Failed login with Identity Center

Empieza reproduciendo el problema con kiro-cli logout, kiro-cli login y kiro-cli chat "hello"; después, compara la salida detallada que muestra que faltan tokens de IDP y sociales. Traza cómo se transfiere el inicio de sesión de IAM Identity Center al comando de chat. Se considera completado cuando un inicio de sesión de Identity Center inicia una sesión de chat funcional, en lugar de volver inmediatamente al shell.

Checks

• I have searched github.com/aws/amazon-q-developer-cli/issues and there are no duplicates of my issue
• I have run q doctor in the affected terminal session
• I have run q restart and replicated the issue again

Operating system

Linux 6.8.12-18-pve - Debian GNU/Linux 13 (trixie)

Expected behaviour

Never seen a working kiro-cli chat but my assumption is a chat session like the Kiro IDE. I have never seen it work.

Actual behaviour

Here is a session where I'm logged in under my active working Identity Center login that works with the Kiro IDE. In the kiro-cli I am getting back the models that access via the API but the idp token is missing. I'm not sure what to do next for this.

mcgarrah@agent-dev:~$ kiro-cli logout
You are now logged out
Run kiro-cli login to log back in to Kiro CLI
mcgarrah@agent-dev:~$ kiro-cli login
✔ Select login method · Use with Your Organization
✔ Enter Start URL · https://xxxxxxxx.awsapps.com/start
✔ Enter Region · us-east-1

Confirm the following code in the browser
Code: XXXX-XXXX

Open this URL: https://xxxxxxxx.awsapps.com/start/#/device?user_code=XXXX-XXXX
Device authorized

Logged in successfully


mcgarrah@agent-dev:~$ kiro-cli whoami
Logged in with IAM Identity Center (https://xxxxxxxx.awsapps.com/start)
Email: [email protected]

Profile:
QDevProfile-us-east-1
arn:aws:codewhisperer:us-east-1:123456789012:profile/XXXXAARDXXXX


mcgarrah@agent-dev:~$ kiro-cli chat --list-models
Available models (* = default):

* auto                 1.00x credits      Models chosen by task for optimal usage and consistent quality
  claude-opus-5        2.20x credits      Experimental preview of Claude Opus 5 model with 1M context window
  claude-sonnet-5      1.30x credits      Claude Sonnet 5 model with 1M context window
  claude-opus-4.8      2.20x credits      Claude Opus 4.8 model with 1M context window
  gpt-5.6-sol          2.40x credits      Experimental preview of OpenAI GPT 5.6 Sol with 272k context window
  gpt-5.6-terra        1.20x credits      Experimental preview of OpenAI GPT 5.6 Terra with 272k context window
  gpt-5.6-luna         0.60x credits      Experimental preview of OpenAI GPT 5.6 Luna with 272k context window
  claude-opus-4.7      2.20x credits      Claude Opus 4.7 model with 1M context window
  claude-opus-4.6      2.20x credits      Claude Opus 4.6 model with 1M context window
  claude-sonnet-4.6    1.30x credits      Claude Sonnet 4.6 model with 1M context window
  claude-opus-4.5      2.20x credits      Claude Opus 4.5 model
  claude-sonnet-4.5    1.30x credits      Claude Sonnet 4.5 model
  claude-sonnet-4      1.30x credits      Hybrid reasoning and coding for regular use
  claude-haiku-4.5     0.40x credits      The latest Claude Haiku model
  deepseek-3.2         0.25x credits      Experimental preview of DeepSeek V3.2
  minimax-m2.5         0.25x credits      MiniMax M2.5 model
  minimax-m2.1         0.15x credits      Experimental preview of MiniMax M2.1
  glm-5                0.50x credits      GLM-5 model
  qwen3-coder-next     0.05x credits      Experimental preview of Qwen3 Coder Next


mcgarrah@agent-dev:~$ kiro-cli -vvv chat "hello"
2026-07-30T19:37:25.764113Z DEBUG q_cli::cli: 491: Command ran command=["kiro-cli", "-vvv", "chat", "hello"]
2026-07-30T19:37:25.766371Z DEBUG fig_install::migrate: 35: Migration already completed
2026-07-30T19:37:25.769901Z DEBUG fig_telemetry: 631: Dispatching telemetry event event=AppTelemetryEvent(Event { created_time: Some(SystemTime { tv_sec: 1785440245, tv_nsec: 769863657 }), credential_start_url: Some("https://mcgarrah.awsapps.com/start"), ty: CliSubcommandExecuted { subcommand: "chat", resume_mode: Some("none"), terminal: None, terminal_version: None, shell: Some("bash"), shell_version: Some("5.2.37") } })
2026-07-30T19:37:25.770172Z DEBUG fig_ipc::unix_socket: 36: Socket permissions are 0o600 socket="/run/user/1000/kirorun/t/1ddc57e5e85248178fac6683d1912472.sock" mode=140600
2026-07-30T19:37:28.053199Z DEBUG q_cli::cli: 698: migration: sqlite has fresher BuilderIdToken, skipping write
2026-07-30T19:37:28.053244Z  INFO q_cli::cli: 728: no social token found
2026-07-30T19:37:28.053285Z  INFO q_cli::cli: 751: no idp token found
2026-07-30T19:37:28.053324Z DEBUG q_cli::cli: 773: launching q chat binary

mcgarrah@agent-dev:~$ kiro-cli --version
kiro-cli 2.15.2
mcgarrah@agent-dev:~$ kiro-cli doctor

✔ Everything looks good!

  Kiro CLI still not working? Run kiro-cli issue to let us know!
mcgarrah@agent-dev:~$ kiro-cli chat "hello"
mcgarrah@agent-dev:~$

Steps to reproduce

Login to Identity Center and not Builder ID.

kiro-cli logout
kiro-cli login
kiro-cli chat "hello"

Environment

<This will be visible to anyone. Do not include personal or sensitive information>

[q-details]
version = "2.15.2"
hash = "d2cfdd86c4e1957e85982ded5e66b2b0982b3dde"
date = "2026-07-29T23:34:57.032068Z (20h ago)"
variant = "minimal"

[system-info]
chip = "Intel(R) Core(TM) i7-2600 CPU @ 3.40GHz"
total-cores = 3
memory = "12.00 GB"

[system-info.os.linux]
kernel_version = "6.8.12-18-pve"
id = "debian"
name = "Debian GNU/Linux"
pretty_name = "Debian GNU/Linux 13 (trixie)"
version_id = "13"
version = "13 (trixie)"

[environment]
cwd = "/home/USER"
cli-path = "/home/USER"
os = "Linux"
shell-path = "/usr/bin/bash"
shell-version = "5.2.37"
install-method = "unknown"
in-ssh = true

[env-vars]
PATH = "/home/USER/.local/bin:/home/USER/.local/bin:/home/USER/.local/bin:/home/USER/.local/bin:/usr/local/bin:/usr/bin:/bin:/usr/local/games:/usr/games:/home/USER/.dotnet/tools:/home/USER/.local/bin"
QTERM_SESSION_ID = "1ddc57e5e85248178fac6683d1912472"
Q_SET_PARENT_CHECK = "1"
Q_TERM = "2.15.2"
SHELL = "/bin/bash"
TERM = "xterm-256color"
XDG_SESSION_TYPE = "tty"