ns-omp-provider-kiro 0.1.0

package/LICENSE

@@ -0,0 +1,22 @@
+MIT License
+
+Copyright (c) 2026 ngosangns
+Copyright (c) 2025-2026 Mike O'Brien (pi-provider-kiro)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,45 @@
+# ns-omp-provider-kiro
+
+Kiro (AWS CodeWhisperer/Q) models in [OMP](https://github.com/can1357/oh-my-pi).
+
+Not on npm yet — install from a clone of
+[ns-kiro-provider](https://github.com/ngosangns/ns-kiro-provider):
+
+```bash
+pnpm install && pnpm -r build
+omp plugin install ./packages/omp-provider-kiro
+```
+
+Sign in once with kiro-cli — Builder ID, IAM Identity Center, Google, GitHub, or
+enterprise OIDC all work, because kiro-cli does them:
+
+```bash
+kiro-cli login
+```
+
+Then, in OMP:
+
+```
+/login kiro
+/model
+```
+
+`/login kiro` picks up the kiro-cli session and refreshes it when it expires,
+writing the refresh back so both tools stay on the same token. With no session
+on the machine it prompts for a Kiro API key (`ksk_…`) instead.
+
+`/model` lists whatever your account's region actually serves: the catalog is
+fetched from Kiro's management API and cached for an hour, so a model added
+upstream shows up without a release here.
+
+## Notes
+
+- Reasoning effort maps onto Kiro's own ladder per model — `xhigh` and `max`
+  exist only where the model advertises them, and a request for more thinking
+  than a model offers is clamped rather than rejected.
+- Usage (`/settings`) reports the account's Kiro credit balance.
+- `KIRO_API_KEY` is read as a fallback when no session is stored.
+- `KIRO_DEBUG=1` writes a full request/response trace to
+  `~/.ns-kiro-provider/logs/kiro-debug.log`, with credentials redacted.
+
+Part of [ns-kiro-provider](https://github.com/ngosangns/ns-kiro-provider).

package/dist/auth.d.ts

@@ -0,0 +1,31 @@
+import type { OAuthCredentials, OAuthLoginCallbacks } from "@oh-my-pi/pi-ai";
+/**
+ * v0.1 establishes no browser flow of its own. Every interactive method Kiro
+ * supports already lands a session in the kiro-cli store or the Kiro IDE token
+ * file, so this reads one of those and refreshes it. The one credential with no
+ * browser step — an API key — is accepted directly.
+ */
+export declare function loginKiro(callbacks: OAuthLoginCallbacks): Promise<OAuthCredentials>;
+export declare function refreshKiroCredentials(credentials: OAuthCredentials): Promise<OAuthCredentials>;
+export declare function getKiroApiKey(credentials: OAuthCredentials): string;
+/** The token, region, and profile one request runs on. */
+export interface ResolvedKiroRequestCredentials {
+    accessToken: string;
+    region: string;
+    profileArn?: string;
+}
+/**
+ * Decide which credential a request or catalog fetch runs on.
+ *
+ * The key OMP resolves for the provider is the session this package returned
+ * from `/login kiro` — but it is also `$KIRO_API_KEY` verbatim when that
+ * variable is unset, and Kiro answers a bogus bearer with a 403 the core then
+ * has to recover from. So a host key is trusted only when it is recognizably a
+ * Kiro credential; anything else defers to the store, which is where the
+ * session actually lives.
+ *
+ * The stored record also carries the region and the profile ARN, and passing
+ * the ARN skips the ListAvailableProfiles round trip that a social login cannot
+ * answer anyway.
+ */
+export declare function resolveRequestCredentials(hostKey: string | undefined): Promise<ResolvedKiroRequestCredentials>;

package/dist/index.d.ts

@@ -0,0 +1,6 @@
+import type { ExtensionAPI } from "@oh-my-pi/pi-coding-agent";
+export { toKiroMessages, toKiroTools } from "./messages.js";
+export { toOmpModelConfig } from "./models.js";
+export { streamKiroForOmp } from "./stream.js";
+export { kiroUsageProvider, toUsageReport } from "./usage.js";
+export default function (pi: ExtensionAPI): void;