@sunerpy/opencode-kiro-auth 0.2.1 → 0.3.0

package/README.md

@@ -179,6 +179,12 @@ Thinking budgets map to Kiro's native `effort` field automatically:
 
 Details and the full JSON example: [docs/MODELS.md](docs/MODELS.md).
 
+> **Note:** OpenCode's per-agent thinking level (`--variant` / an agent's
+> `variant` in `oh-my-openagent.json`) isn't honored per agent by this
+> plugin — OpenCode consumes it upstream. Use the global `effort` key in
+> `kiro.json` instead. See
+> [Reasoning effort](docs/CONFIGURATION.md#reasoning-effort) for details.
+
 ## Troubleshooting
 
 Common issues — 403/AccessDeniedException with IAM Identity Center, "No

package/dist/core/auth/auth-handler.d.ts

@@ -17,8 +17,19 @@ export declare class AuthHandler {
     /** Ends the auth flow cleanly with no key prompt and no credential written. */
     private endWithoutCredential;
     /**
-     * Self-drawn account-removal flow returning method:'auto' + failed-callback in
-     * all cases, so the auth flow ends with no key prompt and NO credential written.
+     * Ends the flow after a successful deletion. If a healthy account (or any
+     * account with a usable access token) remains, returns a SUCCESS callback
+     * keyed on that account's token so OpenCode shows success and persists a
+     * still-valid credential. If nothing usable remains, falls back to a failed
+     * callback (nothing left to authorize with).
+     */
+    private endWithRemainingCredentialOrFailed;
+    /**
+     * Self-drawn account-removal flow. No-op paths (cancel / no accounts /
+     * not-confirmed / non-TTY) end with method:'auto' + a failed callback so no
+     * key prompt appears and no bogus success is shown. The actual-deletion path
+     * ends with a remaining-account success (or failed if none remain), so a
+     * successful removal is not misreported as "Failed to authorize".
      */
     private authorizeRemoveAccounts;
 }

package/dist/core/auth/auth-handler.js

@@ -215,8 +215,34 @@ export class AuthHandler {
         };
     }
     /**
-     * Self-drawn account-removal flow returning method:'auto' + failed-callback in
-     * all cases, so the auth flow ends with no key prompt and NO credential written.
+     * Ends the flow after a successful deletion. If a healthy account (or any
+     * account with a usable access token) remains, returns a SUCCESS callback
+     * keyed on that account's token so OpenCode shows success and persists a
+     * still-valid credential. If nothing usable remains, falls back to a failed
+     * callback (nothing left to authorize with).
+     */
+    endWithRemainingCredentialOrFailed(instructions) {
+        const remaining = this.accountManager?.getAccounts?.() ?? [];
+        const hasToken = (acc) => typeof acc?.accessToken === 'string' && acc.accessToken.length > 0;
+        const fallback = remaining.find((acc) => acc?.isHealthy && hasToken(acc)) ??
+            remaining.find((acc) => hasToken(acc));
+        if (fallback) {
+            const key = fallback.accessToken;
+            return {
+                url: '',
+                instructions: `${instructions} Using ${fallback.email || 'a remaining account'} for future requests.`,
+                method: 'auto',
+                callback: async () => ({ type: 'success', key })
+            };
+        }
+        return this.endWithoutCredential(`${instructions} No accounts remain — run \`opencode auth login\` to reauthenticate.`);
+    }
+    /**
+     * Self-drawn account-removal flow. No-op paths (cancel / no accounts /
+     * not-confirmed / non-TTY) end with method:'auto' + a failed callback so no
+     * key prompt appears and no bogus success is shown. The actual-deletion path
+     * ends with a remaining-account success (or failed if none remain), so a
+     * successful removal is not misreported as "Failed to authorize".
      */
     async authorizeRemoveAccounts() {
         const accounts = this.accountManager?.getAccounts?.() ?? [];
@@ -248,6 +274,6 @@ export class AuthHandler {
         this.accountManager.removeAccount(target);
         logger.log('Removed Kiro account', { email: target.email, accountId: String(target.id) });
         process.stdout.write('Account deleted.\n');
-        return this.endWithoutCredential(`Account deleted: ${target.email || 'unknown'}.`);
+        return this.endWithRemainingCredentialOrFailed(`Account deleted: ${target.email || 'unknown'}.`);
     }
 }

package/dist/core/request/request-handler.js

@@ -106,6 +106,28 @@ export class RequestHandler {
                 continue;
             }
             const sdkPrep = this.prepareSdkRequest(init?.body, model, auth, think, budget, showToast);
+            if (this.config.enable_log_effort_debug) {
+                try {
+                    logger.log('[effort-debug] request effort resolution', {
+                        model,
+                        effectiveModel: sdkPrep.effectiveModel,
+                        think,
+                        budget,
+                        resolvedEffort: sdkPrep.effort ?? 'undefined (not effort-capable or not thinking)',
+                        inboundBodyKeys: Object.keys(body),
+                        messagesCount: body.messages?.length,
+                        reasoningSubtree: {
+                            reasoningEffort: body.reasoningEffort,
+                            reasoning_effort: body.reasoning_effort,
+                            reasoning: body.reasoning,
+                            providerOptions: body.providerOptions,
+                            thinkingConfig: body.thinkingConfig,
+                            providerOptionsThinkingConfig: body.providerOptions?.thinkingConfig
+                        }
+                    });
+                }
+                catch (e) { }
+            }
             const apiTimestamp = this.config.enable_log_api_request ? logger.getTimestamp() : null;
             if (apiTimestamp) {
                 this.logSdkRequest(sdkPrep, acc, apiTimestamp);

package/dist/plugin/config/schema.d.ts

@@ -31,6 +31,13 @@ export declare const KiroConfigSchema: z.ZodObject<{
     usage_tracking_enabled: z.ZodDefault<z.ZodBoolean>;
     auto_sync_kiro_cli: z.ZodDefault<z.ZodBoolean>;
     enable_log_api_request: z.ZodDefault<z.ZodBoolean>;
+    /**
+     * Enable config-gated debug logging that records the inbound
+     * OpenAI-compatible request body shape (top-level keys, reasoning-related
+     * fields only — no message content) and the resolved Kiro effort for each
+     * request. Independent from `enable_log_api_request`; off by default.
+     */
+    enable_log_effort_debug: z.ZodDefault<z.ZodBoolean>;
     /**
      * Default effort level for thinking models. Controls reasoning depth.
      * When set, this overrides the automatic budget-based mapping.
@@ -57,6 +64,7 @@ export declare const KiroConfigSchema: z.ZodObject<{
     usage_tracking_enabled: boolean;
     auto_sync_kiro_cli: boolean;
     enable_log_api_request: boolean;
+    enable_log_effort_debug: boolean;
     auto_effort_mapping: boolean;
     $schema?: string | undefined;
     idc_start_url?: string | undefined;
@@ -81,6 +89,7 @@ export declare const KiroConfigSchema: z.ZodObject<{
     usage_tracking_enabled?: boolean | undefined;
     auto_sync_kiro_cli?: boolean | undefined;
     enable_log_api_request?: boolean | undefined;
+    enable_log_effort_debug?: boolean | undefined;
     effort?: "low" | "medium" | "high" | "xhigh" | "max" | undefined;
     auto_effort_mapping?: boolean | undefined;
 }>;

package/dist/plugin/config/schema.js

@@ -63,6 +63,13 @@ export const KiroConfigSchema = z.object({
     usage_tracking_enabled: z.boolean().default(true),
     auto_sync_kiro_cli: z.boolean().default(true),
     enable_log_api_request: z.boolean().default(false),
+    /**
+     * Enable config-gated debug logging that records the inbound
+     * OpenAI-compatible request body shape (top-level keys, reasoning-related
+     * fields only — no message content) and the resolved Kiro effort for each
+     * request. Independent from `enable_log_api_request`; off by default.
+     */
+    enable_log_effort_debug: z.boolean().default(false),
     /**
      * Default effort level for thinking models. Controls reasoning depth.
      * When set, this overrides the automatic budget-based mapping.
@@ -90,5 +97,6 @@ export const DEFAULT_CONFIG = {
     usage_tracking_enabled: true,
     auto_sync_kiro_cli: true,
     enable_log_api_request: false,
+    enable_log_effort_debug: false,
     auto_effort_mapping: true
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sunerpy/opencode-kiro-auth",
-  "version": "0.2.1",
+  "version": "0.3.0",
   "description": "OpenCode plugin for AWS Kiro (CodeWhisperer) providing access to Claude models",
   "type": "module",
   "main": "dist/index.js",