# NousResearch/hermes-agent · Subscription 429 locking sole credential via uncapped cooldown

## Open now

- 1 issue, 1 PR open on GitHub.
- #119163: \[Bug\]: an absolute last_error_reset_at from a subscription-period 429 bypasses the sole-credential short cooldown — one valid key locked out for ~15 days
- PR #119652: fix(agent,hermes_cli): re-probe a lone rate-limited credential and consolidate pool/fallback cooldown fixes

A bug where an absolute reset_at timestamp from a subscription-period 429 response bypasses the intended short cooldown, potentially locking the only available credential for an extended period. The related items are fixes that cap or clamp the persisted cooldown to prevent this excessive lockout.

## TL;DR

- 4 member(s): 1 open issue(s), 0 closed issue(s), 1 open PR(s), 0 merged PR(s), 2 PR(s) closed without merging.
- No fix has been merged to main; one or more PRs were attempted (see below).
- **Recommended:** review the prior/competing PR(s) below. A fix was attempted but not merged; your case may extend or revive that work.

## Maintainer resolution verdict

- Internal-tracker verdict over this cluster's issue members: `unresolved`. This is distinct from the fix status above. Weigh it yourself.

## How this cluster was grouped

- Link evidence (`STRUCTURAL_SPANNING`): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
- Pairwise link density `0.50`: the share of member pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. `1.00` means every pair is linked.

## Open related issues

- #119163: \[Bug\]: an absolute last_error_reset_at from a subscription-period 429 bypasses the sole-credential short cooldown — one valid key locked out for ~15 days

## Prior & competing PRs

- **#119165: fix(credential-pool): cap sole-key transient reset cooldown**. closed without merge
  - maintainer direction: category `uncategorized`; implication `needs_llm`; refs `#119163`, `#119172`
- **#119589: fix(agent): cap persisted cooldown to TTL so subscription-period 429 cannot permanently lock sole credential**. closed without merge
  - maintainer direction: category `superseded_by_pr`; implication `superseded`; refs `#119652`
- **#119652: fix(agent,hermes_cli): re-probe a lone rate-limited credential and consolidate pool/fallback cooldown fixes**. open
  - maintainer direction: category `volume_quota`; implication `active`; refs `aa6ab6e637`, `456242f971`, `#1`, `#4`
  - files: `agent/agent_init.py`, `agent/agent_runtime_helpers.py`, `agent/agent_runtime_pool.py`, `agent/anthropic_credentials.py`, `agent/auxiliary_client.py`, `agent/auxiliary_model_scope.py`, `agent/auxiliary_plugin_oauth.py`, `agent/auxiliary_unavailable.py`, `agent/chat_completion_helpers.py`, `agent/chat_completion_helpers_pool.py`, `agent/credential_pool.py`, `agent/credential_pool_admin.py`, `agent/credential_pool_cooldowns.py`, `agent/credential_pool_model_cooldowns.py`, `agent/error_surface.py`, `agent/fallback_cooldown.py`, `agent/turn_recovery.py`, `hermes_cli/auth.py`, `hermes_cli/auth_codex.py`, `hermes_cli/auth_commands.py` (+34 more)

## Fix status

- No merged fix on record.
- Subsystem: `agent`