Failed login with Identity Center

### Checks

- [x] I have searched [github.com/aws/amazon-q-developer-cli/issues](https://github.com/aws/amazon-q-developer-cli/issues?q=) and there are no duplicates of my issue
- [x] I have run `q doctor` in the affected terminal session
- [x] I have run `q restart` and replicated the issue again

### Operating system

Linux 6.8.12-18-pve - Debian GNU/Linux 13 (trixie)

### Expected behaviour

Never seen a working `kiro-cli chat` but my assumption is a chat session like the Kiro IDE. I have never seen it work.

### Actual behaviour

Here is a session where I'm logged in under my active working Identity Center login that works with the Kiro IDE. In the `kiro-cli` I am getting back the models that access via the API but the idp token is missing. I'm not sure what to do next for this.

```console
mcgarrah@agent-dev:~$ kiro-cli logout
You are now logged out
Run kiro-cli login to log back in to Kiro CLI
mcgarrah@agent-dev:~$ kiro-cli login
✔ Select login method · Use with Your Organization
✔ Enter Start URL · https://xxxxxxxx.awsapps.com/start
✔ Enter Region · us-east-1

Confirm the following code in the browser
Code: XXXX-XXXX

Open this URL: https://xxxxxxxx.awsapps.com/start/#/device?user_code=XXXX-XXXX
Device authorized

Logged in successfully

mcgarrah@agent-dev:~$ kiro-cli whoami
Logged in with IAM Identity Center (https://xxxxxxxx.awsapps.com/start)
Email: mcgarrah@gmail.com

Profile:
QDevProfile-us-east-1
arn:aws:codewhisperer:us-east-1:123456789012:profile/XXXXAARDXXXX

mcgarrah@agent-dev:~$ kiro-cli chat --list-models
Available models (* = default):

* auto 1.00x credits Models chosen by task for optimal usage and consistent quality
claude-opus-5 2.20x credits Experimental preview of Claude Opus 5 model with 1M context window
claude-sonnet-5 1.30x credits Claude Sonnet 5 model with 1M context window
claude-opus-4.8 2.20x credits Claude Opus 4.8 model with 1M context window
gpt-5.6-sol 2.40x credits Experimental preview of OpenAI GPT 5.6 Sol with 272k context window
gpt-5.6-terra 1.20x credits Experimental preview of OpenAI GPT 5.6 Terra with 272k context window
gpt-5.6-luna 0.60x credits Experimental preview of OpenAI GPT 5.6 Luna with 272k context window
claude-opus-4.7 2.20x credits Claude Opus 4.7 model with 1M context window
claude-opus-4.6 2.20x credits Claude Opus 4.6 model with 1M context window
claude-sonnet-4.6 1.30x credits Claude Sonnet 4.6 model with 1M context window
claude-opus-4.5 2.20x credits Claude Opus 4.5 model
claude-sonnet-4.5 1.30x credits Claude Sonnet 4.5 model
claude-sonnet-4 1.30x credits Hybrid reasoning and coding for regular use
claude-haiku-4.5 0.40x credits The latest Claude Haiku model
deepseek-3.2 0.25x credits Experimental preview of DeepSeek V3.2
minimax-m2.5 0.25x credits MiniMax M2.5 model
minimax-m2.1 0.15x credits Experimental preview of MiniMax M2.1
glm-5 0.50x credits GLM-5 model
qwen3-coder-next 0.05x credits Experimental preview of Qwen3 Coder Next

mcgarrah@agent-dev:~$ kiro-cli -vvv chat "hello"
2026-07-30T19:37:25.764113Z DEBUG q_cli::cli: 491: Command ran command=["kiro-cli", "-vvv", "chat", "hello"]
2026-07-30T19:37:25.766371Z DEBUG fig_install::migrate: 35: Migration already completed
2026-07-30T19:37:25.769901Z DEBUG fig_telemetry: 631: Dispatching telemetry event event=AppTelemetryEvent(Event { created_time: Some(SystemTime { tv_sec: 1785440245, tv_nsec: 769863657 }), credential_start_url: Some("https://mcgarrah.awsapps.com/start"), ty: CliSubcommandExecuted { subcommand: "chat", resume_mode: Some("none"), terminal: None, terminal_version: None, shell: Some("bash"), shell_version: Some("5.2.37") } })
2026-07-30T19:37:25.770172Z DEBUG fig_ipc::unix_socket: 36: Socket permissions are 0o600 socket="/run/user/1000/kirorun/t/1ddc57e5e85248178fac6683d1912472.sock" mode=140600
2026-07-30T19:37:28.053199Z DEBUG q_cli::cli: 698: migration: sqlite has fresher BuilderIdToken, skipping write
2026-07-30T19:37:28.053244Z INFO q_cli::cli: 728: no social token found
2026-07-30T19:37:28.053285Z INFO q_cli::cli: 751: no idp token found
2026-07-30T19:37:28.053324Z DEBUG q_cli::cli: 773: launching q chat binary

mcgarrah@agent-dev:~$ kiro-cli --version
kiro-cli 2.15.2
mcgarrah@agent-dev:~$ kiro-cli doctor

✔ Everything looks good!

Kiro CLI still not working? Run kiro-cli issue to let us know!
mcgarrah@agent-dev:~$ kiro-cli chat "hello"
mcgarrah@agent-dev:~$
```

### Steps to reproduce

Login to Identity Center and not Builder ID.

```console
kiro-cli logout
kiro-cli login
kiro-cli chat "hello"
```

### Environment

```yaml

[q-details]
version = "2.15.2"
hash = "d2cfdd86c4e1957e85982ded5e66b2b0982b3dde"
date = "2026-07-29T23:34:57.032068Z (20h ago)"
variant = "minimal"

[system-info]
chip = "Intel(R) Core(TM) i7-2600 CPU @ 3.40GHz"
total-cores = 3
memory = "12.00 GB"

[system-info.os.linux]
kernel_version = "6.8.12-18-pve"
id = "debian"
name = "Debian GNU/Linux"
pretty_name = "Debian GNU/Linux 13 (trixie)"
version_id = "13"
version = "13 (trixie)"

[environment]
cwd = "/home/USER"
cli-path = "/home/USER"
os = "Linux"
shell-path = "/usr/bin/bash"
shell-version = "5.2.37"
install-method = "unknown"
in-ssh = true

[env-vars]
PATH = "/home/USER/.local/bin:/home/USER/.local/bin:/home/USER/.local/bin:/home/USER/.local/bin:/usr/local/bin:/usr/bin:/bin:/usr/local/games:/usr/games:/home/USER/.dotnet/tools:/home/USER/.local/bin"
QTERM_SESSION_ID = "1ddc57e5e85248178fac6683d1912472"
Q_SET_PARENT_CHECK = "1"
Q_TERM = "2.15.2"
SHELL = "/bin/bash"
TERM = "xterm-256color"
XDG_SESSION_TYPE = "tty"
```

Start by reproducing the issue with `kiro-cli logout`, `kiro-cli login`, and `kiro-cli chat "hello"`, then compare the verbose output showing missing IDP and social tokens. Trace how the IAM Identity Center login is handed off to the chat command. Done means an Identity Center login starts a working chat session, not an immediate return to the shell.

Written by the indexing model from the issue text.