nextwave: merge first-pass fixes for issues #246 #245 #213 #201 #183 #178

[KooshaPari]

Summary

Merged first-pass lane fixes for 6 next-item issues plus one central compile blocker fix.

Included fixes

• feat: Task item 88 cliproxy #246: IDC extension headers on Kiro refresh token requests (6f302a4)
• feat: Implement cliproxy++ enhancements (tracked) #245: remove duplicate grantType field on Kiro refresh payload (1885525)
• layer-2: orphaned tool_result filtering #213: support kilocode alias model routing in AMP (5ef7e98)
• docs: replace marketing language with concise technical wording #201: tolerate read-only config writes for PUT YAML (b2f9fba)
• [CodeScanning #3] go/clear-text-logging in pkg/llmproxy/api/server.go:1426 #183: include kiro/cursor in provider metrics (ed3f914)
• [CodeScanning #12] go/clear-text-logging in pkg/llmproxy/executor/codex_websockets_executor.go:1303 #178: strip Claude thought_signature before Gemini translation (e6dbe63)
• compile blocker fix (3712f84): resolve redeclare in auth_files.go

Validation

• Focused tests passed on touched packages: auth/kiro, translator/gemini/claude, translator/gemini-cli/claude, usage.
• Compile verification passed for: api/modules/amp, registry, api/handlers/management.
• Report and mapping: docs/planning/reports/issue-wave-gh-next32-merge-2026-02-23.md

Known repo-level blocker (pre-existing)

• pkg/llmproxy/auth/copilot/token_test.go has an unused import causing staged lint/typecheck hook failures on unrelated commits.

[cursor]

You have run out of free Bugbot PR reviews for this billing cycle. This will reset on March 15.

To receive reviews on all of your PRs, visit the Cursor dashboard to activate Pro and start your 14-day free trial.