feat: add kimi and minimax oauth login

Author: elkaix

.changeset/kimi-minimax-oauth-login.md

@@ -0,0 +1,5 @@
+---
+"@pymodel/pythinker-code": minor
+---
+
+Add OAuth sign-in for Kimi For Coding and MiniMax (global and China) to the login flow.

apps/pythinker-code/src/tui/commands/prompts.ts

@@ -2,6 +2,7 @@ import {
   buildPlatformOptions,
   catalogModelToAlias,
   catalogProviderIdFromPlatformValue,
+  isOAuthPlatformId,
   DEFAULT_CATALOG_URL,
   resolveCatalogImport,
   type Catalog,
@@ -11,6 +12,11 @@ import {
   type ThinkingEffort,
 } from '@pymodel/pythinker-code-sdk';
 import {
+  KIMI_CODING_PROVIDER_ID,
+  KIMI_OAUTH_PLATFORM_ID,
+  MINIMAX_OAUTH_PLATFORM_ID_CN,
+  MINIMAX_OAUTH_PLATFORM_ID_GLOBAL,
+  minimaxCodingProviderId,
   OPENAI_CODEX_OAUTH_PLATFORM_ID,
   capabilitiesForModel,
   OPENAI_CODEX_PROVIDER_ID,
@@ -37,6 +43,22 @@ import { fetchCatalogOrBuiltIn } from '#/utils/catalog-fetch';
 import { formatErrorMessage } from '#/tui/utils/event-payload';
 import type { SlashCommandHost } from './dispatch';
 
+/** Maps an OAuth-type platform picker value to the provider id it writes into config. */
+function oauthPlatformConfigProviderId(platformValue: string): string | undefined {
+  switch (platformValue) {
+    case OPENAI_CODEX_OAUTH_PLATFORM_ID:
+      return OPENAI_CODEX_PROVIDER_ID;
+    case KIMI_OAUTH_PLATFORM_ID:
+      return KIMI_CODING_PROVIDER_ID;
+    case MINIMAX_OAUTH_PLATFORM_ID_GLOBAL:
+      return minimaxCodingProviderId('global');
+    case MINIMAX_OAUTH_PLATFORM_ID_CN:
+      return minimaxCodingProviderId('cn');
+    default:
+      return undefined;
+  }
+}
+
 export async function promptPlatformSelection(
   host: SlashCommandHost,
 ): Promise<PlatformSelection | undefined> {
@@ -48,15 +70,10 @@ export async function promptPlatformSelection(
 
   const config = await host.harness.getConfig({ reload: true });
   const providers = buildPlatformOptions(catalog)
-    .filter((option) =>
-      method === 'oauth'
-        ? option.value === OPENAI_CODEX_OAUTH_PLATFORM_ID
-        : option.value !== OPENAI_CODEX_OAUTH_PLATFORM_ID,
-    )
+    .filter((option) => (method === 'oauth' ? isOAuthPlatformId(option.value) : !isOAuthPlatformId(option.value)))
     .map((option): PlatformSelectorProvider => {
       const providerId = catalogProviderIdFromPlatformValue(option.value) ?? option.value;
-      const configProviderId =
-        option.value === OPENAI_CODEX_OAUTH_PLATFORM_ID ? OPENAI_CODEX_PROVIDER_ID : providerId;
+      const configProviderId = oauthPlatformConfigProviderId(option.value) ?? providerId;
       const configured = config.providers[configProviderId];
       return {
         value: option.value,

packages/node-sdk/src/index.ts

@@ -50,7 +50,12 @@ export { buildSkillSlashCommands, isUserActivatableSkill } from '#/skill-command
 export type { SkillSlashCommand, SkillSlashCommands } from '#/skill-commands';
 
 export { formatErrorMessage, formatErrorPayload } from '#/error-format';
-export { buildPlatformOptions, resolvePlatformOption, type PlatformOption } from '#/login/platform-options';
+export {
+  buildPlatformOptions,
+  isOAuthPlatformId,
+  resolvePlatformOption,
+  type PlatformOption,
+} from '#/login/platform-options';
 export {
   CATALOG_PLATFORM_VALUE_PREFIX,
   catalogProviderIdFromPlatformValue,

packages/node-sdk/src/login/flows.ts

@@ -1,20 +1,34 @@
 import {
+  applyKimiOAuthConfig,
+  applyMiniMaxOAuthConfig,
   applyOpenAICodexOAuthConfig,
   applyOpenPlatformConfig,
+  fetchKimiCodingModels,
   fetchOpenAICodexModels,
   fetchOpenPlatformModels,
   filterModelsByPrefix,
   getOpenPlatformById,
+  miniMaxCodingModels,
+  minimaxCodingProviderId,
+  minimaxRegionLabel,
+  KIMI_CODING_PROVIDER_ID,
+  KIMI_OAUTH_PLATFORM_ID,
+  MINIMAX_OAUTH_PLATFORM_ID_CN,
+  MINIMAX_OAUTH_PLATFORM_ID_GLOBAL,
   OPENAI_CODEX_OAUTH_PLATFORM_ID,
   OPENAI_CODEX_PROVIDER_ID,
+  OAuthAccessDeniedError,
   OpenAICodexApiError,
   OpenPlatformApiError,
-  OAuthAccessDeniedError,
+  runKimiOAuthFlow,
+  runMiniMaxOAuthFlow,
   runOpenAICodexOAuthFlow,
-  type ProviderModelInfo,
-  type PythinkerConfigShape,
+  type DeviceCodeInfo,
+  type MiniMaxRegion,
   type OpenAICodexModelInfo,
   type OpenPlatformDefinition,
+  type ProviderModelInfo,
+  type PythinkerConfigShape,
 } from '@pymodel/pythinker-code-oauth';
 
 import {
@@ -29,7 +43,7 @@ import type { PythinkerConfig } from '#/types';
 
 import { formatErrorMessage } from '../error-format';
 import { catalogProviderIdFromPlatformValue } from './platform-values';
-import type { LoginUi } from './types';
+import type { LoginProgressSpinnerHandle, LoginUi } from './types';
 
 export async function runLogin(ui: LoginUi): Promise<boolean> {
   const selection = await ui.promptPlatformSelection();
@@ -43,6 +57,15 @@ export async function runLogin(ui: LoginUi): Promise<boolean> {
   if (platformId === OPENAI_CODEX_OAUTH_PLATFORM_ID) {
     return handleOpenAICodexOAuthLogin(ui);
   }
+  if (platformId === KIMI_OAUTH_PLATFORM_ID) {
+    return handleKimiOAuthLogin(ui);
+  }
+  if (platformId === MINIMAX_OAUTH_PLATFORM_ID_GLOBAL) {
+    return handleMiniMaxOAuthLogin(ui, 'global');
+  }
+  if (platformId === MINIMAX_OAUTH_PLATFORM_ID_CN) {
+    return handleMiniMaxOAuthLogin(ui, 'cn');
+  }
   const platform = getOpenPlatformById(platformId);
   return platform === undefined ? false : handleOpenPlatformLogin(ui, platform);
 }
@@ -262,6 +285,158 @@ async function handleOpenAICodexOAuthLogin(ui: LoginUi): Promise<boolean> {
   }
 }
 
+async function handleKimiOAuthLogin(ui: LoginUi): Promise<boolean> {
+  const controller = new AbortController();
+  let committing = false;
+  const cancelLogin = (): void => {
+    if (!committing) controller.abort();
+  };
+  ui.cancelInFlight = cancelLogin;
+  try {
+    let spinner: LoginProgressSpinnerHandle | undefined;
+    let tokens;
+    try {
+      tokens = await runKimiOAuthFlow({
+        signal: controller.signal,
+        onCodeReady: (info: DeviceCodeInfo) => {
+          ui.openBrowser(info.verificationUriComplete ?? info.verificationUri);
+          spinner = ui.showLoginProgressSpinner(
+            `Waiting for authorization — open ${info.verificationUri} and enter code ${info.userCode}`,
+          );
+        },
+      });
+    } catch (error) {
+      spinner?.stop({ ok: false, label: 'Sign-in failed.' });
+      if (controller.signal.aborted) return false;
+      if (error instanceof OAuthAccessDeniedError) {
+        ui.showError(`Kimi login cancelled: ${formatErrorMessage(error)}`);
+        return false;
+      }
+      ui.showError(`Kimi login failed: ${formatErrorMessage(error)}`);
+      return false;
+    }
+    spinner?.stop({ ok: true, label: 'Authorized.' });
+
+    let models: ProviderModelInfo[];
+    try {
+      models = await fetchKimiCodingModels(tokens.accessToken, tokens.deviceId, fetch, controller.signal);
+    } catch (error) {
+      if (controller.signal.aborted) return false;
+      ui.showError(`Failed to list Kimi For Coding models: ${formatErrorMessage(error)}`);
+      return false;
+    }
+    if (models.length === 0) {
+      ui.showError('No models available for Kimi For Coding.');
+      return false;
+    }
+
+    const picked = await ui.promptModelSelectionForOpenPlatform(models, {
+      id: KIMI_CODING_PROVIDER_ID,
+      name: 'Kimi For Coding',
+    });
+    if (picked === undefined) return false;
+    const selectedModel = models.find((model) => model.id === picked.model.id);
+    if (selectedModel === undefined) return false;
+
+    controller.signal.throwIfAborted();
+    const current = await ui.harness.getConfig({ reload: true });
+    controller.signal.throwIfAborted();
+    const next = cloneConfig(current);
+    applyKimiOAuthConfig(next as PythinkerConfigShape, {
+      accessToken: tokens.accessToken,
+      refreshToken: tokens.refreshToken,
+      deviceId: tokens.deviceId,
+      models,
+      selectedModel,
+      thinking: picked.effort !== 'off',
+      effort: picked.effort === 'off' || picked.effort === 'on' ? undefined : picked.effort,
+    });
+    committing = true;
+    await ui.harness.replaceConfigSections({
+      providers: next.providers,
+      models: next.models,
+      defaultModel: next.defaultModel,
+      thinking: next.thinking,
+    });
+    await ui.refreshConfigAfterLogin();
+    ui.track('login', { provider: KIMI_CODING_PROVIDER_ID, method: 'oauth' });
+    ui.showStatus(`Setup complete: Kimi For Coding · ${selectedModel.id}`);
+    return true;
+  } finally {
+    if (ui.cancelInFlight === cancelLogin) ui.cancelInFlight = undefined;
+  }
+}
+
+async function handleMiniMaxOAuthLogin(ui: LoginUi, region: MiniMaxRegion): Promise<boolean> {
+  const controller = new AbortController();
+  let committing = false;
+  const cancelLogin = (): void => {
+    if (!committing) controller.abort();
+  };
+  ui.cancelInFlight = cancelLogin;
+  const regionLabel = minimaxRegionLabel(region);
+  try {
+    let spinner: LoginProgressSpinnerHandle | undefined;
+    let tokens;
+    try {
+      tokens = await runMiniMaxOAuthFlow(region, {
+        signal: controller.signal,
+        onCodeReady: (info: DeviceCodeInfo) => {
+          ui.openBrowser(info.verificationUriComplete ?? info.verificationUri);
+          spinner = ui.showLoginProgressSpinner(
+            `Waiting for authorization — open ${info.verificationUri} and enter code ${info.userCode}`,
+          );
+        },
+      });
+    } catch (error) {
+      spinner?.stop({ ok: false, label: 'Sign-in failed.' });
+      if (controller.signal.aborted) return false;
+      if (error instanceof OAuthAccessDeniedError) {
+        ui.showError(`${regionLabel} login cancelled: ${formatErrorMessage(error)}`);
+        return false;
+      }
+      ui.showError(`${regionLabel} login failed: ${formatErrorMessage(error)}`);
+      return false;
+    }
+    spinner?.stop({ ok: true, label: 'Authorized.' });
+
+    const providerId = minimaxCodingProviderId(region);
+    const models = [...miniMaxCodingModels()];
+    const picked = await ui.promptModelSelectionForOpenPlatform(models, {
+      id: providerId,
+      name: regionLabel,
+    });
+    if (picked === undefined) return false;
+    const selectedModel = models.find((model) => model.id === picked.model.id);
+    if (selectedModel === undefined) return false;
+
+    controller.signal.throwIfAborted();
+    const current = await ui.harness.getConfig({ reload: true });
+    controller.signal.throwIfAborted();
+    const next = cloneConfig(current);
+    applyMiniMaxOAuthConfig(next as PythinkerConfigShape, region, {
+      accessToken: tokens.accessToken,
+      refreshToken: tokens.refreshToken,
+      selectedModel,
+      thinking: picked.effort !== 'off',
+      effort: picked.effort === 'off' || picked.effort === 'on' ? undefined : picked.effort,
+    });
+    committing = true;
+    await ui.harness.replaceConfigSections({
+      providers: next.providers,
+      models: next.models,
+      defaultModel: next.defaultModel,
+      thinking: next.thinking,
+    });
+    await ui.refreshConfigAfterLogin();
+    ui.track('login', { provider: providerId, method: 'oauth' });
+    ui.showStatus(`Setup complete: ${regionLabel} · ${selectedModel.id}`);
+    return true;
+  } finally {
+    if (ui.cancelInFlight === cancelLogin) ui.cancelInFlight = undefined;
+  }
+}
+
 function cloneConfig(config: PythinkerConfig): PythinkerConfig {
   return {
     ...config,

packages/node-sdk/src/login/platform-options.ts

@@ -1,9 +1,28 @@
-import { OPENAI_CODEX_OAUTH_PLATFORM_ID, OPEN_PLATFORMS } from '@pymodel/pythinker-code-oauth';
+import {
+  KIMI_OAUTH_PLATFORM_ID,
+  MINIMAX_OAUTH_PLATFORM_ID_CN,
+  MINIMAX_OAUTH_PLATFORM_ID_GLOBAL,
+  minimaxRegionLabel,
+  OPENAI_CODEX_OAUTH_PLATFORM_ID,
+  OPEN_PLATFORMS,
+} from '@pymodel/pythinker-code-oauth';
 
 import { resolveCatalogImport, type Catalog, type CatalogProviderEntry } from '#/catalog';
 
 import { CATALOG_PLATFORM_VALUE_PREFIX } from './platform-values';
 
+/** OAuth-type platform ids offered directly by pythinker-code (no catalog entry). */
+const OAUTH_PLATFORM_IDS: ReadonlySet<string> = new Set([
+  OPENAI_CODEX_OAUTH_PLATFORM_ID,
+  KIMI_OAUTH_PLATFORM_ID,
+  MINIMAX_OAUTH_PLATFORM_ID_GLOBAL,
+  MINIMAX_OAUTH_PLATFORM_ID_CN,
+]);
+
+export function isOAuthPlatformId(value: string): boolean {
+  return OAUTH_PLATFORM_IDS.has(value);
+}
+
 export interface PlatformOption {
   readonly value: string;
   readonly label: string;
@@ -40,8 +59,28 @@ export function buildPlatformOptions(catalog: Catalog): readonly PlatformOption[
       label: 'OpenAI Codex (OAuth)',
       description: 'OAuth',
     },
+    {
+      value: KIMI_OAUTH_PLATFORM_ID,
+      label: 'Kimi For Coding (OAuth)',
+      description: 'OAuth',
+    },
+    {
+      value: MINIMAX_OAUTH_PLATFORM_ID_GLOBAL,
+      label: minimaxRegionLabel('global'),
+      description: 'OAuth',
+    },
+    {
+      value: MINIMAX_OAUTH_PLATFORM_ID_CN,
+      label: minimaxRegionLabel('cn'),
+      description: 'OAuth',
+    },
   ];
-  const seen = new Set<string>([OPENAI_CODEX_OAUTH_PLATFORM_ID]);
+  const seen = new Set<string>([
+    OPENAI_CODEX_OAUTH_PLATFORM_ID,
+    KIMI_OAUTH_PLATFORM_ID,
+    MINIMAX_OAUTH_PLATFORM_ID_GLOBAL,
+    MINIMAX_OAUTH_PLATFORM_ID_CN,
+  ]);
 
   for (const featured of FEATURED_CATALOG_PROVIDERS) {
     const entry = catalog[featured.id];