Failed login with Identity Center

まず kiro-cli logout、kiro-cli login、kiro-cli chat "hello" で問題を再現し、次に IDP トークンとソーシャルトークンが欠落していることを示す詳細出力を比較します。IAM Identity Center のログインが chat コマンドにどのように引き渡されるかを追跡します。Identity Center のログインによって動作する chat セッションが開始され、すぐにシェルへ戻らなければ完了です。

Checks

• I have searched github.com/aws/amazon-q-developer-cli/issues and there are no duplicates of my issue
• I have run q doctor in the affected terminal session
• I have run q restart and replicated the issue again

Operating system

Linux 6.8.12-18-pve - Debian GNU/Linux 13 (trixie)

Expected behaviour

Never seen a working kiro-cli chat but my assumption is a chat session like the Kiro IDE. I have never seen it work.

Actual behaviour

Here is a session where I'm logged in under my active working Identity Center login that works with the Kiro IDE. In the kiro-cli I am getting back the models that access via the API but the idp token is missing. I'm not sure what to do next for this.

mcgarrah@agent-dev:~$ kiro-cli logout
You are now logged out
Run kiro-cli login to log back in to Kiro CLI
mcgarrah@agent-dev:~$ kiro-cli login
✔ Select login method · Use with Your Organization
✔ Enter Start URL · https://xxxxxxxx.awsapps.com/start
✔ Enter Region · us-east-1

Confirm the following code in the browser
Code: XXXX-XXXX

Open this URL: https://xxxxxxxx.awsapps.com/start/#/device?user_code=XXXX-XXXX
Device authorized

Logged in successfully


mcgarrah@agent-dev:~$ kiro-cli whoami
Logged in with IAM Identity Center (https://xxxxxxxx.awsapps.com/start)
Email: [email protected]

Profile:
QDevProfile-us-east-1
arn:aws:codewhisperer:us-east-1:123456789012:profile/XXXXAARDXXXX


mcgarrah@agent-dev:~$ kiro-cli chat --list-models
Available models (* = default):

* auto                 1.00x credits      Models chosen by task for optimal usage and consistent quality
  claude-opus-5        2.20x credits      Experimental preview of Claude Opus 5 model with 1M context window
  claude-sonnet-5      1.30x credits      Claude Sonnet 5 model with 1M context window
  claude-opus-4.8      2.20x credits      Claude Opus 4.8 model with 1M context window
  gpt-5.6-sol          2.40x credits      Experimental preview of OpenAI GPT 5.6 Sol with 272k context window
  gpt-5.6-terra        1.20x credits      Experimental preview of OpenAI GPT 5.6 Terra with 272k context window
  gpt-5.6-luna         0.60x credits      Experimental preview of OpenAI GPT 5.6 Luna with 272k context window
  claude-opus-4.7      2.20x credits      Claude Opus 4.7 model with 1M context window
  claude-opus-4.6      2.20x credits      Claude Opus 4.6 model with 1M context window
  claude-sonnet-4.6    1.30x credits      Claude Sonnet 4.6 model with 1M context window
  claude-opus-4.5      2.20x credits      Claude Opus 4.5 model
  claude-sonnet-4.5    1.30x credits      Claude Sonnet 4.5 model
  claude-sonnet-4      1.30x credits      Hybrid reasoning and coding for regular use
  claude-haiku-4.5     0.40x credits      The latest Claude Haiku model
  deepseek-3.2         0.25x credits      Experimental preview of DeepSeek V3.2
  minimax-m2.5         0.25x credits      MiniMax M2.5 model
  minimax-m2.1         0.15x credits      Experimental preview of MiniMax M2.1
  glm-5                0.50x credits      GLM-5 model
  qwen3-coder-next     0.05x credits      Experimental preview of Qwen3 Coder Next


mcgarrah@agent-dev:~$ kiro-cli -vvv chat "hello"
2026-07-30T19:37:25.764113Z DEBUG q_cli::cli: 491: Command ran command=["kiro-cli", "-vvv", "chat", "hello"]
2026-07-30T19:37:25.766371Z DEBUG fig_install::migrate: 35: Migration already completed
2026-07-30T19:37:25.769901Z DEBUG fig_telemetry: 631: Dispatching telemetry event event=AppTelemetryEvent(Event { created_time: Some(SystemTime { tv_sec: 1785440245, tv_nsec: 769863657 }), credential_start_url: Some("https://mcgarrah.awsapps.com/start"), ty: CliSubcommandExecuted { subcommand: "chat", resume_mode: Some("none"), terminal: None, terminal_version: None, shell: Some("bash"), shell_version: Some("5.2.37") } })
2026-07-30T19:37:25.770172Z DEBUG fig_ipc::unix_socket: 36: Socket permissions are 0o600 socket="/run/user/1000/kirorun/t/1ddc57e5e85248178fac6683d1912472.sock" mode=140600
2026-07-30T19:37:28.053199Z DEBUG q_cli::cli: 698: migration: sqlite has fresher BuilderIdToken, skipping write
2026-07-30T19:37:28.053244Z  INFO q_cli::cli: 728: no social token found
2026-07-30T19:37:28.053285Z  INFO q_cli::cli: 751: no idp token found
2026-07-30T19:37:28.053324Z DEBUG q_cli::cli: 773: launching q chat binary

mcgarrah@agent-dev:~$ kiro-cli --version
kiro-cli 2.15.2
mcgarrah@agent-dev:~$ kiro-cli doctor

✔ Everything looks good!

  Kiro CLI still not working? Run kiro-cli issue to let us know!
mcgarrah@agent-dev:~$ kiro-cli chat "hello"
mcgarrah@agent-dev:~$

Steps to reproduce

Login to Identity Center and not Builder ID.

kiro-cli logout
kiro-cli login
kiro-cli chat "hello"

Environment

<This will be visible to anyone. Do not include personal or sensitive information>

[q-details]
version = "2.15.2"
hash = "d2cfdd86c4e1957e85982ded5e66b2b0982b3dde"
date = "2026-07-29T23:34:57.032068Z (20h ago)"
variant = "minimal"

[system-info]
chip = "Intel(R) Core(TM) i7-2600 CPU @ 3.40GHz"
total-cores = 3
memory = "12.00 GB"

[system-info.os.linux]
kernel_version = "6.8.12-18-pve"
id = "debian"
name = "Debian GNU/Linux"
pretty_name = "Debian GNU/Linux 13 (trixie)"
version_id = "13"
version = "13 (trixie)"

[environment]
cwd = "/home/USER"
cli-path = "/home/USER"
os = "Linux"
shell-path = "/usr/bin/bash"
shell-version = "5.2.37"
install-method = "unknown"
in-ssh = true

[env-vars]
PATH = "/home/USER/.local/bin:/home/USER/.local/bin:/home/USER/.local/bin:/home/USER/.local/bin:/usr/local/bin:/usr/bin:/bin:/usr/local/games:/usr/games:/home/USER/.dotnet/tools:/home/USER/.local/bin"
QTERM_SESSION_ID = "1ddc57e5e85248178fac6683d1912472"
Q_SET_PARENT_CHECK = "1"
Q_TERM = "2.15.2"
SHELL = "/bin/bash"
TERM = "xterm-256color"
XDG_SESSION_TYPE = "tty"