v0.1.14 — Kiro IDE/CLI credential refresh
Fixes a first-run failure reported on a machine that already had Kiro IDE/CLI
signed in.
Kiro IDE/CLI credentials now refresh
A fresh install has no plugin-owned credential, so the adapter falls back to
Kiro's shared SSO cache. That file records Kiro's own vocabulary — its
refreshToken() switches on social, IdC, and external_idp — and social
was not a method this adapter knew. It fell through to builder-id, so refresh
demanded a client registration that a social credential neither has nor needs:
Kiro refreshes those with nothing but the refresh token. Every fresh install on
the fallback path was stranded as soon as that token expired, with:
Kiro credential cannot be refreshed without its client registration
Now social is a first-class method, Kiro's spellings are read
case-insensitively (IdC → idc, so an Identity Center credential is not
misrouted to the Amazon Q surface), and social refreshes against Kiro's auth
service alongside imported, google, and github. The remaining registration
error names the method and says what to do, and the settings card reports the
method the adapter actually acts on.
Same credential file, identical input:
0.1.13 and earlier -> INVALID_CREDENTIAL (no network call attempted)
0.1.14 -> reaches Kiro's refresh service
The fallback state now offers an action
Sign in appeared only when nothing was authenticated and Sign out only
for plugin-owned credentials, so a Kiro IDE/CLI credential showed neither —
signing out appeared to do nothing. Sign out stays scoped, because this plugin
must never delete Kiro's files, but sign-in is now offered whenever the
credential is not plugin-owned, and the card explains who owns the credential
and why Sign out cannot remove it. A plugin-owned sign-in takes precedence over
the Kiro cache.
Verification
npm run check: 168 tests pass (7 live probes skipped), plus typecheck, build,
and client/CLI syntax checks. New regression tests in tests/auth.spec.ts
("Kiro IDE/CLI credential vocabulary") and tests/client-nav-icon.spec.ts.
Install
dsh plugin --profile <name> add github:dat-lequoc/dsh-kiro#v0.1.14Artifact checksum
sha256 41b4db23253f45721923a2a3768f92f02ce7918c9d88c5a79d013c9fab96e82a dsh-kiro-0.1.14.tgz