Skip to content

v0.1.14 — Kiro IDE/CLI credential refresh

Choose a tag to compare

@dat-lequoc dat-lequoc released this 25 Aug 13:09
· 9 commits to main since this release

Fixes a first-run failure reported on a machine that already had Kiro IDE/CLI
signed in.

Kiro IDE/CLI credentials now refresh

A fresh install has no plugin-owned credential, so the adapter falls back to
Kiro's shared SSO cache. That file records Kiro's own vocabulary — its
refreshToken() switches on social, IdC, and external_idp — and social
was not a method this adapter knew. It fell through to builder-id, so refresh
demanded a client registration that a social credential neither has nor needs:
Kiro refreshes those with nothing but the refresh token. Every fresh install on
the fallback path was stranded as soon as that token expired, with:

Kiro credential cannot be refreshed without its client registration

Now social is a first-class method, Kiro's spellings are read
case-insensitively (IdCidc, so an Identity Center credential is not
misrouted to the Amazon Q surface), and social refreshes against Kiro's auth
service alongside imported, google, and github. The remaining registration
error names the method and says what to do, and the settings card reports the
method the adapter actually acts on.

Same credential file, identical input:

0.1.13 and earlier -> INVALID_CREDENTIAL  (no network call attempted)
0.1.14             -> reaches Kiro's refresh service

The fallback state now offers an action

Sign in appeared only when nothing was authenticated and Sign out only
for plugin-owned credentials, so a Kiro IDE/CLI credential showed neither —
signing out appeared to do nothing. Sign out stays scoped, because this plugin
must never delete Kiro's files, but sign-in is now offered whenever the
credential is not plugin-owned, and the card explains who owns the credential
and why Sign out cannot remove it. A plugin-owned sign-in takes precedence over
the Kiro cache.

Verification

npm run check: 168 tests pass (7 live probes skipped), plus typecheck, build,
and client/CLI syntax checks. New regression tests in tests/auth.spec.ts
("Kiro IDE/CLI credential vocabulary") and tests/client-nav-icon.spec.ts.

Install

dsh plugin --profile <name> add github:dat-lequoc/dsh-kiro#v0.1.14

Artifact checksum

sha256  41b4db23253f45721923a2a3768f92f02ce7918c9d88c5a79d013c9fab96e82a  dsh-kiro-0.1.14.tgz