@javargasm/opencode-kiro-auth 0.4.0 → 0.5.0

package/README.md

@@ -146,6 +146,31 @@ bun test --watch
 bun run build
 ```
 
+### Debug logging
+
+Structured file logging is **opt-in** via the `KIRO_FILE_LOG` environment
+variable. When enabled, every turn of a conversation is written to
+`/tmp/kiro-logs/session-{id}.log` (full request/response bodies) plus a
+`session-{id}.last-request.json` dump of the most recent request. The id is
+derived from OpenCode's session id, so all turns of one conversation — including
+after a restart (`opencode -s <id>`) — share a single file.
+
+It is **off by default** because the logs are verbose and may contain sensitive
+prompt content. Enable it for the current shell:
+
+```bash
+export KIRO_FILE_LOG=1
+```
+
+To keep it always on, add it to your shell profile (macOS uses zsh):
+
+```bash
+echo 'export KIRO_FILE_LOG=1' >> ~/.zshrc && source ~/.zshrc
+```
+
+Accepted truthy values: `1`, `true`, `yes`, `on` (case-insensitive). Rebuild the
+plugin (`bun run build`) and restart OpenCode after changing it.
+
 ### Project Structure
 
 ```

package/dist/file-logger.d.ts

@@ -1,5 +1,16 @@
 /** Root directory for ALL Kiro file logs (session logs, debug log, request dumps). */
 export declare const LOG_DIR = "/tmp/kiro-logs";
+/**
+ * File logging (the structured `session-{id}.log` files under /tmp/kiro-logs,
+ * plus the `.last-request.json` dumps) is OPT-IN via the `KIRO_FILE_LOG` env
+ * var. It captures full request/response bodies — invaluable for debugging the
+ * Kiro wire protocol, but verbose and potentially containing sensitive prompt
+ * content — so it stays OFF unless explicitly enabled.
+ *
+ * Truthy values: `1`, `true`, `yes`, `on` (case-insensitive). Evaluated on
+ * every call so it can be toggled at runtime (and in tests).
+ */
+export declare function isFileLoggingEnabled(): boolean;
 /** Ensure LOG_DIR exists. Best-effort and memoized; safe to call on every write. */
 export declare function ensureLogDir(): void;
 /** File path of the session log active in the current async context, if any. */

package/dist/file-logger.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"file-logger.d.ts","sourceRoot":"","sources":["../src/file-logger.ts"],"names":[],"mappings":"AAaA,sFAAsF;AACtF,eAAO,MAAM,OAAO,mBAAmB,CAAC;AASxC,oFAAoF;AACpF,wBAAgB,YAAY,IAAI,IAAI,CAQnC;AA4BD,gFAAgF;AAChF,wBAAgB,qBAAqB,IAAI,MAAM,GAAG,IAAI,CAErD;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAIrE;AAgBD,MAAM,WAAW,aAAa;IAC5B,uDAAuD;IACvD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,iDAAiD;IACjD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAE3B,kDAAkD;IAClD,UAAU,CACR,IAAI,EAAE;QACJ,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC;QACd,aAAa,EAAE,MAAM,CAAC;QACtB,gBAAgB,EAAE,MAAM,CAAC;QACzB,OAAO,EAAE,MAAM,CAAC;QAChB,cAAc,EAAE,MAAM,CAAC;KACxB,EACD,WAAW,EAAE,MAAM,GAClB,IAAI,CAAC;IAER,wDAAwD;IACxD,gBAAgB,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAEjF,gEAAgE;IAChE,eAAe,CAAC,IAAI,EAAE;QACpB,UAAU,EAAE,MAAM,CAAC;QACnB,gBAAgB,EAAE,MAAM,CAAC;QACzB,KAAK,EAAE,OAAO,CAAC;QACf,aAAa,EAAE,MAAM,CAAC;QACtB,KAAK,EAAE,MAAM,CAAC;KACf,GAAG,IAAI,CAAC;IAET,kDAAkD;IAClD,YAAY,CAAC,IAAI,EAAE;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,EAAE,MAAM,CAAC;QACnB,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,aAAa,EAAE,MAAM,CAAC;KACvB,GAAG,IAAI,CAAC;IAET,6DAA6D;IAC7D,cAAc,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAE/F,4EAA4E;IAC5E,cAAc,CACZ,IAAI,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EACjE,KAAK,CAAC,EAAE,OAAO,GACd,IAAI,CAAC;CACT;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,aAAa,CAkDrE"}
+{"version":3,"file":"file-logger.d.ts","sourceRoot":"","sources":["../src/file-logger.ts"],"names":[],"mappings":"AAaA,sFAAsF;AACtF,eAAO,MAAM,OAAO,mBAAmB,CAAC;AAIxC;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,IAAI,OAAO,CAK9C;AAED,oFAAoF;AACpF,wBAAgB,YAAY,IAAI,IAAI,CAQnC;AA4BD,gFAAgF;AAChF,wBAAgB,qBAAqB,IAAI,MAAM,GAAG,IAAI,CAErD;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAIrE;AAgBD,MAAM,WAAW,aAAa;IAC5B,uDAAuD;IACvD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,iDAAiD;IACjD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAE3B,kDAAkD;IAClD,UAAU,CACR,IAAI,EAAE;QACJ,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC;QACd,aAAa,EAAE,MAAM,CAAC;QACtB,gBAAgB,EAAE,MAAM,CAAC;QACzB,OAAO,EAAE,MAAM,CAAC;QAChB,cAAc,EAAE,MAAM,CAAC;KACxB,EACD,WAAW,EAAE,MAAM,GAClB,IAAI,CAAC;IAER,wDAAwD;IACxD,gBAAgB,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAEjF,gEAAgE;IAChE,eAAe,CAAC,IAAI,EAAE;QACpB,UAAU,EAAE,MAAM,CAAC;QACnB,gBAAgB,EAAE,MAAM,CAAC;QACzB,KAAK,EAAE,OAAO,CAAC;QACf,aAAa,EAAE,MAAM,CAAC;QACtB,KAAK,EAAE,MAAM,CAAC;KACf,GAAG,IAAI,CAAC;IAET,kDAAkD;IAClD,YAAY,CAAC,IAAI,EAAE;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,EAAE,MAAM,CAAC;QACnB,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,aAAa,EAAE,MAAM,CAAC;KACvB,GAAG,IAAI,CAAC;IAET,6DAA6D;IAC7D,cAAc,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAE/F,4EAA4E;IAC5E,cAAc,CACZ,IAAI,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EACjE,KAAK,CAAC,EAAE,OAAO,GACd,IAAI,CAAC;CACT;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,aAAa,CAkDrE"}

package/dist/index.d.ts

@@ -1,4 +1,19 @@
 import type { Plugin } from "@opencode-ai/plugin";
+/**
+ * Headers injected into every model request so the gateway can tie the Kiro
+ * `conversationId` (and its log-file grouping) to OpenCode's STABLE session id.
+ *
+ * The gateway derives the conversationId from the `x-session-id` header (see
+ * `deriveLogSessionId` in server.ts). OpenCode's session id is stable for the
+ * life of a conversation AND survives a restart (`opencode -s <id>` resumes the
+ * same id), so the conversationId stays constant across turns and restarts —
+ * matching the real Kiro CLI. Without this the gateway fell back to an
+ * ephemeral header / first-message fingerprint, so the id changed on every
+ * restart and the logs scattered across files.
+ *
+ * Exported for testing. Returns `{}` when no session id is available.
+ */
+export declare function kiroSessionHeaders(sessionID: string | undefined): Record<string, string>;
 export declare const KiroPlugin: Plugin;
 declare const _default: {
     id: string;

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,MAAM,EAAuB,MAAM,qBAAqB,CAAC;AA0BvE,eAAO,MAAM,UAAU,EAAE,MAqUxB,CAAC;;;;;AAEF,wBAGyB"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,MAAM,EAAuB,MAAM,qBAAqB,CAAC;AA0BvE;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAIxF;AAED,eAAO,MAAM,UAAU,EAAE,MA+UxB,CAAC;;;;;AAEF,wBAGyB"}

package/dist/index.js

@@ -19,8 +19,12 @@ var __require = /* @__PURE__ */ createRequire(import.meta.url);
 // src/file-logger.ts
 import { appendFileSync, mkdirSync } from "node:fs";
 import { AsyncLocalStorage } from "node:async_hooks";
-function isEnabled() {
-  return true;
+function isFileLoggingEnabled() {
+  const v = process.env.KIRO_FILE_LOG;
+  if (!v)
+    return false;
+  const s = v.trim().toLowerCase();
+  return s === "1" || s === "true" || s === "yes" || s === "on";
 }
 function ensureLogDir() {
   if (dirEnsured)
@@ -43,7 +47,7 @@ function enterSessionLog(sessionId) {
   return id;
 }
 function writeLine(file, data) {
-  if (!isEnabled())
+  if (!isFileLoggingEnabled())
     return;
   ensureLogDir();
   const entry = {
@@ -2987,7 +2991,7 @@ ${currentContent}`;
             requestJsonChars: requestBody.length
           });
           log.debug(`[stream] req=${requestBody.length}c hist=${history.length} content=${currentContent.length}c profileArn=${!!profileArn}`);
-          if (log.isDebug()) {
+          if (isFileLoggingEnabled()) {
             try {
               ensureLogDir();
               __require("fs").writeFileSync(`${LOG_DIR}/session-${fileLog.sessionId}.last-request.json`, requestBody);
@@ -4602,6 +4606,9 @@ init_models();
 process.env.KIRO_LOG = process.env.KIRO_LOG || "debug";
 process.env.KIRO_LOG_FILE = process.env.KIRO_LOG_FILE || "/tmp/kiro-logs/session-gateway.log";
 var gatewayServer = null;
+function kiroSessionHeaders(sessionID) {
+  return typeof sessionID === "string" && sessionID.trim().length > 0 ? { "x-session-id": sessionID.trim() } : {};
+}
 var KiroPlugin = async (input) => {
   const client = input.client;
   const GATEWAY_PORT = 7438;
@@ -4618,6 +4625,12 @@ var KiroPlugin = async (input) => {
   await initGatewayAuth();
   const localPort = gatewayServer ? gatewayServer.port : GATEWAY_PORT;
   const hooks = {
+    "chat.headers": async (input2, output) => {
+      const headers = kiroSessionHeaders(input2?.sessionID);
+      if (output && output.headers) {
+        Object.assign(output.headers, headers);
+      }
+    },
     dispose: async () => {
       if (gatewayServer) {
         log.info("[opencode-kiro] Shutting down gateway server...");
@@ -4885,6 +4898,7 @@ var src_default = {
   server: KiroPlugin
 };
 export {
+  kiroSessionHeaders,
   src_default as default,
   KiroPlugin
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@javargasm/opencode-kiro-auth",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "description": "Kiro provider plugin for OpenCode: AWS Builder ID / Identity Center login and OpenAI compatible local gateway for CodeWhisperer streaming.",
   "type": "module",
   "license": "MIT",