v2.1 - Proxy & Enterprise Release
Major release adding Enterprise Kiro IDE support, VPN/proxy connectivity for restricted networks, and critical fixes for token persistence and tool validation.
β¨ New Features
- VPN/Proxy Support β Route Kiro API requests through HTTP/SOCKS5 proxy for users in China, corporate networks, or regions with AWS connectivity issues. Supports authentication and automatic URL normalization
- Enterprise Kiro Support β Full support for corporate accounts with AWS IAM Identity Center (IdC) authentication, automatic device registration loading from
~/.aws/sso/cache/{clientIdHash}.json(#43, #45, #48) - Social Login Support β Support for Google, GitHub, Microsoft social logins in kiro-cli with automatic token persistence and priority-based key loading
π Bug Fixes
- AWS SSO OIDC Token Format β Fixed token refresh to use correct JSON format with camelCase parameters instead of form-urlencoded (#43)
- Token Persistence β Fixed refreshed AWS SSO OIDC tokens not being saved back to SQLite database, causing stale tokens after restart (#43)
- Tool Name Validation β Added validation against Kiro API 64-character limit to prevent "Improperly formed request" errors from MCP servers with long tool names (#41)
- Connection Leak β Added
Connection: closeheader to streaming requests to prevent CLOSE_WAIT connection leak (#38)
β‘ Improvements
- JSON Truncation Diagnostics β Added diagnostic method to distinguish Kiro API truncation from malformed JSON in tool call arguments (#34)
- GitHub Issues Link β Added quick access link to GitHub issues in startup banner for easier bug reporting
- Enhanced Logging β Added debug log before sending requests to Kiro API for better troubleshooting
π Documentation
- README Translations β Added comprehensive README translations for 7 languages (ru, zh, es, id, pt, ja, ko)
- Model Availability β Updated model list with tier-based availability notice and Claude Opus 4.5 free tier removal (January 17, 2026) (#39)
- AWS SSO Configuration β Clarified AWS SSO credentials configuration and automatic device registration file loading (#43)
βοΈ Configuration
| Variable | Default | Description |
|---|---|---|
VPN_PROXY_URL |
(empty) | VPN/Proxy URL for accessing Kiro API. Supports HTTP/SOCKS5 protocols with optional authentication. Examples: http://127.0.0.1:7890, socks5://127.0.0.1:1080, http://user:pass@proxy.com:8080 |
π Contributors
- @somehow-paul β contributed #45, #48
Full Changelog: v2.0...v2.1