{"repo":"NousResearch/hermes-agent","public_id":"121002","display_label":"Dashboard saves overwriting secrets with masked previews","summary":"A bug where saving dashboard settings pages writes masked/preview values back into .env, destroying live credentials. The cluster includes the bug report and multiple fix attempts addressing this credential-masking boundary issue.","subsystem":null,"counts":{"members":5,"open_issues":0,"open_issues_distinct":0,"open_prs":0,"closed_issues":1,"merged_prs":1,"attempt_prs":3},"landed_fix":{"status":"merged_to_main","basis":"structural","pr":121250},"resolution":{"state":"unresolved","by":null},"freshness":{"state":"verified","last_verified_at":"2026-09-24T09:51:28+00:00","is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":0.4},"fix_edges":[{"issue_number":121002,"pr_number":121250,"tier":"verified","basis":"superseded_ref","confidence":0.9,"recoverable_from_timeline":false}],"members":[{"kind":"issue","number":121002,"title":"[Bug]: Saving dashboard settings pages writes masked key previews back into .env, destroying live secrets","url":null,"state":"closed"},{"kind":"pr","number":121011,"title":"fix(dashboard): preserve secrets from masked saves","url":null,"state":"closed","close_reason":{"refs":[{"kind":"commit","value":"b9a50ddf1e","number":0},{"kind":"pr","value":"#121002","number":121002},{"kind":"pr","value":"#121250","number":121250},{"kind":"pr","value":"#121051","number":121051},{"kind":"pr","value":"#121250","number":121250}],"category":"implemented_elsewhere","implication":"superseded"},"merged":false},{"kind":"pr","number":121043,"title":"fix(dashboard): preserve credential previews at their source boundary","url":null,"state":"closed","close_reason":{"refs":[{"kind":"pr","value":"#121051","number":121051},{"kind":"pr","value":"#121002","number":121002}],"category":"superseded_by_pr","implication":"superseded"},"merged":false},{"kind":"pr","number":121051,"title":"fix(dashboard): reject credential previews before mutation","url":null,"state":"closed","close_reason":{"refs":[{"kind":"commit","value":"b9a50ddf1e","number":0},{"kind":"commit","value":"af4c9286d5","number":0},{"kind":"pr","value":"#121250","number":121250},{"kind":"pr","value":"#121051","number":121051}],"category":"implemented_elsewhere","implication":"superseded"},"merged":false},{"kind":"pr","number":121250,"title":"Dashboard saves no longer overwrite secrets with their masked preview (#121002, salvage #121051)","url":null,"state":"merged","close_reason":{"category":"merged","implication":"superseded"},"merged":true,"is_fix_pr":true,"fix_tier":"verified","files_changed":["hermes_cli/web_routers/_common.py","hermes_cli/web_routers/config_env.py","hermes_cli/web_routers/messaging.py","tests/hermes_cli/test_web_server.py"]}],"trust":{"default_tier":"verified","includes_suggested":false}}