opencode-kimi-subscription

Use your Kimi Code (Moonshot) subscription in OpenCode: sign in with Kimi's OAuth device flow and spend your subscription instead of pay-as-you-go API tokens.

OpenCode's built-in "Kimi For Coding" provider only covers pay-as-you-go API keys; this plugin adds the subscription path. It puts a "Sign in with Kimi (subscription)" method in opencode auth login, registers the kimi-code provider and its models automatically, and keeps the access token fresh. It obtains its own device token and never touches ~/.kimi-code, so the official kimi CLI keeps working alongside it.

Install

Add the plugin to your OpenCode config (~/.config/opencode/opencode.json or a project opencode.json); OpenCode installs npm plugins automatically at startup.

{
  "$schema": "https://opencode.ai/config.json",
  "plugin": ["opencode-kimi-subscription"]
}

Then sign in:

opencode auth login      # choose "Kimi Code (subscription)", approve in the browser
opencode                 # /models → Kimi Code (subscription) → K3

That's the only manual step; you don't need to add a provider block.

How it works

Derived from the official kimi CLI (v0.26.0):

API (OpenAI-compatible)	https://api.kimi.com/coding/v1 — POST /chat/completions
OAuth host	https://auth.kimi.com
Login	Device Authorization Grant (RFC 8628): POST /api/oauth/device_authorization → approve at kimi.com/code/authorize_device → poll POST /api/oauth/token
Refresh	POST /api/oauth/token (grant_type=refresh_token); rotates the refresh token
Client ID	17e5f671-d194-4dfb-9706-5516cb48c098

1. config hook — injects the kimi-code provider (@ai-sdk/openai-compatible) and the model list, unless you've defined one yourself.
2. auth hook — drives the device flow, stores the token in OpenCode's auth store, and returns a fetch that injects Authorization: Bearer …, refreshes the token when < 7.5 min remain or on a 401/403, and pins temperature: 1 (these models reject any other value).
3. Model discovery — each request refreshes an on-disk cache (~/.cache/opencode-kimi-subscription/models.json, 6 h TTL) from the live /models list; the config hook reads that cache at startup.

Configuration

Environment variables (rarely needed):

Var	Default
KIMI_CODE_BASE_URL	https://api.kimi.com/coding/v1
KIMI_CODE_OAUTH_HOST / KIMI_OAUTH_HOST	https://auth.kimi.com

To override models or the provider name, define provider.kimi-code yourself in opencode.json — the plugin won't overwrite it.

Debugging

The plugin logs its auth lifecycle into OpenCode's log stream (service kimi-subscription); failures that need action also raise a TUI toast.

opencode --print-logs --log-level DEBUG
# or: tail -f ~/.local/share/opencode/log/opencode.log | grep kimi

Common issues:

• not logged in — run opencode auth login and pick Kimi Code (subscription).
• Refresh fails / re-login needed — the 30-day refresh token lapsed; log in again.
• invalid temperature — a custom provider is sending temperature ≠ 1; remove it and let the plugin manage the request.
• Inspect the stored token with opencode auth list; remove it with opencode auth logout kimi-code.