Cairn

Profile-scoped OAuth credentials silently not persisted

NousResearch/hermes-agent · cluster 103694 · agent

Data as of

Nothing open on GitHub. Fix merged in #134574. Check it covers your case.

The short answer

0open issues
0open PRs
6items grouped
Known?
Yes. 6 related items grouped here, 1 issue already closed.
Fix event
A fix was merged to main in PR #134574. Check it covers your case. No release data is tracked.
Tracker
The maintainers' tracker marks this resolved, deciding PR #134574. That is separate from the fix event.
Still open
Nothing open on GitHub.

These issues and fixes concern a bug where OAuth credentials added to a profile scope are reported as saved but are actually discarded, particularly when the root credential store is empty. The work addresses the underlying persistence logic to ensure such credentials are properly stored.

Open issues0

No open issues.

Open PRs0

No open pull requests.

Fixes on record

Merged to main. A stamp counts the issues a fix is linked to.

  • #134574 fix(auth): a profile's own auth add login is saved and kept, never forking root's grant (salvage #126551)

    merged to main

    files: agent/credential_pool.py, agent/credential_pool_admin.py, hermes_cli/auth_commands.py, hermes_cli/auth_oauth_grants.py, tests/agent/test_credential_pool_profile_oauth_fork.py, website/docs/user-guide/profiles.md, website/i18n/zh-Hans/docusaurus-plugin-content-docs/current/user-guide/profiles.md

4 PRs closed without merging

From the close comments: done elsewhere 2 · merged via another change 2

  • #101827 fix(auth): persist first profile OAuth row with empty root · done elsewhere → #103694, #134574, #126551
  • #103707 fix(auth): stop fresh profile OAuth grants from being discarded · done elsewhere → #134574, #101827
  • #103712 fix(auth): persist profile single-use OAuth credentials when root store is empty (#103694) · merged via another change → #134574, #126551, #101827
  • #126551 fix(auth): profile-scoped auth add with an empty root saves the credential instead of dropping it (salvage #103712 + #101827) · merged via another change → #134574, #101827
Closed issues · 1
  • Closed#103694Profile-scoped OAuth add for single-use providers prints Added but persists nothing
How this cluster was grouped
  • Link evidence (structural links throughout): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
  • Pairwise link density 0.33: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Subsystem
agent
Merged PRs
#134574
Closed issues
1
Attempts
4 PRs closed without merging
Fix link checked
7 Oct 2026

For your agent

The same facts, typed.

cluster/103694.json
cluster/103694.md