{"repo":"NousResearch/hermes-agent","public_id":"103117","display_label":"Audit missing 401 rejections and fix error attribution","summary":"These issues and fixes address gaps where certain API 401 rejections were not being audited and where error messages incorrectly blamed the wrong credential. The work adds session_rejected audit events and corrects failure naming for stale app-token mints.","subsystem":"dashboard","counts":{"members":3,"open_issues":0,"open_issues_distinct":0,"open_prs":1,"closed_issues":1,"merged_prs":1,"attempt_prs":1},"landed_fix":{"status":"merged_to_main","basis":"structural","pr":121375,"merged_at":"2026-09-24T10:33:02+00:00"},"resolution":{"state":"resolved","by":"pr-121375"},"freshness":{"state":"verified","last_verified_at":"2026-09-24T10:33:02+00:00","is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":0.6666666666666666},"fix_edges":[{"issue_number":103117,"pr_number":121375,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true,"pr_merged_at":"2026-09-24T10:33:02+00:00"}],"members":[{"kind":"issue","number":103117,"title":"Dashboard auth: bearer-path 401 is never audited, and the error blames the wrong credential","url":null,"state":"closed"},{"kind":"pr","number":103122,"title":"fix(dashboard-auth): audit API 401 rejections with session_rejected event","url":null,"state":"open","close_reason":{"category":"uncategorized","implication":"needs_llm"},"merged":false},{"kind":"pr","number":121375,"title":"fix(auth): audit API 401s and name stale app-token mint failures","url":null,"state":"merged","close_reason":{"category":"merged"},"merged":true,"is_fix_pr":true,"fix_tier":"verified","files_changed":["apps/desktop/electron/connection-config.test.ts","apps/desktop/electron/connection-config.ts","apps/desktop/electron/oauth-rest-request.ts","apps/desktop/src/components/boot-failure-reauth.test.ts","apps/desktop/src/components/boot-failure-reauth.ts","hermes_cli/dashboard_auth/audit.py","hermes_cli/dashboard_auth/middleware.py","tests/hermes_cli/test_dashboard_auth_middleware.py"]}],"trust":{"default_tier":"verified","includes_suggested":false}}