New TUI (kiro-cli-chat) silently exits when terminal is not in kiro-cli-term supported list (lxterminal). kiro-cli _ should-figterm-launch returns 1 for lxterminal on Manjaro Linux, preventing kiro-cli-term from wrapping the shell. Forcing SHOULD_QTERM_LAU

[tiborh]

Checks

• I have searched github.com/aws/amazon-q-developer-cli/issues and there are no duplicates of my issue
• I have run q doctor in the affected terminal session
• I have run q restart and replicated the issue again

Operating system

Linux 6.18.36-1-MANJARO - Manjaro Linux

Expected behaviour

kiro-cli to work

Actual behaviour

kiro-cli returns to command prompt
kiro-cli --classic works only

Steps to reproduce

1. open lxterminal
2. kiro-cli

Environment

<This will be visible to anyone. Do not include personal or sensitive information>

[q-details]
version = "2.10.0"
hash = "a5da029503141c8033a11d7ee6569583d915cd90"
date = "2026-06-25T20:04:08.842604Z (9d ago)"
variant = "minimal"

[system-info]
chip = "Intel(R) Celeron(R) J4125 CPU @ 2.00GHz"
total-cores = 4
memory = "7.57 GB"

[system-info.os.linux]
kernel_version = "6.18.36-1-MANJARO"
id = "manjaro"
name = "Manjaro Linux"
pretty_name = "Manjaro Linux"
build_id = "rolling"

[environment]
cwd = "/home/USER"
cli-path = "/home/USER"
os = "Linux"
shell-path = "/usr/bin/bash"
shell-version = "5.3.15"
install-method = "unknown"

[env-vars]
DISPLAY = ":0"
PATH = "/home/USER/.local/bin:/usr/local/sbin:/usr/local/bin:/usr/bin:/var/lib/snapd/snap/bin:/var/lib/flatpak/exports/bin:/usr/lib/jvm/default/bin:/usr/bin/site_perl:/usr/bin/vendor_perl:/usr/bin/core_perl:/home/USER/.local/share/gem/ruby/3.0.0/bin"
Q_SET_PARENT_CHECK = "1"
SHELL = "/bin/bash"
TERM = "xterm-256color"
XDG_CURRENT_DESKTOP = "LXDE"
XDG_SESSION_TYPE = "x11"

[tiborh]

First kiro tried to automatically create ticket. (there was a hitch, so I had to finish the ticket myself)

this is what came when I closed the browser (after creating the ticket):

Environment

• kiro-cli: 2.10.0
• OS: Manjaro Linux, kernel 6.18.36
• Terminal: lxterminal 0.4.1 (TERM=xterm-256color)

Problem
Running kiro-cli (without --classic) silently exits with code 1 and returns
to the prompt. No error message is shown.

Root cause (debugged)

1. kiro-cli _ should-figterm-launch returns 1 for lxterminal — it is not in
   the supported terminal list, so kiro-cli-term is never launched.
2. Without kiro-cli-term wrapping the shell, kiro-cli-chat (the new TUI)
   detects the missing PTY context and exits silently.
3. Forcing SHOULD_QTERM_LAUNCH=0 causes a fork bomb: kiro-cli-term launches
   but fails to set Q_TERM in lxterminal, so every subsequent bash sourcing
   .bashrc spawns another kiro-cli-term infinitely.

Expected behavior
Either:

• lxterminal should be added to the supported terminal list (it is
  xterm-256color compatible), or
• when kiro-cli-chat detects missing PTY context, it should fall back to
  --legacy-ui with a warning instead of silently exiting.

Workaround
kiro-cli --classic works fine.

[tiborh]

1. The process tree output — the key diagnostic showing lxterminal isn't recognized:

   ❌ lxterminal | lxterminal (3194) <- ✅ bash (40839)

This makes it immediately clear to the devs what the detection check sees.

2. The fork bomb reproducer — mention that forcing SHOULD_QTERM_LAUNCH=0 before pre.bash runs causes infinite kiro-cli-term spawning because Q_TERM is never set (no re-entry guard fires).
   This is a secondary bug worth fixing independently — even if lxterminal stays unsupported, the workaround path shouldn't be dangerous.

3. A feature request framing — the most impactful ask is probably: "when should-figterm-launch returns 1, kiro-cli should print a message like 'terminal not supported, falling back to legacy
   UI' rather than silently exiting." That would make this invisible failure mode obvious to users.

[tiborh]

$ kiro-cli chat -vvv
2026-07-05T00:59:29.501447Z DEBUG q_cli::cli: 399: Command ran command=["kiro-cli", "chat", "-vvv"]
2026-07-05T00:59:29.505595Z DEBUG fig_install::migrate: 35: Migration already completed
2026-07-05T00:59:29.512690Z DEBUG fig_auth::builder_id: 367: no secret found in the database
2026-07-05T00:59:29.512752Z DEBUG fig_auth::builder_id: 335: no secret found in the database
2026-07-05T00:59:29.512757Z DEBUG fig_telemetry: 631: Dispatching telemetry event event=AppTelemetryEvent(Event { created_time: Some(SystemTime { tv_sec: 1783213169, tv_nsec: 512717661 }), credential_start_url: None, ty: CliSubcommandExecuted { subcommand: "chat", resume_mode: Some("none"), terminal: None, terminal_version: None, shell: Some("bash"), shell_version: Some("5.3.15") } })
2026-07-05T00:59:29.512790Z DEBUG fig_telemetry: 633: Dispatch failed, falling back to send_event event=AppTelemetryEvent(Event { created_time: Some(SystemTime { tv_sec: 1783213169, tv_nsec: 512717661 }), credential_start_url: None, ty: CliSubcommandExecuted { subcommand: "chat", resume_mode: Some("none"), terminal: None, terminal_version: None, shell: Some("bash"), shell_version: Some("5.3.15") } })
2026-07-05T00:59:29.528923Z DEBUG aws_runtime::fs_util: 31: loaded home directory src="HOME"
2026-07-05T00:59:29.529005Z DEBUG load_config_file{file=Default(Config)}: aws_runtime::env_config::source: 173: performing home directory substitution home="/home/tiborh" path="/.aws/config"
2026-07-05T00:59:29.529032Z DEBUG load_config_file{file=Default(Config)}: aws_runtime::env_config::source: 103: home directory expanded before="/.aws/config" after="/home/tiborh/.aws/config"
2026-07-05T00:59:29.529047Z DEBUG load_config_file{file=Default(Config)}: aws_runtime::env_config::source: 113: config file not found path=/.aws/config
2026-07-05T00:59:29.529060Z DEBUG load_config_file{file=Default(Config)}: aws_runtime::env_config::source: 150: config file loaded path=Some("/home/tiborh/.aws/config") size=0
2026-07-05T00:59:29.529089Z DEBUG load_config_file{file=Default(Credentials)}: aws_runtime::env_config::source: 173: performing home directory substitution home="/home/tiborh" path="/.aws/credentials"
2026-07-05T00:59:29.529100Z DEBUG load_config_file{file=Default(Credentials)}: aws_runtime::env_config::source: 103: home directory expanded before="/.aws/credentials" after="/home/tiborh/.aws/credentials"
2026-07-05T00:59:29.529110Z DEBUG load_config_file{file=Default(Credentials)}: aws_runtime::env_config::source: 113: config file not found path=/.aws/credentials
2026-07-05T00:59:29.529115Z DEBUG load_config_file{file=Default(Credentials)}: aws_runtime::env_config::source: 150: config file loaded path=Some("/home/tiborh/.aws/credentials") size=0
2026-07-05T00:59:29.529343Z DEBUG aws_runtime::fs_util: 31: loaded home directory src="HOME"
2026-07-05T00:59:29.529355Z DEBUG load_config_file{file=Default(Config)}: aws_runtime::env_config::source: 173: performing home directory substitution home="/home/tiborh" path="/.aws/config"
2026-07-05T00:59:29.529362Z DEBUG load_config_file{file=Default(Config)}: aws_runtime::env_config::source: 103: home directory expanded before="/.aws/config" after="/home/tiborh/.aws/config"
2026-07-05T00:59:29.529381Z DEBUG load_config_file{file=Default(Config)}: aws_runtime::env_config::source: 113: config file not found path=/.aws/config
2026-07-05T00:59:29.529386Z DEBUG load_config_file{file=Default(Config)}: aws_runtime::env_config::source: 150: config file loaded path=Some("/home/tiborh/.aws/config") size=0
2026-07-05T00:59:29.529395Z DEBUG load_config_file{file=Default(Credentials)}: aws_runtime::env_config::source: 173: performing home directory substitution home="/home/tiborh" path="/.aws/credentials"
2026-07-05T00:59:29.529402Z DEBUG load_config_file{file=Default(Credentials)}: aws_runtime::env_config::source: 103: home directory expanded before="/.aws/credentials" after="/home/tiborh/.aws/credentials"
2026-07-05T00:59:29.529411Z DEBUG load_config_file{file=Default(Credentials)}: aws_runtime::env_config::source: 113: config file not found path=/.aws/credentials
2026-07-05T00:59:29.529416Z DEBUG load_config_file{file=Default(Credentials)}: aws_runtime::env_config::source: 150: config file loaded path=Some("/home/tiborh/.aws/credentials") size=0
2026-07-05T00:59:29.529490Z DEBUG aws_runtime::fs_util: 31: loaded home directory src="HOME"
2026-07-05T00:59:29.529500Z DEBUG load_config_file{file=Default(Config)}: aws_runtime::env_config::source: 173: performing home directory substitution home="/home/tiborh" path="/.aws/config"
2026-07-05T00:59:29.529507Z DEBUG load_config_file{file=Default(Config)}: aws_runtime::env_config::source: 103: home directory expanded before="/.aws/config" after="/home/tiborh/.aws/config"
2026-07-05T00:59:29.529519Z DEBUG load_config_file{file=Default(Config)}: aws_runtime::env_config::source: 113: config file not found path=/.aws/config
2026-07-05T00:59:29.529524Z DEBUG load_config_file{file=Default(Config)}: aws_runtime::env_config::source: 150: config file loaded path=Some("/home/tiborh/.aws/config") size=0
2026-07-05T00:59:29.529534Z DEBUG load_config_file{file=Default(Credentials)}: aws_runtime::env_config::source: 173: performing home directory substitution home="/home/tiborh" path="/.aws/credentials"
2026-07-05T00:59:29.529540Z DEBUG load_config_file{file=Default(Credentials)}: aws_runtime::env_config::source: 103: home directory expanded before="/.aws/credentials" after="/home/tiborh/.aws/credentials"
2026-07-05T00:59:29.529548Z DEBUG load_config_file{file=Default(Credentials)}: aws_runtime::env_config::source: 113: config file not found path=/.aws/credentials
2026-07-05T00:59:29.529553Z DEBUG load_config_file{file=Default(Credentials)}: aws_runtime::env_config::source: 150: config file loaded path=Some("/home/tiborh/.aws/credentials") size=0
2026-07-05T00:59:29.529649Z DEBUG fig_auth::builder_id: 335: no secret found in the database
2026-07-05T00:59:29.535702Z DEBUG fig_telemetry: 298: Posting metrics product=CodewhispererTerminal metric_datum=MetricDatum { metric_name: "codewhispererterminal_cliSubcommandExecuted", epoch_timestamp: 1783213169512, unit: None, value: 1.0, metadata: Some([MetadataEntry { key: Some("credentialStartUrl"), value: Some("") }, MetadataEntry { key: Some("codewhispererterminal_terminal"), value: Some("") }, MetadataEntry { key: Some("codewhispererterminal_terminalVersion"), value: Some("") }, MetadataEntry { key: Some("codewhispererterminal_shell"), value: Some("bash") }, MetadataEntry { key: Some("codewhispererterminal_shellVersion"), value: Some("5.3.15") }, MetadataEntry { key: Some("codewhispererterminal_subcommand"), value: Some("chat") }, MetadataEntry { key: Some("codewhispererterminal_inCloudshell"), value: Some("false") }, MetadataEntry { key: Some("codewhispererterminal_resumeMode"), value: Some("none") }]), passive: false }
2026-07-05T00:59:29.535848Z DEBUG apply_configuration: aws_smithy_runtime::client::orchestrator: 204: timeout settings for this operation: TimeoutConfig { connect_timeout: Disabled, read_timeout: Disabled, operation_timeout: Disabled, operation_attempt_timeout: Disabled }
2026-07-05T00:59:29.535895Z DEBUG try_op: aws_smithy_runtime_api::client::interceptors::context: 263: entering 'serialization' phase
2026-07-05T00:59:29.535960Z DEBUG try_op: aws_smithy_runtime_api::client::interceptors::context: 275: entering 'before transmit' phase
2026-07-05T00:59:29.535986Z DEBUG try_op: aws_smithy_runtime::client::retries::strategy::standard: 183: no client rate limiter configured, so no token is required for the initial request.
2026-07-05T00:59:29.535992Z DEBUG try_op: aws_smithy_runtime::client::orchestrator: 269: retry strategy has OKed initial request
2026-07-05T00:59:29.536007Z DEBUG try_op: aws_smithy_runtime::client::orchestrator: 310: beginning attempt #1
2026-07-05T00:59:29.536027Z DEBUG try_op:try_attempt{attempt=1}: aws_smithy_runtime::client::orchestrator::auth: 308: using legacy auth and endpoint orchestration, resolving endpoint for auth scheme selection scheme_id=AuthSchemeId { scheme_id: "sigv4" } endpoint_params=EndpointResolverParams { inner: TypeErasedBox[!Clone]:Params, property: {} }
2026-07-05T00:59:29.536056Z INFO try_op:try_attempt{attempt=1}: fig_telemetry::endpoint: 14: Resolving endpoint endpoint=Endpoint { url: "https://client-telemetry.us-east-1.amazonaws.com", headers: {}, properties: {} }
2026-07-05T00:59:29.536166Z DEBUG fig_auth::builder_id: 367: no secret found in the database
2026-07-05T00:59:29.536184Z INFO fig_auth::session: 34: not logged in with Builder ID - no valid token found
2026-07-05T00:59:29.536459Z DEBUG try_op:try_attempt{attempt=1}:lazy_load_identity: aws_sdk_cognitoidentity::endpoint_lib: 12: loading default partitions
2026-07-05T00:59:29.538139Z DEBUG fig_auth::builder_id: 367: no secret found in the database
2026-07-05T00:59:29.538255Z DEBUG q_cli::cli: 612: migration: sqlite has fresher SocialToken, skipping write
2026-07-05T00:59:29.543579Z INFO q_cli::cli: 649: no idp token found
2026-07-05T00:59:29.544195Z DEBUG q_cli::cli: 671: launching q chat binary
2026-07-05T00:59:29.553500Z DEBUG try_op:try_attempt{attempt=1}:lazy_load_identity: rustls::webpki::anchors: 54: add_parsable_certificates processed 119 valid and 0 invalid certs
2026-07-05T00:59:29.553741Z DEBUG try_op:try_attempt{attempt=1}:lazy_load_identity:Cognito Identity.GetId{rpc.service="Cognito Identity" rpc.method="GetId" sdk_invocation_id=3612949 rpc.system="aws-api"}:apply_configuration: aws_smithy_runtime::client::orchestrator: 204: timeout settings for this operation: TimeoutConfig { connect_timeout: Disabled, read_timeout: Disabled, operation_timeout: Disabled, operation_attempt_timeout: Disabled }
2026-07-05T00:59:29.553799Z DEBUG try_op:try_attempt{attempt=1}:lazy_load_identity:Cognito Identity.GetId{rpc.service="Cognito Identity" rpc.method="GetId" sdk_invocation_id=3612949 rpc.system="aws-api"}:try_op: aws_smithy_runtime_api::client::interceptors::context: 263: entering 'serialization' phase
2026-07-05T00:59:29.553833Z DEBUG try_op:try_attempt{attempt=1}:lazy_load_identity:Cognito Identity.GetId{rpc.service="Cognito Identity" rpc.method="GetId" sdk_invocation_id=3612949 rpc.system="aws-api"}:try_op: aws_smithy_runtime_api::client::interceptors::context: 275: entering 'before transmit' phase
2026-07-05T00:59:29.553869Z DEBUG try_op:try_attempt{attempt=1}:lazy_load_identity:Cognito Identity.GetId{rpc.service="Cognito Identity" rpc.method="GetId" sdk_invocation_id=3612949 rpc.system="aws-api"}:try_op: aws_smithy_runtime::client::retries::strategy::standard: 183: no client rate limiter configured, so no token is required for the initial request.
2026-07-05T00:59:29.553878Z DEBUG try_op:try_attempt{attempt=1}:lazy_load_identity:Cognito Identity.GetId{rpc.service="Cognito Identity" rpc.method="GetId" sdk_invocation_id=3612949 rpc.system="aws-api"}:try_op: aws_smithy_runtime::client::orchestrator: 269: retry strategy has OKed initial request
2026-07-05T00:59:29.553891Z DEBUG try_op:try_attempt{attempt=1}:lazy_load_identity:Cognito Identity.GetId{rpc.service="Cognito Identity" rpc.method="GetId" sdk_invocation_id=3612949 rpc.system="aws-api"}:try_op: aws_smithy_runtime::client::orchestrator: 310: beginning attempt #1
2026-07-05T00:59:29.553939Z DEBUG try_op:try_attempt{attempt=1}:lazy_load_identity:Cognito Identity.GetId{rpc.service="Cognito Identity" rpc.method="GetId" sdk_invocation_id=3612949 rpc.system="aws-api"}:try_op:try_attempt{attempt=1}:lazy_load_identity: aws_smithy_runtime::client::identity::cache::lazy: 357: identity cache miss occurred; added new identity (took 5.454µs) new_expiration=2026-07-05T01:14:29.553922Z valid_for=899.999986963s partition=IdentityCachePartition(15)
2026-07-05T00:59:29.553967Z DEBUG try_op:try_attempt{attempt=1}:lazy_load_identity:Cognito Identity.GetId{rpc.service="Cognito Identity" rpc.method="GetId" sdk_invocation_id=3612949 rpc.system="aws-api"}:try_op:try_attempt{attempt=1}: aws_smithy_runtime::client::identity::cache::lazy: 372: loaded identity
2026-07-05T00:59:29.553982Z DEBUG try_op:try_attempt{attempt=1}:lazy_load_identity:Cognito Identity.GetId{rpc.service="Cognito Identity" rpc.method="GetId" sdk_invocation_id=3612949 rpc.system="aws-api"}:try_op:try_attempt{attempt=1}:orchestrate_endpoint: aws_smithy_runtime::client::orchestrator::endpoints: 88: resolving endpoint endpoint_params=EndpointResolverParams { inner: TypeErasedBox[!Clone]:Params { region: Some("us-east-1"), use_dual_stack: false, use_fips: false, endpoint: None }, property: {TypeId(0x798312ab9d1c871b6a370989cf7a2810): TypeErasedBox[!Clone]:Identity { data: NoAuthIdentity, expiration: None }} }
2026-07-05T00:59:29.554005Z DEBUG try_op:try_attempt{attempt=1}:lazy_load_identity:Cognito Identity.GetId{rpc.service="Cognito Identity" rpc.method="GetId" sdk_invocation_id=3612949 rpc.system="aws-api"}:try_op:try_attempt{attempt=1}:orchestrate_endpoint: aws_smithy_runtime::client::orchestrator::endpoints: 104: will apply endpoint Endpoint { url: "https://cognito-identity.us-east-1.amazonaws.com", headers: {}, properties: {} } endpoint_prefix=None
2026-07-05T00:59:29.554117Z DEBUG try_op:try_attempt{attempt=1}:lazy_load_identity:Cognito Identity.GetId{rpc.service="Cognito Identity" rpc.method="GetId" sdk_invocation_id=3612949 rpc.system="aws-api"}:try_op:try_attempt{attempt=1}: aws_smithy_runtime_api::client::interceptors::context: 296: entering 'transmit' phase
2026-07-05T00:59:29.554321Z DEBUG try_op:try_attempt{attempt=1}:lazy_load_identity:Cognito Identity.GetId{rpc.service="Cognito Identity" rpc.method="GetId" sdk_invocation_id=3612949 rpc.system="aws-api"}:try_op:try_attempt{attempt=1}: rustls::webpki::anchors: 54: add_parsable_certificates processed 119 valid and 0 invalid certs
2026-07-05T00:59:29.554355Z DEBUG try_op:try_attempt{attempt=1}:lazy_load_identity:Cognito Identity.GetId{rpc.service="Cognito Identity" rpc.method="GetId" sdk_invocation_id=3612949 rpc.system="aws-api"}:try_op:try_attempt{attempt=1}: aws_smithy_http_client::client: 703: new connector created in 223.061µs
2026-07-05T00:59:29.554444Z DEBUG try_op:try_attempt{attempt=1}:lazy_load_identity:Cognito Identity.GetId{rpc.service="Cognito Identity" rpc.method="GetId" sdk_invocation_id=3612949 rpc.system="aws-api"}:try_op:try_attempt{attempt=1}: aws_smithy_runtime::client::http::body::minimum_throughput: 378: applying minimum upload throughput check future options=MinimumThroughputBodyOptions { minimum_throughput: Throughput { bytes_read: 1, per_time_elapsed: 1s }, grace_period: 5s, check_window: 1s }
2026-07-05T00:59:29.661413Z DEBUG try_op:try_attempt{attempt=1}:lazy_load_identity:Cognito Identity.GetId{rpc.service="Cognito Identity" rpc.method="GetId" sdk_invocation_id=3612949 rpc.system="aws-api"}:try_op:try_attempt{attempt=1}: hyper_util::client::legacy::connect::http: 767: connecting to 44.194.126.1:443
2026-07-05T00:59:29.723207Z DEBUG try_op:try_attempt{attempt=1}:lazy_load_identity:Cognito Identity.GetId{rpc.service="Cognito Identity" rpc.method="GetId" sdk_invocation_id=3612949 rpc.system="aws-api"}:try_op:try_attempt{attempt=1}: hyper_util::client::legacy::connect::http: 770: connected to 44.194.126.1:443
2026-07-05T00:59:29.723293Z DEBUG try_op:try_attempt{attempt=1}:lazy_load_identity:Cognito Identity.GetId{rpc.service="Cognito Identity" rpc.method="GetId" sdk_invocation_id=3612949 rpc.system="aws-api"}:try_op:try_attempt{attempt=1}: rustls::client::hs: 1126: No cached session for DnsName("cognito-identity.us-east-1.amazonaws.com")
2026-07-05T00:59:29.723306Z DEBUG try_op:try_attempt{attempt=1}:lazy_load_identity:Cognito Identity.GetId{rpc.service="Cognito Identity" rpc.method="GetId" sdk_invocation_id=3612949 rpc.system="aws-api"}:try_op:try_attempt{attempt=1}: rustls::client::hs: 105: Not resuming any session
2026-07-05T00:59:30.108628Z DEBUG try_op:try_attempt{attempt=1}:lazy_load_identity:Cognito Identity.GetId{rpc.service="Cognito Identity" rpc.method="GetId" sdk_invocation_id=3612949 rpc.system="aws-api"}:try_op:try_attempt{attempt=1}: rustls::client::hs: 790: Using ciphersuite TLS13_AES_128_GCM_SHA256
2026-07-05T00:59:30.108773Z DEBUG try_op:try_attempt{attempt=1}:lazy_load_identity:Cognito Identity.GetId{rpc.service="Cognito Identity" rpc.method="GetId" sdk_invocation_id=3612949 rpc.system="aws-api"}:try_op:try_attempt{attempt=1}: rustls::client::tls13: 162: Not resuming
2026-07-05T00:59:30.109111Z DEBUG try_op:try_attempt{attempt=1}:lazy_load_identity:Cognito Identity.GetId{rpc.service="Cognito Identity" rpc.method="GetId" sdk_invocation_id=3612949 rpc.system="aws-api"}:try_op:try_attempt{attempt=1}: rustls::client::tls13: 499: TLS1.3 encrypted extensions: ServerExtensions { server_name_ack: (), selected_protocol: SingleProtocolName(ProtocolName(6832)), unknown_extensions: {}, .. }
2026-07-05T00:59:30.109151Z DEBUG try_op:try_attempt{attempt=1}:lazy_load_identity:Cognito Identity.GetId{rpc.service="Cognito Identity" rpc.method="GetId" sdk_invocation_id=3612949 rpc.system="aws-api"}:try_op:try_attempt{attempt=1}: rustls::client::hs: 619: ALPN protocol is Some(b"h2")
2026-07-05T00:59:30.161384Z DEBUG try_op:try_attempt{attempt=1}:lazy_load_identity:Cognito Identity.GetId{rpc.service="Cognito Identity" rpc.method="GetId" sdk_invocation_id=3612949 rpc.system="aws-api"}:try_op:try_attempt{attempt=1}: h2::client: 1290: binding client connection
2026-07-05T00:59:30.161451Z DEBUG try_op:try_attempt{attempt=1}:lazy_load_identity:Cognito Identity.GetId{rpc.service="Cognito Identity" rpc.method="GetId" sdk_invocation_id=3612949 rpc.system="aws-api"}:try_op:try_attempt{attempt=1}: h2::client: 1295: client connection bound
2026-07-05T00:59:30.162093Z DEBUG try_op:try_attempt{attempt=1}:lazy_load_identity:Cognito Identity.GetId{rpc.service="Cognito Identity" rpc.method="GetId" sdk_invocation_id=3612949 rpc.system="aws-api"}:try_op:try_attempt{attempt=1}: h2::codec::framed_write: 218: send frame=Settings { flags: (0x0), enable_push: 0, initial_window_size: 2097152, max_frame_size: 16384, max_header_list_size: 16384 }
2026-07-05T00:59:30.162285Z DEBUG try_op:try_attempt{attempt=1}:lazy_load_identity:Cognito Identity.GetId{rpc.service="Cognito Identity" rpc.method="GetId" sdk_invocation_id=3612949 rpc.system="aws-api"}:try_op:try_attempt{attempt=1}: hyper_util::client::legacy::pool: 401: pooling idle connection for ("https", cognito-identity.us-east-1.amazonaws.com)
2026-07-05T00:59:30.162565Z DEBUG Connection{peer=Client}: h2::codec::framed_write: 218: send frame=WindowUpdate { stream_id: StreamId(0), size_increment: 5177345 }
2026-07-05T00:59:30.162640Z DEBUG Connection{peer=Client}: h2::codec::framed_write: 218: send frame=Headers { stream_id: StreamId(1), flags: (0x4: END_HEADERS) }
2026-07-05T00:59:30.162748Z DEBUG Connection{peer=Client}: h2::codec::framed_write: 218: send frame=Data { stream_id: StreamId(1), flags: (0x1: END_STREAM) }
2026-07-05T00:59:30.432188Z DEBUG Connection{peer=Client}: h2::codec::framed_read: 404: received frame=Settings { flags: (0x0), max_concurrent_streams: 128, initial_window_size: 65536, max_frame_size: 16777215 }
2026-07-05T00:59:30.432301Z DEBUG Connection{peer=Client}: h2::codec::framed_write: 218: send frame=Settings { flags: (0x1: ACK) }
2026-07-05T00:59:30.432450Z DEBUG Connection{peer=Client}: h2::codec::framed_read: 404: received frame=WindowUpdate { stream_id: StreamId(0), size_increment: 2147418112 }
2026-07-05T00:59:30.432479Z DEBUG Connection{peer=Client}: h2::codec::framed_read: 404: received frame=Settings { flags: (0x1: ACK) }
2026-07-05T00:59:30.432497Z DEBUG Connection{peer=Client}: h2::proto::settings: 56: received settings ACK; applying Settings { flags: (0x0), enable_push: 0, initial_window_size: 2097152, max_frame_size: 16384, max_header_list_size: 16384 }
2026-07-05T00:59:30.432569Z DEBUG Connection{peer=Client}: h2::codec::framed_read: 404: received frame=Headers { stream_id: StreamId(1), flags: (0x4: END_HEADERS) }
2026-07-05T00:59:30.432647Z DEBUG Connection{peer=Client}: h2::codec::framed_read: 404: received frame=Data { stream_id: StreamId(1) }
2026-07-05T00:59:30.432676Z DEBUG Connection{peer=Client}: h2::codec::framed_read: 404: received frame=Data { stream_id: StreamId(1), flags: (0x1: END_STREAM) }
2026-07-05T00:59:30.432795Z DEBUG try_op:try_attempt{attempt=1}:lazy_load_identity:Cognito Identity.GetId{rpc.service="Cognito Identity" rpc.method="GetId" sdk_invocation_id=3612949 rpc.system="aws-api"}:try_op:try_attempt{attempt=1}: aws_smithy_runtime_api::client::interceptors::context: 308: entering 'before deserialization' phase
2026-07-05T00:59:30.432885Z DEBUG try_op:try_attempt{attempt=1}:lazy_load_identity:Cognito Identity.GetId{rpc.service="Cognito Identity" rpc.method="GetId" sdk_invocation_id=3612949 rpc.system="aws-api"}:try_op:try_attempt{attempt=1}: aws_smithy_runtime_api::client::interceptors::context: 328: entering 'deserialization' phase
2026-07-05T00:59:30.433174Z DEBUG try_op:try_attempt{attempt=1}:lazy_load_identity:Cognito Identity.GetId{rpc.service="Cognito Identity" rpc.method="GetId" sdk_invocation_id=3612949 rpc.system="aws-api"}:try_op:try_attempt{attempt=1}:deserialization:deserialize_nonstreaming: aws_sdk_cognitoidentity::operation::get_id: 135: request_id=Some("7cfe4e79-7270-4123-a81f-2c98b86463f5")
2026-07-05T00:59:30.433208Z DEBUG try_op:try_attempt{attempt=1}:lazy_load_identity:Cognito Identity.GetId{rpc.service="Cognito Identity" rpc.method="GetId" sdk_invocation_id=3612949 rpc.system="aws-api"}:try_op:try_attempt{attempt=1}: aws_smithy_runtime_api::client::interceptors::context: 340: entering 'after deserialization' phase
2026-07-05T00:59:30.433265Z DEBUG try_op:try_attempt{attempt=1}:lazy_load_identity:Cognito Identity.GetId{rpc.service="Cognito Identity" rpc.method="GetId" sdk_invocation_id=3612949 rpc.system="aws-api"}:try_op: aws_smithy_runtime::client::retries::strategy::standard: 232: attempt #1 classified as NoActionIndicated, not retrying
2026-07-05T00:59:30.433280Z DEBUG try_op:try_attempt{attempt=1}:lazy_load_identity:Cognito Identity.GetId{rpc.service="Cognito Identity" rpc.method="GetId" sdk_invocation_id=3612949 rpc.system="aws-api"}:try_op: aws_smithy_runtime::client::orchestrator: 337: a retry is either unnecessary or not possible, exiting attempt loop
2026-07-05T00:59:30.433423Z DEBUG try_op:try_attempt{attempt=1}:lazy_load_identity:Cognito Identity.GetCredentialsForIdentity{rpc.service="Cognito Identity" rpc.method="GetCredentialsForIdentity" sdk_invocation_id=1772854 rpc.system="aws-api"}:apply_configuration: aws_smithy_runtime::client::orchestrator: 204: timeout settings for this operation: TimeoutConfig { connect_timeout: Disabled, read_timeout: Disabled, operation_timeout: Disabled, operation_attempt_timeout: Disabled }
2026-07-05T00:59:30.433468Z DEBUG try_op:try_attempt{attempt=1}:lazy_load_identity:Cognito Identity.GetCredentialsForIdentity{rpc.service="Cognito Identity" rpc.method="GetCredentialsForIdentity" sdk_invocation_id=1772854 rpc.system="aws-api"}:try_op: aws_smithy_runtime_api::client::interceptors::context: 263: entering 'serialization' phase
2026-07-05T00:59:30.433506Z DEBUG try_op:try_attempt{attempt=1}:lazy_load_identity:Cognito Identity.GetCredentialsForIdentity{rpc.service="Cognito Identity" rpc.method="GetCredentialsForIdentity" sdk_invocation_id=1772854 rpc.system="aws-api"}:try_op: aws_smithy_runtime_api::client::interceptors::context: 275: entering 'before transmit' phase
2026-07-05T00:59:30.433542Z DEBUG try_op:try_attempt{attempt=1}:lazy_load_identity:Cognito Identity.GetCredentialsForIdentity{rpc.service="Cognito Identity" rpc.method="GetCredentialsForIdentity" sdk_invocation_id=1772854 rpc.system="aws-api"}:try_op: aws_smithy_runtime::client::retries::strategy::standard: 183: no client rate limiter configured, so no token is required for the initial request.
2026-07-05T00:59:30.433558Z DEBUG try_op:try_attempt{attempt=1}:lazy_load_identity:Cognito Identity.GetCredentialsForIdentity{rpc.service="Cognito Identity" rpc.method="GetCredentialsForIdentity" sdk_invocation_id=1772854 rpc.system="aws-api"}:try_op: aws_smithy_runtime::client::orchestrator: 269: retry strategy has OKed initial request
2026-07-05T00:59:30.433576Z DEBUG try_op:try_attempt{attempt=1}:lazy_load_identity:Cognito Identity.GetCredentialsForIdentity{rpc.service="Cognito Identity" rpc.method="GetCredentialsForIdentity" sdk_invocation_id=1772854 rpc.system="aws-api"}:try_op: aws_smithy_runtime::client::orchestrator: 310: beginning attempt #1
2026-07-05T00:59:30.433611Z DEBUG try_op:try_attempt{attempt=1}:lazy_load_identity:Cognito Identity.GetCredentialsForIdentity{rpc.service="Cognito Identity" rpc.method="GetCredentialsForIdentity" sdk_invocation_id=1772854 rpc.system="aws-api"}:try_op:try_attempt{attempt=1}: aws_smithy_runtime::client::identity::cache::lazy: 314: loaded identity from cache buffer_time=10s cached_expiration=None now=SystemTime { tv_sec: 1783213170, tv_nsec: 433604665 }
2026-07-05T00:59:30.433645Z DEBUG try_op:try_attempt{attempt=1}:lazy_load_identity:Cognito Identity.GetCredentialsForIdentity{rpc.service="Cognito Identity" rpc.method="GetCredentialsForIdentity" sdk_invocation_id=1772854 rpc.system="aws-api"}:try_op:try_attempt{attempt=1}:orchestrate_endpoint: aws_smithy_runtime::client::orchestrator::endpoints: 88: resolving endpoint endpoint_params=EndpointResolverParams { inner: TypeErasedBox[!Clone]:Params { region: Some("us-east-1"), use_dual_stack: false, use_fips: false, endpoint: None }, property: {TypeId(0x798312ab9d1c871b6a370989cf7a2810): TypeErasedBox[!Clone]:Identity { data: NoAuthIdentity, expiration: None }} }
2026-07-05T00:59:30.433675Z DEBUG try_op:try_attempt{attempt=1}:lazy_load_identity:Cognito Identity.GetCredentialsForIdentity{rpc.service="Cognito Identity" rpc.method="GetCredentialsForIdentity" sdk_invocation_id=1772854 rpc.system="aws-api"}:try_op:try_attempt{attempt=1}:orchestrate_endpoint: aws_smithy_runtime::client::orchestrator::endpoints: 104: will apply endpoint Endpoint { url: "https://cognito-identity.us-east-1.amazonaws.com", headers: {}, properties: {} } endpoint_prefix=None
2026-07-05T00:59:30.433775Z DEBUG try_op:try_attempt{attempt=1}:lazy_load_identity:Cognito Identity.GetCredentialsForIdentity{rpc.service="Cognito Identity" rpc.method="GetCredentialsForIdentity" sdk_invocation_id=1772854 rpc.system="aws-api"}:try_op:try_attempt{attempt=1}: aws_smithy_runtime_api::client::interceptors::context: 296: entering 'transmit' phase
2026-07-05T00:59:30.433819Z DEBUG try_op:try_attempt{attempt=1}:lazy_load_identity:Cognito Identity.GetCredentialsForIdentity{rpc.service="Cognito Identity" rpc.method="GetCredentialsForIdentity" sdk_invocation_id=1772854 rpc.system="aws-api"}:try_op:try_attempt{attempt=1}: aws_smithy_runtime::client::http::body::minimum_throughput: 378: applying minimum upload throughput check future options=MinimumThroughputBodyOptions { minimum_throughput: Throughput { bytes_read: 1, per_time_elapsed: 1s }, grace_period: 5s, check_window: 1s }
2026-07-05T00:59:30.433851Z DEBUG try_op:try_attempt{attempt=1}:lazy_load_identity:Cognito Identity.GetCredentialsForIdentity{rpc.service="Cognito Identity" rpc.method="GetCredentialsForIdentity" sdk_invocation_id=1772854 rpc.system="aws-api"}:try_op:try_attempt{attempt=1}: hyper_util::client::legacy::pool: 268: reuse idle connection for ("https", cognito-identity.us-east-1.amazonaws.com)
2026-07-05T00:59:30.433956Z DEBUG Connection{peer=Client}: h2::codec::framed_write: 218: send frame=Headers { stream_id: StreamId(3), flags: (0x4: END_HEADERS) }
2026-07-05T00:59:30.434145Z DEBUG Connection{peer=Client}: h2::codec::framed_write: 218: send frame=Data { stream_id: StreamId(3), flags: (0x1: END_STREAM) }

[tiborh]

it affects kitty too, and the root cause is more precise now: kiro-cli-term does not inject KIRO_SESSION_ID into the child shell environment on Linux. The socket gets
created (we can see it in /run/user/1000/kirorun/t/) but the session ID that would let kiro-cli-chat find that socket is never exposed to the shell.

[tiborh]

• Reproduced on kitty too (not lxterminal-specific)
• kiro-cli-term correctly wraps the shell (Q_TERM=2.10.0 is set, parent process is kiro-cli-term)
• But KIRO_SESSION_ID is never injected into the child shell
• kiro-cli-term's own environment also has no KIRO_SESSION_ID (confirmed via /proc/PID/environ)
• Without KIRO_SESSION_ID, kiro-cli-chat cannot find the socket and silently exits