Failed login with Identity Center

### Checks

- [x] I have searched [github.com/aws/amazon-q-developer-cli/issues](https://github.com/aws/amazon-q-developer-cli/issues?q=) and there are no duplicates of my issue
- [x] I have run `q doctor` in the affected terminal session
- [x] I have run `q restart` and replicated the issue again

### Operating system

Linux 6.8.12-18-pve - Debian GNU/Linux 13 (trixie)

### Expected behaviour

Never seen a working `kiro-cli chat` but my assumption is a chat session like the Kiro IDE. I have never seen it work.

### Actual behaviour

Here is a session where I'm logged in under my active working Identity Center login that works with the Kiro IDE. In the `kiro-cli` I am getting back the models that access via the API but the idp token is missing. I'm not sure what to do next for this.

```console
mcgarrah@agent-dev:~$ kiro-cli logout
You are now logged out
Run kiro-cli login to log back in to Kiro CLI
mcgarrah@agent-dev:~$ kiro-cli login
✔ Select login method · Use with Your Organization
✔ Enter Start URL · https://xxxxxxxx.awsapps.com/start
✔ Enter Region · us-east-1

Confirm the following code in the browser
Code: XXXX-XXXX

Open this URL: https://xxxxxxxx.awsapps.com/start/#/device?user_code=XXXX-XXXX
Device authorized

Logged in successfully

mcgarrah@agent-dev:~$ kiro-cli whoami
Logged in with IAM Identity Center (https://xxxxxxxx.awsapps.com/start)
Email: mcgarrah@gmail.com

Profile:
QDevProfile-us-east-1
arn:aws:codewhisperer:us-east-1:123456789012:profile/XXXXAARDXXXX

mcgarrah@agent-dev:~$ kiro-cli chat --list-models
Available models (* = default):

* auto 1.00x credits Models chosen by task for optimal usage and consistent quality
claude-opus-5 2.20x credits Experimental preview of Claude Opus 5 model with 1M context window
claude-sonnet-5 1.30x credits Claude Sonnet 5 model with 1M context window
claude-opus-4.8 2.20x credits Claude Opus 4.8 model with 1M context window
gpt-5.6-sol 2.40x credits Experimental preview of OpenAI GPT 5.6 Sol with 272k context window
gpt-5.6-terra 1.20x credits Experimental preview of OpenAI GPT 5.6 Terra with 272k context window
gpt-5.6-luna 0.60x credits Experimental preview of OpenAI GPT 5.6 Luna with 272k context window
claude-opus-4.7 2.20x credits Claude Opus 4.7 model with 1M context window
claude-opus-4.6 2.20x credits Claude Opus 4.6 model with 1M context window
claude-sonnet-4.6 1.30x credits Claude Sonnet 4.6 model with 1M context window
claude-opus-4.5 2.20x credits Claude Opus 4.5 model
claude-sonnet-4.5 1.30x credits Claude Sonnet 4.5 model
claude-sonnet-4 1.30x credits Hybrid reasoning and coding for regular use
claude-haiku-4.5 0.40x credits The latest Claude Haiku model
deepseek-3.2 0.25x credits Experimental preview of DeepSeek V3.2
minimax-m2.5 0.25x credits MiniMax M2.5 model
minimax-m2.1 0.15x credits Experimental preview of MiniMax M2.1
glm-5 0.50x credits GLM-5 model
qwen3-coder-next 0.05x credits Experimental preview of Qwen3 Coder Next

mcgarrah@agent-dev:~$ kiro-cli -vvv chat "hello"
2026-07-30T19:37:25.764113Z DEBUG q_cli::cli: 491: Command ran command=["kiro-cli", "-vvv", "chat", "hello"]
2026-07-30T19:37:25.766371Z DEBUG fig_install::migrate: 35: Migration already completed
2026-07-30T19:37:25.769901Z DEBUG fig_telemetry: 631: Dispatching telemetry event event=AppTelemetryEvent(Event { created_time: Some(SystemTime { tv_sec: 1785440245, tv_nsec: 769863657 }), credential_start_url: Some("https://mcgarrah.awsapps.com/start"), ty: CliSubcommandExecuted { subcommand: "chat", resume_mode: Some("none"), terminal: None, terminal_version: None, shell: Some("bash"), shell_version: Some("5.2.37") } })
2026-07-30T19:37:25.770172Z DEBUG fig_ipc::unix_socket: 36: Socket permissions are 0o600 socket="/run/user/1000/kirorun/t/1ddc57e5e85248178fac6683d1912472.sock" mode=140600
2026-07-30T19:37:28.053199Z DEBUG q_cli::cli: 698: migration: sqlite has fresher BuilderIdToken, skipping write
2026-07-30T19:37:28.053244Z INFO q_cli::cli: 728: no social token found
2026-07-30T19:37:28.053285Z INFO q_cli::cli: 751: no idp token found
2026-07-30T19:37:28.053324Z DEBUG q_cli::cli: 773: launching q chat binary

mcgarrah@agent-dev:~$ kiro-cli --version
kiro-cli 2.15.2
mcgarrah@agent-dev:~$ kiro-cli doctor

✔ Everything looks good!

Kiro CLI still not working? Run kiro-cli issue to let us know!
mcgarrah@agent-dev:~$ kiro-cli chat "hello"
mcgarrah@agent-dev:~$
```

### Steps to reproduce

Login to Identity Center and not Builder ID.

```console
kiro-cli logout
kiro-cli login
kiro-cli chat "hello"
```

### Environment

```yaml

[q-details]
version = "2.15.2"
hash = "d2cfdd86c4e1957e85982ded5e66b2b0982b3dde"
date = "2026-07-29T23:34:57.032068Z (20h ago)"
variant = "minimal"

[system-info]
chip = "Intel(R) Core(TM) i7-2600 CPU @ 3.40GHz"
total-cores = 3
memory = "12.00 GB"

[system-info.os.linux]
kernel_version = "6.8.12-18-pve"
id = "debian"
name = "Debian GNU/Linux"
pretty_name = "Debian GNU/Linux 13 (trixie)"
version_id = "13"
version = "13 (trixie)"

[environment]
cwd = "/home/USER"
cli-path = "/home/USER"
os = "Linux"
shell-path = "/usr/bin/bash"
shell-version = "5.2.37"
install-method = "unknown"
in-ssh = true

[env-vars]
PATH = "/home/USER/.local/bin:/home/USER/.local/bin:/home/USER/.local/bin:/home/USER/.local/bin:/usr/local/bin:/usr/bin:/bin:/usr/local/games:/usr/games:/home/USER/.dotnet/tools:/home/USER/.local/bin"
QTERM_SESSION_ID = "1ddc57e5e85248178fac6683d1912472"
Q_SET_PARENT_CHECK = "1"
Q_TERM = "2.15.2"
SHELL = "/bin/bash"
TERM = "xterm-256color"
XDG_SESSION_TYPE = "tty"
```

Inizia riproducendo il problema con `kiro-cli logout`, `kiro-cli login` e `kiro-cli chat "hello"`, quindi confronta l'output dettagliato che mostra l'assenza dei token IDP e social. Traccia il modo in cui il login IAM Identity Center viene trasferito al comando chat. Il lavoro è completato quando un login Identity Center avvia una sessione chat funzionante, invece di tornare immediatamente alla shell.

Scritto dal modello di indicizzazione a partire dal testo della issue.