ns-kiro-core 0.3.8 → 0.4.0

package/README.md

@@ -2,12 +2,13 @@
 
 The Kiro (AWS CodeWhisperer/Q) protocol, with no host types in it.
 
-This package is the shared half of
-[ns-kiro-provider](https://github.com/ngosangns/ns-kiro-provider): everything a
-Kiro client needs that is not specific to one coding agent.
+This package is the Kiro vendor core of
+[ns-bridge](https://github.com/ngosangns/ns-bridge): everything a Kiro client
+needs that is not specific to one coding agent.
 
-Published on npm as `ns-kiro-core`. Pulled in as a dependency by the two
-adapters below — not meant to be installed on its own.
+Published on npm as `ns-kiro-core`. Pulled in as a dependency by the Kiro host
+adapters — `@ngosangns/ns-pi-provider`, `ns-omp-provider-kiro`,
+`ns-dsh-llm-kiro` — not meant to be installed on its own.
 
 - **Endpoints** — SSO region to management/runtime host resolution.
 - **Model catalog** — the bootstrap list, the authenticated regional catalog,
@@ -29,6 +30,21 @@ adapters below — not meant to be installed on its own.
   retry ladder (transport timeouts, capacity pressure, request-rate windows, 403
   credential rotation, degenerate 200s).
 
+## Engine
+
+Since 0.4.0 the public entry points (`streamKiro`, `updateKiroModelsCache`, `fetchKiroUsage`, `refreshKiroToken`) run in the
+[`ns-bridge`](https://github.com/ngosangns/ns-bridge/tree/main/go) Go sidecar
+when a binary is installed ([`ns-bridge-bin`](https://www.npmjs.com/package/ns-bridge-bin),
+`NS_BRIDGE_BIN`, or `ns-bridge` on `PATH`), and in this package's TypeScript
+otherwise. `NS_BRIDGE_ENGINE=ts` (or `NS_BRIDGE_ENGINE_KIRO=ts`) keeps
+everything in-process; `…InProcess` exports always do. Per-process state
+(profile-ARN and region caches, the cache-read estimate, catalog refresh scheduling) stays in TypeScript and is carried across each call.
+
+The TypeScript implementation is now the fallback. A later major release is
+expected to slim this package to the facade, types and credential stores, with
+the protocol living in the binary only; nothing changes for callers of the
+exports above.
+
 ## The neutral seam
 
 `streamKiro` takes a request built from this package's own vocabulary and yields
@@ -51,7 +67,10 @@ for await (const event of streamKiro({
 ```
 
 An adapter owes two translations — host messages in, host stream events out —
-and nothing else. Block indexes are monotonic across the whole response,
+and nothing else; for Pi-family hosts and the Harness, `ns-bridge-core` already
+does both. `loginKiroFromSession` / `resolveKiroRequestCredentials` (session
+login and per-request credentials) and `toKiroModelForHost` (catalog entry to a
+host model) are the other pieces every host needs, so they live here too. Block indexes are monotonic across the whole response,
 including across an internal retry, so a host that cannot un-deliver a block
 still receives a coherent sequence; `canDiscardEmittedBlocks` tells the core
 which kind of host it is talking to.
@@ -69,6 +88,48 @@ sourced elsewhere:
 | `KiroResponseAssembler` | Content blocks, thinking, tool calls, text-dialect recovery, usage, stop reason |
 | `abortableDelay`, `createResponseHeaderDeadline`, `logCapacityEvent` | Transport timing |
 
+## What Kiro reports, and what it does not
+
+Measured 2026-09-06 against `claude-sonnet-5` in `us-east-1`. Recorded here so
+the questions are not re-opened from first principles.
+
+**Token counts: none.** Kiro's `usage` frame is a billing record —
+`{unit: "credit", usage: 0.0659}` — not token counts. `usage.input` is therefore
+derived from the `contextUsagePercentage` frame, and `usage.output` from a
+tiktoken estimate over what the model emitted. `usage.credits` carries the
+figure Kiro actually bills.
+
+**Per-token prices: none.** Kiro bills in credits and publishes no per-token
+rates, so every model's `cost` stays zero. `kiro-cli chat --list-models` does
+publish a relative billing weight, which the catalog picks up as
+`rateMultiplier` — 2.2 for `claude-opus-5` against 0.05 for `qwen3-coder-next`.
+It is absent when kiro-cli is not installed.
+
+**Prompt caching: real, but not controllable.** Kiro caches prompts server-side
+on its own: a repeated prefix billed ~0.035 credits against ~0.066 for a fresh
+one, and a changed prefix went straight back to the full price. There is no way
+to ask for it — every model's `additionalModelRequestFieldsSchema` sets
+`"additionalProperties": false` and allows only `thinking`/`output_config`/
+`max_tokens` (Claude) or `reasoning` (GPT), so a `cachePoint` or `cache_control`
+field is rejected rather than honoured. Kiro also reports no cache token counts.
+
+Reasoning effort is part of the cache key: changing it misses even when the
+prompt is byte-identical, and each effort level then warms its own entry.
+
+**Stop reasons: reported when Kiro sends one, inferred otherwise.** Kiro now
+closes a turn with a `metadataEvent` `stopReason` (`END_TURN` on every ordinary
+turn checked, 2026-10-08). `MAX_TOKENS` is reported as `length`;
+`CONTENT_FILTERED`, `MODEL_CONTEXT_WINDOW_EXCEEDED` (phrased
+`context_length_exceeded`) and `PAUSE_TURN` end the call with an error and no
+retry. Without a stop reason, a turn with no tool call that never carried a
+`contextUsagePercentage` frame is reported as `length`. That frame arrived in
+every case checked — a short reply, a ~5000-character one, a tool-call turn, a
+model with no effort schema, and a non-Claude model — so its absence does mark
+an abnormal turn rather than a normal short answer.
+
+Set `KIRO_DEBUG=1` to log the frames verbatim (`~/.ns-kiro-provider/logs/`) if
+any of this needs re-checking against a newer Kiro.
+
 ## Credit
 
 Ported from [pi-provider-kiro](https://github.com/mikeyobrien/pi-provider-kiro)

package/dist/endpoints.d.ts

@@ -4,6 +4,10 @@ export interface KiroEndpoints {
     runtime: string;
 }
 export declare function resolveApiRegion(ssoRegion: string | undefined): string;
+/** Overrides the runtime base URL; `{region}` is replaced with the region. */
+export declare const KIRO_RUNTIME_ENDPOINT_ENV = "KIRO_RUNTIME_ENDPOINT";
+/** Overrides the management base URL; `{region}` is replaced with the region. */
+export declare const KIRO_MANAGEMENT_ENDPOINT_ENV = "KIRO_MANAGEMENT_ENDPOINT";
 export declare function getKiroEndpoints(region: string): KiroEndpoints;
 /**
  * A Kiro profile is owned by one region and its ARN carries that region. The

package/dist/endpoints.js

@@ -23,11 +23,22 @@ export function resolveApiRegion(ssoRegion) {
         return "us-east-1";
     return API_REGION_MAP[ssoRegion] ?? ssoRegion;
 }
+/** Overrides the runtime base URL; `{region}` is replaced with the region. */
+export const KIRO_RUNTIME_ENDPOINT_ENV = "KIRO_RUNTIME_ENDPOINT";
+/** Overrides the management base URL; `{region}` is replaced with the region. */
+export const KIRO_MANAGEMENT_ENDPOINT_ENV = "KIRO_MANAGEMENT_ENDPOINT";
+function endpointOverride(name, region) {
+    const value = process.env[name]?.trim();
+    if (!value)
+        return undefined;
+    const url = value.replaceAll("{region}", region);
+    return url.endsWith("/") ? url : `${url}/`;
+}
 export function getKiroEndpoints(region) {
     return {
         region,
-        management: `https://management.${region}.kiro.dev/`,
-        runtime: `https://runtime.${region}.kiro.dev/`,
+        management: endpointOverride(KIRO_MANAGEMENT_ENDPOINT_ENV, region) ?? `https://management.${region}.kiro.dev/`,
+        runtime: endpointOverride(KIRO_RUNTIME_ENDPOINT_ENV, region) ?? `https://runtime.${region}.kiro.dev/`,
     };
 }
 /**

package/dist/endpoints.js.map

@@ -1 +1 @@
-{"version":3,"file":"endpoints.js","sourceRoot":"","sources":["../src/endpoints.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,sFAAsF;AAEtF,MAAM,cAAc,GAA2B;IAC7C,WAAW,EAAE,WAAW;IACxB,WAAW,EAAE,WAAW;IACxB,WAAW,EAAE,WAAW;IACxB,WAAW,EAAE,WAAW;IACxB,gBAAgB,EAAE,WAAW;IAC7B,gBAAgB,EAAE,WAAW;IAC7B,gBAAgB,EAAE,WAAW;IAC7B,gBAAgB,EAAE,WAAW;IAC7B,YAAY,EAAE,WAAW;IACzB,WAAW,EAAE,cAAc;IAC3B,WAAW,EAAE,cAAc;IAC3B,WAAW,EAAE,cAAc;IAC3B,YAAY,EAAE,cAAc;IAC5B,YAAY,EAAE,cAAc;IAC5B,YAAY,EAAE,cAAc;IAC5B,cAAc,EAAE,cAAc;CAC/B,CAAC;AAQF,MAAM,UAAU,gBAAgB,CAAC,SAA6B;IAC5D,IAAI,CAAC,SAAS;QAAE,OAAO,WAAW,CAAC;IACnC,OAAO,cAAc,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,OAAO;QACL,MAAM;QACN,UAAU,EAAE,sBAAsB,MAAM,YAAY;QACpD,OAAO,EAAE,mBAAmB,MAAM,YAAY;KAC/C,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CAAC,UAA8B;IACxE,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IAClC,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACxC,OAAO,MAAM,IAAI,2BAA2B,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,QAAgB;IACxD,IAAI,CAAC;QACH,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3E,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,OAAO,KAAK,YAAY,IAAI,OAAO,KAAK,SAAS,CAAC,IAAI,MAAM,KAAK,UAAU;YAAE,OAAO,MAAM,CAAC;QAChG,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}
+{"version":3,"file":"endpoints.js","sourceRoot":"","sources":["../src/endpoints.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,sFAAsF;AAEtF,MAAM,cAAc,GAA2B;IAC7C,WAAW,EAAE,WAAW;IACxB,WAAW,EAAE,WAAW;IACxB,WAAW,EAAE,WAAW;IACxB,WAAW,EAAE,WAAW;IACxB,gBAAgB,EAAE,WAAW;IAC7B,gBAAgB,EAAE,WAAW;IAC7B,gBAAgB,EAAE,WAAW;IAC7B,gBAAgB,EAAE,WAAW;IAC7B,YAAY,EAAE,WAAW;IACzB,WAAW,EAAE,cAAc;IAC3B,WAAW,EAAE,cAAc;IAC3B,WAAW,EAAE,cAAc;IAC3B,YAAY,EAAE,cAAc;IAC5B,YAAY,EAAE,cAAc;IAC5B,YAAY,EAAE,cAAc;IAC5B,cAAc,EAAE,cAAc;CAC/B,CAAC;AAQF,MAAM,UAAU,gBAAgB,CAAC,SAA6B;IAC5D,IAAI,CAAC,SAAS;QAAE,OAAO,WAAW,CAAC;IACnC,OAAO,cAAc,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC;AAChD,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,MAAM,yBAAyB,GAAG,uBAAuB,CAAC;AACjE,iFAAiF;AACjF,MAAM,CAAC,MAAM,4BAA4B,GAAG,0BAA0B,CAAC;AAEvE,SAAS,gBAAgB,CAAC,IAAY,EAAE,MAAc;IACpD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;IACxC,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACjD,OAAO,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,OAAO;QACL,MAAM;QACN,UAAU,EAAE,gBAAgB,CAAC,4BAA4B,EAAE,MAAM,CAAC,IAAI,sBAAsB,MAAM,YAAY;QAC9G,OAAO,EAAE,gBAAgB,CAAC,yBAAyB,EAAE,MAAM,CAAC,IAAI,mBAAmB,MAAM,YAAY;KACtG,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CAAC,UAA8B;IACxE,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IAClC,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACxC,OAAO,MAAM,IAAI,2BAA2B,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,QAAgB;IACxD,IAAI,CAAC;QACH,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3E,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,OAAO,KAAK,YAAY,IAAI,OAAO,KAAK,SAAS,CAAC,IAAI,MAAM,KAAK,UAAU;YAAE,OAAO,MAAM,CAAC;QAChG,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/engine-ops.d.ts

@@ -0,0 +1,13 @@
+import { type SidecarError } from "ns-bridge-core/sidecar";
+/**
+ * The Kiro error a sidecar failure stands for, rebuilt from the class the Go
+ * vendor names. Anything else (a missing or crashed binary, a network failure)
+ * stays a SidecarError.
+ */
+export declare function kiroErrorFromSidecar(error: SidecarError): Error;
+/**
+ * Run `op` in the Go sidecar (with this process's profile caches) or
+ * in-process, per NS_BRIDGE_ENGINE(_KIRO). The sidecar's cache changes are
+ * folded back before the result is returned.
+ */
+export declare function runKiroOp<TResult>(op: string, request: () => Record<string, unknown>, inProcess: () => Promise<TResult>): Promise<TResult>;

package/dist/engine-ops.js

@@ -0,0 +1,51 @@
+// ABOUTME: Runs Kiro's one-shot operations (catalog refresh, usage, token refresh) on the selected engine,
+// ABOUTME: carrying the profile caches across and mapping sidecar failures back to Kiro's error classes.
+import { engineCall } from "ns-bridge-core/sidecar";
+import { KiroApiError } from "./errors.js";
+import { applyKiroProfileArnCacheChanges, applyKiroProfileRegionChanges, KiroManagementHttpError, snapshotKiroProfileArnCache, snapshotKiroProfileRegionCache, } from "./management.js";
+/**
+ * The Kiro error a sidecar failure stands for, rebuilt from the class the Go
+ * vendor names. Anything else (a missing or crashed binary, a network failure)
+ * stays a SidecarError.
+ */
+export function kiroErrorFromSidecar(error) {
+    switch (error.vendorError) {
+        case "KiroApiError":
+            return new KiroApiError(error.message, error.status ?? 0, error.reasonCode, error.retryAfterMs, error.providerAttempts);
+        case "KiroManagementHttpError":
+            return new KiroManagementHttpError(error.message, error.status ?? 0);
+        case "Error":
+            return new Error(error.message);
+        default:
+            return error;
+    }
+}
+/**
+ * Run `op` in the Go sidecar (with this process's profile caches) or
+ * in-process, per NS_BRIDGE_ENGINE(_KIRO). The sidecar's cache changes are
+ * folded back before the result is returned.
+ */
+export async function runKiroOp(op, request, inProcess) {
+    let ranInProcess = false;
+    const result = await engineCall({
+        vendor: "kiro",
+        op,
+        request: () => ({
+            ...request(),
+            profileArnCache: snapshotKiroProfileArnCache(),
+            profileRegions: snapshotKiroProfileRegionCache(),
+        }),
+        inProcess: async () => {
+            ranInProcess = true;
+            return (await inProcess());
+        },
+        mapError: kiroErrorFromSidecar,
+    });
+    if (ranInProcess || !result || typeof result !== "object")
+        return result;
+    const { kiroProfileArns, kiroProfileRegions, ...rest } = result;
+    applyKiroProfileArnCacheChanges(kiroProfileArns);
+    applyKiroProfileRegionChanges(kiroProfileRegions);
+    return rest;
+}
+//# sourceMappingURL=engine-ops.js.map

package/dist/engine-ops.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine-ops.js","sourceRoot":"","sources":["../src/engine-ops.ts"],"names":[],"mappings":"AAAA,2GAA2G;AAC3G,yGAAyG;AAEzG,OAAO,EAAE,UAAU,EAAqB,MAAM,wBAAwB,CAAC;AACvE,OAAO,EAAE,YAAY,EAA6B,MAAM,aAAa,CAAC;AACtE,OAAO,EACL,+BAA+B,EAC/B,6BAA6B,EAC7B,uBAAuB,EACvB,2BAA2B,EAC3B,8BAA8B,GAC/B,MAAM,iBAAiB,CAAC;AAEzB;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAmB;IACtD,QAAQ,KAAK,CAAC,WAAW,EAAE,CAAC;QAC1B,KAAK,cAAc;YACjB,OAAO,IAAI,YAAY,CACrB,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,MAAM,IAAI,CAAC,EACjB,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,YAAY,EAClB,KAAK,CAAC,gBAAoD,CAC3D,CAAC;QACJ,KAAK,yBAAyB;YAC5B,OAAO,IAAI,uBAAuB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;QACvE,KAAK,OAAO;YACV,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAClC;YACE,OAAO,KAAK,CAAC;IACjB,CAAC;AACH,CAAC;AAOD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,EAAU,EACV,OAAsC,EACtC,SAAiC;IAEjC,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAkD;QAC/E,MAAM,EAAE,MAAM;QACd,EAAE;QACF,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;YACd,GAAG,OAAO,EAAE;YACZ,eAAe,EAAE,2BAA2B,EAAE;YAC9C,cAAc,EAAE,8BAA8B,EAAE;SACjD,CAAC;QACF,SAAS,EAAE,KAAK,IAAI,EAAE;YACpB,YAAY,GAAG,IAAI,CAAC;YACpB,OAAO,CAAC,MAAM,SAAS,EAAE,CAA2B,CAAC;QACvD,CAAC;QACD,QAAQ,EAAE,oBAAoB;KAC/B,CAAC,CAAC;IACH,IAAI,YAAY,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC;IACzE,MAAM,EAAE,eAAe,EAAE,kBAAkB,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;IAChE,+BAA+B,CAAC,eAAe,CAAC,CAAC;IACjD,6BAA6B,CAAC,kBAAkB,CAAC,CAAC;IAClD,OAAO,IAAe,CAAC;AACzB,CAAC"}

package/dist/engine.d.ts

@@ -0,0 +1,17 @@
+import { type BridgeEngine, SidecarError } from "ns-bridge-core/sidecar";
+import { kiroErrorFromSidecar } from "./engine-ops.js";
+import type { KiroStreamRequest } from "./stream.js";
+import type { KiroStreamEvent } from "./types.js";
+/** The sidecar vendor id. */
+export declare const KIRO_SIDECAR_VENDOR = "kiro";
+/** The engine a Kiro turn runs on right now (NS_BRIDGE_ENGINE_KIRO, then NS_BRIDGE_ENGINE). */
+export declare function selectKiroEngine(): BridgeEngine;
+/**
+ * The JSON the Go vendor reads (go/internal/vendors/kiro StreamRequest): the
+ * request with its model id pre-resolved, plus the state this process holds.
+ * Throws whatever {@link resolveKiroModel} throws.
+ */
+export declare function toKiroSidecarRequest(request: KiroStreamRequest, conversationId: string): Record<string, unknown>;
+/** Run a turn on the selected engine; `inProcess` is the TypeScript core. */
+export declare function streamKiroOnEngine(request: KiroStreamRequest, inProcess: (request: KiroStreamRequest) => AsyncIterable<KiroStreamEvent>): AsyncIterable<KiroStreamEvent>;
+export { kiroErrorFromSidecar, SidecarError };

package/dist/engine.js

@@ -0,0 +1,111 @@
+// ABOUTME: Routes a Kiro turn to the ns-bridge Go sidecar or the in-process TypeScript core, carrying the
+// ABOUTME: per-process state (profile ARNs, cache estimates, catalog refresh) a one-turn sidecar cannot hold.
+import { engineStream, SidecarError, selectBridgeEngine } from "ns-bridge-core/sidecar";
+import { applyCacheEstimate } from "./cache-estimator.js";
+import { debugLog, formatSafeError } from "./debug.js";
+import { getKiroRegionFromProfileArn } from "./endpoints.js";
+import { kiroErrorFromSidecar } from "./engine-ops.js";
+import { applyKiroProfileArnCacheChanges, snapshotKiroProfileArnCache } from "./management.js";
+import { isCacheStale, resolveKiroModel, updateKiroModelsCache } from "./models.js";
+import { capacityRetryConfig, firstTokenTimeoutForModel, retryConfig } from "./retry.js";
+import { testProfileArnOverride } from "./stream.js";
+import { KIRO_USAGE_TRACKING_DISABLED } from "./usage-tracking.js";
+/** The sidecar vendor id. */
+export const KIRO_SIDECAR_VENDOR = "kiro";
+/** The engine a Kiro turn runs on right now (NS_BRIDGE_ENGINE_KIRO, then NS_BRIDGE_ENGINE). */
+export function selectKiroEngine() {
+    return selectBridgeEngine(KIRO_SIDECAR_VENDOR);
+}
+/**
+ * The JSON the Go vendor reads (go/internal/vendors/kiro StreamRequest): the
+ * request with its model id pre-resolved, plus the state this process holds.
+ * Throws whatever {@link resolveKiroModel} throws.
+ */
+export function toKiroSidecarRequest(request, conversationId) {
+    const { signal: _signal, ...wire } = request;
+    const kiroModelId = resolveKiroModel(request.model.id, request.model.kiroModelId);
+    const testProfileArn = testProfileArnOverride();
+    return {
+        ...wire,
+        model: { ...request.model, kiroModelId },
+        conversationId,
+        profileArnCache: snapshotKiroProfileArnCache(),
+        timeouts: {
+            firstTokenMs: request.model.firstTokenTimeout ?? firstTokenTimeoutForModel(request.model.id),
+            requestHeaderMs: retryConfig.requestHeaderTimeoutMs,
+        },
+        capacityRetry: { ...capacityRetryConfig },
+        ...(testProfileArn ? { testProfileArn } : {}),
+    };
+}
+/**
+ * Apply to sidecar events what the in-process core does with process state:
+ * fold profile ARNs back into the cache, estimate cache reads across turns,
+ * and refresh a stale model catalog in the background.
+ */
+async function* postProcess(events, request, conversationId) {
+    let pendingUsage;
+    for await (const event of events) {
+        if (event.type === "usage") {
+            pendingUsage = event;
+            continue;
+        }
+        if (event.type !== "done") {
+            yield event;
+            continue;
+        }
+        const { kiroProfileArns, kiroRuntimeRegion, kiroProfileArn, ...done } = event;
+        applyKiroProfileArnCacheChanges(kiroProfileArns);
+        const region = kiroRuntimeRegion ?? getKiroRegionFromProfileArn(kiroProfileArn) ?? request.model.region;
+        if (!process.env.VITEST && region && kiroProfileArn && isCacheStale(region)) {
+            updateKiroModelsCache(request.accessToken, region, kiroProfileArn).catch((error) => {
+                console.warn(`[kiro-core] Failed to refresh Kiro model catalog in ${region}: ${formatSafeError(error)}`);
+            });
+        }
+        if (pendingUsage) {
+            const { kiroWireCache, ...usageEvent } = pendingUsage;
+            if (!done.errorMessage) {
+                const estimatedRead = applyCacheEstimate(conversationId, usageEvent.usage, kiroWireCache ? { cacheReadInputTokens: 0 } : null, request.usageTracking ?? KIRO_USAGE_TRACKING_DISABLED);
+                if (estimatedRead > 0) {
+                    debugLog("usage.estimate", {
+                        conversationId,
+                        estimatedRead,
+                        input: usageEvent.usage.input,
+                        cacheRead: usageEvent.usage.cacheRead,
+                    });
+                }
+            }
+            pendingUsage = undefined;
+            yield usageEvent;
+        }
+        yield done;
+    }
+    if (pendingUsage) {
+        const { kiroWireCache: _wire, ...usageEvent } = pendingUsage;
+        yield usageEvent;
+    }
+}
+/** Run a turn on the selected engine; `inProcess` is the TypeScript core. */
+export function streamKiroOnEngine(request, inProcess) {
+    if (selectKiroEngine() === "ts" || !request.accessToken)
+        return inProcess(request);
+    const conversationId = request.sessionId ?? crypto.randomUUID();
+    let sidecarRequest;
+    try {
+        sidecarRequest = toKiroSidecarRequest(request, conversationId);
+    }
+    catch {
+        // An unknown model id: let the TypeScript core raise its own error.
+        return inProcess(request);
+    }
+    return engineStream({
+        vendor: KIRO_SIDECAR_VENDOR,
+        request: () => sidecarRequest,
+        inProcess: () => inProcess(request),
+        mapError: kiroErrorFromSidecar,
+        transform: (events) => postProcess(events, request, conversationId),
+        ...(request.signal ? { signal: request.signal } : {}),
+    });
+}
+export { kiroErrorFromSidecar, SidecarError };
+//# sourceMappingURL=engine.js.map

package/dist/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../src/engine.ts"],"names":[],"mappings":"AAAA,0GAA0G;AAC1G,8GAA8G;AAE9G,OAAO,EAAqB,YAAY,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC3G,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,EAAE,2BAA2B,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAE,+BAA+B,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AAC/F,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpF,OAAO,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzF,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAErD,OAAO,EAAE,4BAA4B,EAAE,MAAM,qBAAqB,CAAC;AAEnE,6BAA6B;AAC7B,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAE1C,+FAA+F;AAC/F,MAAM,UAAU,gBAAgB;IAC9B,OAAO,kBAAkB,CAAC,mBAAmB,CAAC,CAAC;AACjD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAA0B,EAAE,cAAsB;IACrF,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAC7C,MAAM,WAAW,GAAG,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAClF,MAAM,cAAc,GAAG,sBAAsB,EAAE,CAAC;IAChD,OAAO;QACL,GAAG,IAAI;QACP,KAAK,EAAE,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE,WAAW,EAAE;QACxC,cAAc;QACd,eAAe,EAAE,2BAA2B,EAAE;QAC9C,QAAQ,EAAE;YACR,YAAY,EAAE,OAAO,CAAC,KAAK,CAAC,iBAAiB,IAAI,yBAAyB,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5F,eAAe,EAAE,WAAW,CAAC,sBAAsB;SACpD;QACD,aAAa,EAAE,EAAE,GAAG,mBAAmB,EAAE;QACzC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9C,CAAC;AACJ,CAAC;AASD;;;;GAIG;AACH,KAAK,SAAS,CAAC,CAAC,WAAW,CACzB,MAAsC,EACtC,OAA0B,EAC1B,cAAsB;IAEtB,IAAI,YAA2C,CAAC;IAChD,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QACjC,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC3B,YAAY,GAAG,KAA0B,CAAC;YAC1C,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC1B,MAAM,KAAK,CAAC;YACZ,SAAS;QACX,CAAC;QACD,MAAM,EAAE,eAAe,EAAE,iBAAiB,EAAE,cAAc,EAAE,GAAG,IAAI,EAAE,GAAG,KAAyB,CAAC;QAClG,+BAA+B,CAAC,eAAe,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,iBAAiB,IAAI,2BAA2B,CAAC,cAAc,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;QACxG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,MAAM,IAAI,cAAc,IAAI,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5E,qBAAqB,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;gBACjF,OAAO,CAAC,IAAI,CAAC,uDAAuD,MAAM,KAAK,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC3G,CAAC,CAAC,CAAC;QACL,CAAC;QACD,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,EAAE,aAAa,EAAE,GAAG,UAAU,EAAE,GAAG,YAAY,CAAC;YACtD,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;gBACvB,MAAM,aAAa,GAAG,kBAAkB,CACtC,cAAc,EACd,UAAU,CAAC,KAAK,EAChB,aAAa,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAClD,OAAO,CAAC,aAAa,IAAI,4BAA4B,CACtD,CAAC;gBACF,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;oBACtB,QAAQ,CAAC,gBAAgB,EAAE;wBACzB,cAAc;wBACd,aAAa;wBACb,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,KAAK;wBAC7B,SAAS,EAAE,UAAU,CAAC,KAAK,CAAC,SAAS;qBACtC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YACD,YAAY,GAAG,SAAS,CAAC;YACzB,MAAM,UAA6B,CAAC;QACtC,CAAC;QACD,MAAM,IAAuB,CAAC;IAChC,CAAC;IACD,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,GAAG,UAAU,EAAE,GAAG,YAAY,CAAC;QAC7D,MAAM,UAA6B,CAAC;IACtC,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,kBAAkB,CAChC,OAA0B,EAC1B,SAAyE;IAEzE,IAAI,gBAAgB,EAAE,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,WAAW;QAAE,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC;IACnF,MAAM,cAAc,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;IAChE,IAAI,cAAuC,CAAC;IAC5C,IAAI,CAAC;QACH,cAAc,GAAG,oBAAoB,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,oEAAoE;QACpE,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,YAAY,CAA2C;QAC5D,MAAM,EAAE,mBAAmB;QAC3B,OAAO,EAAE,GAAG,EAAE,CAAC,cAAc;QAC7B,SAAS,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC;QACnC,QAAQ,EAAE,oBAAoB;QAC9B,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,EAAE,cAAc,CAAC;QACnE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtD,CAAC,CAAC;AACL,CAAC;AAED,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,CAAC"}

package/dist/host-auth.d.ts

@@ -0,0 +1,40 @@
+import { type KiroCredentials } from "./oauth.js";
+/** The subset of a host's login callbacks this flow uses (Pi's and OMP's both fit). */
+export interface KiroHostLoginCallbacks {
+    onProgress?: (message: string) => void;
+    onPrompt?: (prompt: {
+        message: string;
+        placeholder?: string;
+        allowEmpty?: boolean;
+        secret?: boolean;
+    }) => Promise<string>;
+}
+export declare const KIRO_NO_SESSION_MESSAGE: string;
+/**
+ * No browser flow of its own: every interactive method Kiro supports already
+ * lands a session in the kiro-cli store or the Kiro IDE token file, so this
+ * reads one of those (refreshing it when needed). The one credential with no
+ * browser step — an API key — is accepted directly.
+ */
+export declare function loginKiroFromSession(callbacks: KiroHostLoginCallbacks): Promise<KiroCredentials>;
+/** The token, region, and profile one request runs on. */
+export interface ResolvedKiroRequestCredentials {
+    accessToken: string;
+    region: string;
+    profileArn?: string;
+}
+/**
+ * Decide which credential a request or catalog fetch runs on.
+ *
+ * The key a host resolves for the provider is the session returned from
+ * `/login kiro` — but it can also be an unresolved env reference such as
+ * `$KIRO_API_KEY` verbatim, and Kiro answers a bogus bearer with a 403 the core
+ * then has to recover from. So a host key is trusted only when it is
+ * recognizably a Kiro credential; anything else defers to the store, which is
+ * where the session actually lives.
+ *
+ * The stored record also carries the region and the profile ARN, and passing
+ * the ARN skips the ListAvailableProfiles round trip that a social login cannot
+ * answer anyway.
+ */
+export declare function resolveKiroRequestCredentials(hostKey: string | undefined): Promise<ResolvedKiroRequestCredentials>;

package/dist/host-auth.js

@@ -0,0 +1,63 @@
+// ABOUTME: Login and per-request credential choice for agent hosts (Pi, OMP), over the
+// ABOUTME: sessions this machine already has. Host-neutral: hosts pass their own callbacks.
+import { resolveApiRegion } from "./endpoints.js";
+import { isApiKey, loginKiroWithApiKey, resolveKiroCredentials } from "./oauth.js";
+export const KIRO_NO_SESSION_MESSAGE = "No Kiro session found. Sign in with `kiro-cli login` (Builder ID, IAM Identity Center, Google, or GitHub), " +
+    "then run /login kiro again — or paste a Kiro API key below.";
+/**
+ * No browser flow of its own: every interactive method Kiro supports already
+ * lands a session in the kiro-cli store or the Kiro IDE token file, so this
+ * reads one of those (refreshing it when needed). The one credential with no
+ * browser step — an API key — is accepted directly.
+ */
+export async function loginKiroFromSession(callbacks) {
+    callbacks.onProgress?.("Looking for an existing Kiro session…");
+    const existing = await resolveKiroCredentials();
+    if (existing) {
+        callbacks.onProgress?.(`Using the ${existing.authMethod} session from kiro-cli.`);
+        return existing;
+    }
+    if (!callbacks.onPrompt)
+        throw new Error(KIRO_NO_SESSION_MESSAGE);
+    const apiKey = (await callbacks.onPrompt({
+        message: KIRO_NO_SESSION_MESSAGE,
+        placeholder: "ksk_…",
+        allowEmpty: true,
+        secret: true,
+    })).trim();
+    if (!apiKey)
+        throw new Error(KIRO_NO_SESSION_MESSAGE);
+    return loginKiroWithApiKey(apiKey, callbacks.onProgress);
+}
+/**
+ * Decide which credential a request or catalog fetch runs on.
+ *
+ * The key a host resolves for the provider is the session returned from
+ * `/login kiro` — but it can also be an unresolved env reference such as
+ * `$KIRO_API_KEY` verbatim, and Kiro answers a bogus bearer with a 403 the core
+ * then has to recover from. So a host key is trusted only when it is
+ * recognizably a Kiro credential; anything else defers to the store, which is
+ * where the session actually lives.
+ *
+ * The stored record also carries the region and the profile ARN, and passing
+ * the ARN skips the ListAvailableProfiles round trip that a social login cannot
+ * answer anyway.
+ */
+export async function resolveKiroRequestCredentials(hostKey) {
+    const stored = await resolveKiroCredentials();
+    const region = resolveApiRegion(stored?.region);
+    if (hostKey && (isApiKey(hostKey) || hostKey === stored?.access)) {
+        return { accessToken: hostKey, region, ...(stored?.profileArn ? { profileArn: stored.profileArn } : {}) };
+    }
+    if (stored) {
+        return {
+            accessToken: stored.access,
+            region,
+            ...(stored.profileArn ? { profileArn: stored.profileArn } : {}),
+        };
+    }
+    if (hostKey)
+        return { accessToken: hostKey, region };
+    throw new Error("Kiro credentials not set. Run `kiro-cli login`, or set KIRO_API_KEY to a `ksk_` API key.");
+}
+//# sourceMappingURL=host-auth.js.map

package/dist/host-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-auth.js","sourceRoot":"","sources":["../src/host-auth.ts"],"names":[],"mappings":"AAAA,uFAAuF;AACvF,4FAA4F;AAE5F,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAwB,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAazG,MAAM,CAAC,MAAM,uBAAuB,GAClC,6GAA6G;IAC7G,6DAA6D,CAAC;AAEhE;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,SAAiC;IAC1E,SAAS,CAAC,UAAU,EAAE,CAAC,uCAAuC,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,MAAM,sBAAsB,EAAE,CAAC;IAChD,IAAI,QAAQ,EAAE,CAAC;QACb,SAAS,CAAC,UAAU,EAAE,CAAC,aAAa,QAAQ,CAAC,UAAU,yBAAyB,CAAC,CAAC;QAClF,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,IAAI,CAAC,SAAS,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,CACb,MAAM,SAAS,CAAC,QAAQ,CAAC;QACvB,OAAO,EAAE,uBAAuB;QAChC,WAAW,EAAE,OAAO;QACpB,UAAU,EAAE,IAAI;QAChB,MAAM,EAAE,IAAI;KACb,CAAC,CACH,CAAC,IAAI,EAAE,CAAC;IACT,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACtD,OAAO,mBAAmB,CAAC,MAAM,EAAE,SAAS,CAAC,UAAU,CAAC,CAAC;AAC3D,CAAC;AASD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,OAA2B;IAE3B,MAAM,MAAM,GAAG,MAAM,sBAAsB,EAAE,CAAC;IAC9C,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChD,IAAI,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,KAAK,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;QACjE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAC5G,CAAC;IACD,IAAI,MAAM,EAAE,CAAC;QACX,OAAO;YACL,WAAW,EAAE,MAAM,CAAC,MAAM;YAC1B,MAAM;YACN,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChE,CAAC;IACJ,CAAC;IACD,IAAI,OAAO;QAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IACrD,MAAM,IAAI,KAAK,CAAC,0FAA0F,CAAC,CAAC;AAC9G,CAAC"}

package/dist/host-model.d.ts

@@ -0,0 +1,31 @@
+import { type KiroModel } from "./models.js";
+/** What a host's model carries back to the provider; Pi's and OMP's models both fit. */
+export interface KiroHostModel {
+    id: string;
+    name: string;
+    reasoning: boolean;
+    input: readonly ("text" | "image")[];
+    cost: {
+        input: number;
+        output: number;
+        cacheRead: number;
+        cacheWrite: number;
+    };
+    contextWindow?: number | null;
+    maxTokens?: number | null;
+    kiroModelId?: string;
+    kiroProfileArn?: string;
+    additionalModelRequestFieldsSchema?: Record<string, unknown>;
+}
+/**
+ * A host's registry keeps its own model, built from the config the provider
+ * registered, so the catalog entry is looked up again here rather than carried
+ * through: the effort ladder and the request-fields schema decide effort
+ * mapping, and a request must use the same ones the catalog advertised.
+ *
+ * Looks up the region's authenticated cache, not the static bootstrap list:
+ * models discovered only through the authenticated catalog would otherwise
+ * miss this lookup and fall through to guessing a wire id from the
+ * dash-spelled local `id`, which Kiro rejects as `INVALID_MODEL_ID`.
+ */
+export declare function toKiroModelForHost(model: KiroHostModel, region: string): KiroModel;

package/dist/host-model.js

@@ -0,0 +1,39 @@
+// ABOUTME: Rebuilds the core's model descriptor from the model a host hands back at request time.
+// ABOUTME: Shared by every agent host (Pi, OMP) whose registry keeps its own copy of the model.
+import { getCachedModels } from "./models.js";
+/**
+ * A host's registry keeps its own model, built from the config the provider
+ * registered, so the catalog entry is looked up again here rather than carried
+ * through: the effort ladder and the request-fields schema decide effort
+ * mapping, and a request must use the same ones the catalog advertised.
+ *
+ * Looks up the region's authenticated cache, not the static bootstrap list:
+ * models discovered only through the authenticated catalog would otherwise
+ * miss this lookup and fall through to guessing a wire id from the
+ * dash-spelled local `id`, which Kiro rejects as `INVALID_MODEL_ID`.
+ */
+export function toKiroModelForHost(model, region) {
+    const known = getCachedModels(region).find((candidate) => candidate.id === model.id);
+    return {
+        ...(known ?? {
+            id: model.id,
+            // No fallback to `model.id`: that dash-spelled local id is not a valid
+            // Kiro wire id. `""` is falsy, so `resolveKiroModel` runs its own
+            // cache/bootstrap/dot-normalize resolution instead of being
+            // short-circuited by a value that is really just `model.id` again.
+            kiroModelId: model.kiroModelId ?? "",
+            name: model.name,
+            reasoning: model.reasoning,
+            input: [...model.input],
+            cost: { ...model.cost },
+            contextWindow: model.contextWindow ?? 200_000,
+            maxTokens: model.maxTokens ?? 8_192,
+        }),
+        region,
+        ...(model.kiroProfileArn ? { profileArn: model.kiroProfileArn } : {}),
+        ...(model.additionalModelRequestFieldsSchema
+            ? { additionalModelRequestFieldsSchema: model.additionalModelRequestFieldsSchema }
+            : {}),
+    };
+}
+//# sourceMappingURL=host-model.js.map

package/dist/host-model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-model.js","sourceRoot":"","sources":["../src/host-model.ts"],"names":[],"mappings":"AAAA,kGAAkG;AAClG,gGAAgG;AAEhG,OAAO,EAAE,eAAe,EAAkB,MAAM,aAAa,CAAC;AAgB9D;;;;;;;;;;GAUG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAoB,EAAE,MAAc;IACrE,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC,CAAC;IACrF,OAAO;QACL,GAAG,CAAC,KAAK,IAAI;YACX,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,uEAAuE;YACvE,kEAAkE;YAClE,4DAA4D;YAC5D,mEAAmE;YACnE,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,EAAE;YACpC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC;YACvB,IAAI,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE;YACvB,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,OAAO;YAC7C,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,KAAK;SACpC,CAAC;QACF,MAAM;QACN,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,GAAG,CAAC,KAAK,CAAC,kCAAkC;YAC1C,CAAC,CAAC,EAAE,kCAAkC,EAAE,KAAK,CAAC,kCAAkC,EAAE;YAClF,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -4,21 +4,25 @@ export { applyCacheEstimate, resetCacheEstimatorForTests } from "./cache-estimat
 export { calculateKiroCost } from "./cost.js";
 export { debugEnabled, debugLog, formatSafeError, redactSensitiveText } from "./debug.js";
 export { buildKiroAdditionalModelRequestFields, clampKiroEffort, deriveKiroEffort, fallbackKiroEffort, getKiroEffortConfig, type KiroAdditionalModelRequestFields, type KiroEffortConfig, type KiroEffortField, mapEffortToKiroValue, } from "./effort.js";
-export { getKiroEndpoints, getKiroRegionFromEndpoint, getKiroRegionFromProfileArn, type KiroEndpoints, resolveApiRegion, } from "./endpoints.js";
+export { getKiroEndpoints, getKiroRegionFromEndpoint, getKiroRegionFromProfileArn, KIRO_MANAGEMENT_ENDPOINT_ENV, KIRO_RUNTIME_ENDPOINT_ENV, type KiroEndpoints, resolveApiRegion, } from "./endpoints.js";
+export { KIRO_SIDECAR_VENDOR, kiroErrorFromSidecar, SidecarError, selectKiroEngine, streamKiroOnEngine, toKiroSidecarRequest, } from "./engine.js";
+export { runKiroOp } from "./engine-ops.js";
 export { extractKiroReasonCode, KiroApiError, type KiroProviderAttempts, parseRetryAfterMs, } from "./errors.js";
 export { isKiroEventKey, KIRO_ERROR_MEMBERS, KIRO_EVENT_KEYS, type KiroErrorData, type KiroErrorKind, type KiroEventKey, type KiroWireEvent, type KiroWireUsage, lookupKiroErrorMember, parseKiroEvent, parseKiroEventByShape, parseKiroExceptionFrame, } from "./event-parser.js";
 export { isKiroToolStructureRule, KIRO_TOOL_STRUCTURE_RULES, KIRO_VALIDATION_MESSAGES, type KiroRepairResult, type KiroToolStructureRule, type KiroValidationError, type KiroValidationResult, KiroValidationRule, kiroConversationEntries, repairKiroConversation, SYNTHETIC_FAILED_TOOL_RESULT_TEXT, validateKiroConversation, validateKiroToolStructure, } from "./history-validator.js";
+export { KIRO_NO_SESSION_MESSAGE, type KiroHostLoginCallbacks, loginKiroFromSession, type ResolvedKiroRequestCredentials, resolveKiroRequestCredentials, } from "./host-auth.js";
+export { type KiroHostModel, toKiroModelForHost } from "./host-model.js";
 export { parseInvokeToolCalls } from "./invoke-tool-parser.js";
 export { getKiroCliCredentials, getKiroCliCredentialsAllowExpired, getKiroCliDbPath, getKiroCliModelRates, getKiroCliSocialToken, getKiroCliSocialTokenAllowExpired, type KiroModelRate, refreshViaKiroCli, saveKiroCliCredentials, } from "./kiro-cli.js";
 export { getKiroIdeCredentials, getKiroIdeCredentialsAllowExpired } from "./kiro-ide.js";
-export { fetchKiroModelCatalog, type KiroCatalogModel, type KiroManagementAuth, KiroManagementHttpError, resolveKiroProfileArn, } from "./management.js";
-export { applyEffortLadder, getCachedModels, isCacheStale, KIRO_MANAGEMENT_CACHE_PATH, KIRO_MODEL_IDS, type KiroModel, kiroModels, loadCachedModelIds, mapKiroCatalogModels, resolveKiroModel, updateKiroModelsCache, } from "./models.js";
-export { isApiKey, isExpired, type KiroAuthMethod, type KiroAuthSource, type KiroCredentials, kiroAuthHeaders, loginKiroWithApiKey, refreshKiroToken, resolveKiroAuthSource, resolveKiroCredentials, } from "./oauth.js";
+export { applyKiroProfileArnCacheChanges, applyKiroProfileRegionChanges, fetchKiroModelCatalog, type KiroCatalogModel, type KiroManagementAuth, KiroManagementHttpError, resolveKiroProfileArn, snapshotKiroProfileArnCache, snapshotKiroProfileRegionCache, } from "./management.js";
+export { applyEffortLadder, getCachedModels, isCacheStale, KIRO_MANAGEMENT_CACHE_PATH, KIRO_MODEL_IDS, type KiroModel, kiroModels, loadCachedModelIds, mapKiroCatalogModels, resolveKiroModel, updateKiroModelsCache, updateKiroModelsCacheInProcess, } from "./models.js";
+export { isApiKey, isExpired, KIRO_DESKTOP_REFRESH_ENDPOINT_ENV, KIRO_OIDC_ENDPOINT_ENV, type KiroAuthMethod, type KiroAuthSource, type KiroCredentials, kiroAuthHeaders, loginKiroWithApiKey, refreshKiroToken, resolveKiroAuthSource, resolveKiroCredentials, } from "./oauth.js";
 export { type BuildKiroRequestParams, type BuiltKiroRequest, buildKiroRequest, type KiroRequest, } from "./request-builder.js";
 export { type KiroAttemptSummary, type KiroCompletedResponse, KiroResponseAssembler, } from "./response-assembler.js";
 export { IDLE_TIMEOUT, type KiroEventStreamOptions, type KiroEventStreamOutcome, type KiroEventStreamReader, type KiroWireEventFrame, readKiroEventStream, } from "./response-stream.js";
 export { CAPACITY_PATTERN, isCapacityError, isNonRetryableBodyError, isTooBigError, KIRO_REASON_CODES, type KiroReasonCode, NON_RETRYABLE_BODY_PATTERNS, TOO_BIG_PATTERNS, } from "./retry.js";
-export { type KiroStreamRequest, resetProfileArnCache, streamKiro } from "./stream.js";
+export { type KiroStreamRequest, resetProfileArnCache, streamKiro, streamKiroInProcess } from "./stream.js";
 export { ThinkingTagParser } from "./thinking-parser.js";
 export { countTokens } from "./tokenizer.js";
 export { normalizeKiroToolName } from "./tool-name-aliases.js";
@@ -27,5 +31,5 @@ export { buildHistory, EMPTY_CONTENT_PLACEHOLDER, type KiroHistoryEntry, type Ki
 export { abortableDelay, createResponseHeaderDeadline, logCapacityEvent, type ResponseHeaderDeadline, } from "./transport.js";
 export { TRUNCATION_NOTICE, wasPreviousResponseTruncated } from "./truncation.js";
 export * from "./types.js";
-export { fetchKiroUsage, type KiroProviderUsage, type KiroProviderUsageBucket } from "./usage.js";
+export { fetchKiroUsage, fetchKiroUsageInProcess, type KiroProviderUsage, type KiroProviderUsageBucket, } from "./usage.js";
 export { DEFAULT_ESTIMATED_CACHE_TIMEOUT_MS, DEFAULT_USD_PER_CREDIT, estimateKiroCreditCost, KIRO_USAGE_TRACKING_DISABLED, type KiroUsageTracking, resolveKiroUsageTracking, } from "./usage-tracking.js";

package/dist/index.js

@@ -5,16 +5,20 @@ export { applyCacheEstimate, resetCacheEstimatorForTests } from "./cache-estimat
 export { calculateKiroCost } from "./cost.js";
 export { debugEnabled, debugLog, formatSafeError, redactSensitiveText } from "./debug.js";
 export { buildKiroAdditionalModelRequestFields, clampKiroEffort, deriveKiroEffort, fallbackKiroEffort, getKiroEffortConfig, mapEffortToKiroValue, } from "./effort.js";
-export { getKiroEndpoints, getKiroRegionFromEndpoint, getKiroRegionFromProfileArn, resolveApiRegion, } from "./endpoints.js";
+export { getKiroEndpoints, getKiroRegionFromEndpoint, getKiroRegionFromProfileArn, KIRO_MANAGEMENT_ENDPOINT_ENV, KIRO_RUNTIME_ENDPOINT_ENV, resolveApiRegion, } from "./endpoints.js";
+export { KIRO_SIDECAR_VENDOR, kiroErrorFromSidecar, SidecarError, selectKiroEngine, streamKiroOnEngine, toKiroSidecarRequest, } from "./engine.js";
+export { runKiroOp } from "./engine-ops.js";
 export { extractKiroReasonCode, KiroApiError, parseRetryAfterMs, } from "./errors.js";
 export { isKiroEventKey, KIRO_ERROR_MEMBERS, KIRO_EVENT_KEYS, lookupKiroErrorMember, parseKiroEvent, parseKiroEventByShape, parseKiroExceptionFrame, } from "./event-parser.js";
 export { isKiroToolStructureRule, KIRO_TOOL_STRUCTURE_RULES, KIRO_VALIDATION_MESSAGES, KiroValidationRule, kiroConversationEntries, repairKiroConversation, SYNTHETIC_FAILED_TOOL_RESULT_TEXT, validateKiroConversation, validateKiroToolStructure, } from "./history-validator.js";
+export { KIRO_NO_SESSION_MESSAGE, loginKiroFromSession, resolveKiroRequestCredentials, } from "./host-auth.js";
+export { toKiroModelForHost } from "./host-model.js";
 export { parseInvokeToolCalls } from "./invoke-tool-parser.js";
 export { getKiroCliCredentials, getKiroCliCredentialsAllowExpired, getKiroCliDbPath, getKiroCliModelRates, getKiroCliSocialToken, getKiroCliSocialTokenAllowExpired, refreshViaKiroCli, saveKiroCliCredentials, } from "./kiro-cli.js";
 export { getKiroIdeCredentials, getKiroIdeCredentialsAllowExpired } from "./kiro-ide.js";
-export { fetchKiroModelCatalog, KiroManagementHttpError, resolveKiroProfileArn, } from "./management.js";
-export { applyEffortLadder, getCachedModels, isCacheStale, KIRO_MANAGEMENT_CACHE_PATH, KIRO_MODEL_IDS, kiroModels, loadCachedModelIds, mapKiroCatalogModels, resolveKiroModel, updateKiroModelsCache, } from "./models.js";
-export { isApiKey, isExpired, kiroAuthHeaders, loginKiroWithApiKey, refreshKiroToken, resolveKiroAuthSource, resolveKiroCredentials, } from "./oauth.js";
+export { applyKiroProfileArnCacheChanges, applyKiroProfileRegionChanges, fetchKiroModelCatalog, KiroManagementHttpError, resolveKiroProfileArn, snapshotKiroProfileArnCache, snapshotKiroProfileRegionCache, } from "./management.js";
+export { applyEffortLadder, getCachedModels, isCacheStale, KIRO_MANAGEMENT_CACHE_PATH, KIRO_MODEL_IDS, kiroModels, loadCachedModelIds, mapKiroCatalogModels, resolveKiroModel, updateKiroModelsCache, updateKiroModelsCacheInProcess, } from "./models.js";
+export { isApiKey, isExpired, KIRO_DESKTOP_REFRESH_ENDPOINT_ENV, KIRO_OIDC_ENDPOINT_ENV, kiroAuthHeaders, loginKiroWithApiKey, refreshKiroToken, resolveKiroAuthSource, resolveKiroCredentials, } from "./oauth.js";
 // The stages `streamKiro` runs in order. Exported so a caller can drive one on
 // its own — building a request without sending it, or assembling blocks from
 // events it sourced elsewhere — which is what splitting them apart was for.
@@ -26,7 +30,7 @@ export { IDLE_TIMEOUT, readKiroEventStream, } from "./response-stream.js";
 // in hand (a persisted log line, say) instead of hardcoding copies of the
 // literals, which drift when the service adds a code.
 export { CAPACITY_PATTERN, isCapacityError, isNonRetryableBodyError, isTooBigError, KIRO_REASON_CODES, NON_RETRYABLE_BODY_PATTERNS, TOO_BIG_PATTERNS, } from "./retry.js";
-export { resetProfileArnCache, streamKiro } from "./stream.js";
+export { resetProfileArnCache, streamKiro, streamKiroInProcess } from "./stream.js";
 export { ThinkingTagParser } from "./thinking-parser.js";
 export { countTokens } from "./tokenizer.js";
 export { normalizeKiroToolName } from "./tool-name-aliases.js";
@@ -35,6 +39,6 @@ export { buildHistory, EMPTY_CONTENT_PLACEHOLDER, kiroToolNameAliases, normalize
 export { abortableDelay, createResponseHeaderDeadline, logCapacityEvent, } from "./transport.js";
 export { TRUNCATION_NOTICE, wasPreviousResponseTruncated } from "./truncation.js";
 export * from "./types.js";
-export { fetchKiroUsage } from "./usage.js";
+export { fetchKiroUsage, fetchKiroUsageInProcess, } from "./usage.js";
 export { DEFAULT_ESTIMATED_CACHE_TIMEOUT_MS, DEFAULT_USD_PER_CREDIT, estimateKiroCreditCost, KIRO_USAGE_TRACKING_DISABLED, resolveKiroUsageTracking, } from "./usage-tracking.js";
 //# sourceMappingURL=index.js.map