM,SAAS,OAAO;IACnC;4DACwD;;CAEzD,CAAC;AAWF,wBAAgB,YAAY,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAa9C"}
+{"version":3,"file":"debug.d.ts","sourceRoot":"","sources":["../src/debug.ts"],"names":[],"mappings":"AAaA,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAqF3D,eAAO,MAAM,GAAG;iBACD,MAAM,SAAS,OAAO;gBACvB,MAAM,SAAS,OAAO;gBACtB,MAAM,SAAS,OAAO;iBACrB,MAAM,SAAS,OAAO;IACnC;4DACwD;;CAEzD,CAAC;AAWF,wBAAgB,YAAY,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAa9C"}

package/dist/event-parser.d.ts

@@ -50,10 +50,19 @@ export type KiroStreamEvent = {
     data: {
         usage: number;
     };
+} | {
+    type: "metadata";
+    data: {
+        stopReason?: string;
+    };
 };
 /** Find the matching `}` for the `{` at `start`. Returns -1 if incomplete. */
 export declare function findJsonEnd(text: string, start: number): number;
 export declare function parseKiroEventMulti(parsed: Record<string, unknown>): KiroStreamEvent[];
+export declare function detectEventStreamException(buffer: string): {
+    type: string;
+    message?: string;
+} | null;
 export declare function parseKiroEvents(buffer: string): {
     events: KiroStreamEvent[];
     remaining: string;

package/dist/event-parser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"event-parser.d.ts","sourceRoot":"","sources":["../src/event-parser.ts"],"names":[],"mappings":"AASA,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACjC;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,CAAA;CAAE,GAC7F;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GACjD;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,IAAI,EAAE;QAAE,IAAI,EAAE,OAAO,CAAA;KAAE,CAAA;CAAE,GAChD;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,IAAI,EAAE;QAAE,sBAAsB,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GAClE;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GACjE;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACxC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GACxE;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GAC5D;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAC;AAElD,8EAA8E;AAC9E,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CA2B/D;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,eAAe,EAAE,CA4ItF;AAqCD,wBAAgB,eAAe,CAC7B,MAAM,EAAE,MAAM,GACb;IAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAqElD"}
+{"version":3,"file":"event-parser.d.ts","sourceRoot":"","sources":["../src/event-parser.ts"],"names":[],"mappings":"AASA,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACjC;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,CAAA;CAAE,GAC7F;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GACjD;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,IAAI,EAAE;QAAE,IAAI,EAAE,OAAO,CAAA;KAAE,CAAA;CAAE,GAChD;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,IAAI,EAAE;QAAE,sBAAsB,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GAClE;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GACjE;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACxC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GACxE;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GAC5D;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GAC7C;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAC;AAExD,8EAA8E;AAC9E,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CA2B/D;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,eAAe,EAAE,CAmJtF;AAmDD,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,MAAM,GACb;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAqB3C;AAED,wBAAgB,eAAe,CAC7B,MAAM,EAAE,MAAM,GACb;IAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAkFlD"}

package/dist/file-logger.d.ts

@@ -1,47 +1,85 @@
-/** Log the full request body sent to Kiro API. */
-export declare function logRequest(meta: {
-    endpoint: string;
-    model: string;
-    historyLength: number;
-    requestBodyChars: number;
-    attempt: number;
-    conversationId: string;
-}, requestBody: string): void;
-/** Log a parsed response event from the Kiro stream. */
-export declare function logResponseEvent(event: {
-    type: string;
-    data: unknown;
-    eventSeq: number;
-}): void;
-/** Log the final response summary when the stream completes. */
-export declare function logResponseDone(meta: {
-    stopReason: string;
-    emittedToolCalls: number;
-    usage: unknown;
-    contentBlocks: number;
-    model: string;
-}): void;
-/** Log HTTP error responses from the Kiro API. */
-export declare function logHttpError(meta: {
-    status: number;
-    statusText: string;
-    body: string;
-    endpoint: string;
-    model: string;
-    attempt: number;
-    historyLength: number;
-}): void;
-/** Log stream-level errors (timeouts, parse errors, etc). */
-export declare function logStreamError(meta: {
-    error: string;
-    context: string;
-    model: string;
-    attempt: number;
-}): void;
-/** Log caught exceptions from the top-level try/catch. */
-export declare function logCaughtError(meta: {
-    stopReason: string;
-    errorMessage: string;
-    model: string;
-}): void;
+/** Root directory for ALL Kiro file logs (session logs, debug log, request dumps). */
+export declare const LOG_DIR = "/tmp/kiro-logs";
+/**
+ * File logging (the structured `session-{id}.log` files under /tmp/kiro-logs,
+ * plus the `.last-request.json` dumps) is OPT-IN via the `KIRO_FILE_LOG` env
+ * var. It captures full request/response bodies — invaluable for debugging the
+ * Kiro wire protocol, but verbose and potentially containing sensitive prompt
+ * content — so it stays OFF unless explicitly enabled.
+ *
+ * Truthy values: `1`, `true`, `yes`, `on` (case-insensitive). Evaluated on
+ * every call so it can be toggled at runtime (and in tests).
+ */
+export declare function isFileLoggingEnabled(): boolean;
+/** Ensure LOG_DIR exists. Best-effort and memoized; safe to call on every write. */
+export declare function ensureLogDir(): void;
+/** File path of the session log active in the current async context, if any. */
+export declare function currentSessionLogFile(): string | null;
+/**
+ * Bind the given session id to the CURRENT async context (and its
+ * continuations). Every subsequent `log.*()` in this request — including those
+ * in the detached streamKiro IIFE and the SSE ReadableStream, both created
+ * synchronously after this call — routes to `session-{id}.log`. Each request
+ * runs in its own async context, so concurrent requests don't interfere.
+ * Returns the sanitized id actually used.
+ */
+export declare function enterSessionLog(sessionId: string | undefined): string;
+export interface SessionLogger {
+    /** Absolute path of the file this logger writes to. */
+    readonly file: string;
+    /** Sanitized session id used in the filename. */
+    readonly sessionId: string;
+    /** Log the full request body sent to Kiro API. */
+    logRequest(meta: {
+        endpoint: string;
+        model: string;
+        historyLength: number;
+        requestBodyChars: number;
+        attempt: number;
+        conversationId: string;
+    }, requestBody: string): void;
+    /** Log a parsed response event from the Kiro stream. */
+    logResponseEvent(event: {
+        type: string;
+        data: unknown;
+        eventSeq: number;
+    }): void;
+    /** Log the final response summary when the stream completes. */
+    logResponseDone(meta: {
+        stopReason: string;
+        emittedToolCalls: number;
+        usage: unknown;
+        contentBlocks: number;
+        model: string;
+    }): void;
+    /** Log HTTP error responses from the Kiro API. */
+    logHttpError(meta: {
+        status: number;
+        statusText: string;
+        body: string;
+        endpoint: string;
+        model: string;
+        attempt: number;
+        historyLength: number;
+    }): void;
+    /** Log stream-level errors (timeouts, parse errors, etc). */
+    logStreamError(meta: {
+        error: string;
+        context: string;
+        model: string;
+        attempt: number;
+    }): void;
+    /** Log caught exceptions from the top-level try/catch (with full error). */
+    logCaughtError(meta: {
+        stopReason: string;
+        errorMessage: string;
+        model: string;
+    }, error?: unknown): void;
+}
+/**
+ * Create a logger bound to a single session. Pass a stable id (conversation
+ * id, client session id, …) so all turns share one file. When no id is given
+ * every logger gets its own `session-default.log`.
+ */
+export declare function createSessionLogger(sessionId?: string): SessionLogger;
 //# sourceMappingURL=file-logger.d.ts.map

package/dist/file-logger.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"file-logger.d.ts","sourceRoot":"","sources":["../src/file-logger.ts"],"names":[],"mappings":"AA4CA,kDAAkD;AAClD,wBAAgB,UAAU,CAAC,IAAI,EAAE;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;CACxB,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAM5B;AAED,wDAAwD;AACxD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,OAAO,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,IAAI,CAOP;AAED,gEAAgE;AAChE,wBAAgB,eAAe,CAAC,IAAI,EAAE;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,KAAK,EAAE,OAAO,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;CACf,GAAG,IAAI,CAKP;AAED,kDAAkD;AAClD,wBAAgB,YAAY,CAAC,IAAI,EAAE;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;CACvB,GAAG,IAAI,CAKP;AAED,6DAA6D;AAC7D,wBAAgB,cAAc,CAAC,IAAI,EAAE;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB,GAAG,IAAI,CAKP;AAED,0DAA0D;AAC1D,wBAAgB,cAAc,CAAC,IAAI,EAAE;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;CACf,GAAG,IAAI,CAKP"}
+{"version":3,"file":"file-logger.d.ts","sourceRoot":"","sources":["../src/file-logger.ts"],"names":[],"mappings":"AAaA,sFAAsF;AACtF,eAAO,MAAM,OAAO,mBAAmB,CAAC;AAIxC;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,IAAI,OAAO,CAK9C;AAED,oFAAoF;AACpF,wBAAgB,YAAY,IAAI,IAAI,CAQnC;AA4BD,gFAAgF;AAChF,wBAAgB,qBAAqB,IAAI,MAAM,GAAG,IAAI,CAErD;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAIrE;AAgBD,MAAM,WAAW,aAAa;IAC5B,uDAAuD;IACvD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,iDAAiD;IACjD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAE3B,kDAAkD;IAClD,UAAU,CACR,IAAI,EAAE;QACJ,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC;QACd,aAAa,EAAE,MAAM,CAAC;QACtB,gBAAgB,EAAE,MAAM,CAAC;QACzB,OAAO,EAAE,MAAM,CAAC;QAChB,cAAc,EAAE,MAAM,CAAC;KACxB,EACD,WAAW,EAAE,MAAM,GAClB,IAAI,CAAC;IAER,wDAAwD;IACxD,gBAAgB,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAEjF,gEAAgE;IAChE,eAAe,CAAC,IAAI,EAAE;QACpB,UAAU,EAAE,MAAM,CAAC;QACnB,gBAAgB,EAAE,MAAM,CAAC;QACzB,KAAK,EAAE,OAAO,CAAC;QACf,aAAa,EAAE,MAAM,CAAC;QACtB,KAAK,EAAE,MAAM,CAAC;KACf,GAAG,IAAI,CAAC;IAET,kDAAkD;IAClD,YAAY,CAAC,IAAI,EAAE;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,EAAE,MAAM,CAAC;QACnB,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,aAAa,EAAE,MAAM,CAAC;KACvB,GAAG,IAAI,CAAC;IAET,6DAA6D;IAC7D,cAAc,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAE/F,4EAA4E;IAC5E,cAAc,CACZ,IAAI,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EACjE,KAAK,CAAC,EAAE,OAAO,GACd,IAAI,CAAC;CACT;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,aAAa,CAkDrE"}

package/dist/index.d.ts

@@ -1,4 +1,19 @@
 import type { Plugin } from "@opencode-ai/plugin";
+/**
+ * Headers injected into every model request so the gateway can tie the Kiro
+ * `conversationId` (and its log-file grouping) to OpenCode's STABLE session id.
+ *
+ * The gateway derives the conversationId from the `x-session-id` header (see
+ * `deriveLogSessionId` in server.ts). OpenCode's session id is stable for the
+ * life of a conversation AND survives a restart (`opencode -s <id>` resumes the
+ * same id), so the conversationId stays constant across turns and restarts —
+ * matching the real Kiro CLI. Without this the gateway fell back to an
+ * ephemeral header / first-message fingerprint, so the id changed on every
+ * restart and the logs scattered across files.
+ *
+ * Exported for testing. Returns `{}` when no session id is available.
+ */
+export declare function kiroSessionHeaders(sessionID: string | undefined): Record<string, string>;
 export declare const KiroPlugin: Plugin;
 declare const _default: {
     id: string;

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,MAAM,EAAuB,MAAM,qBAAqB,CAAC;AA0BvE,eAAO,MAAM,UAAU,EAAE,MAqUxB,CAAC;;;;;AAEF,wBAGyB"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,MAAM,EAAuB,MAAM,qBAAqB,CAAC;AA0BvE;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAIxF;AAED,eAAO,MAAM,UAAU,EAAE,MA+UxB,CAAC;;;;;AAEF,wBAGyB"}