{"repo":"NousResearch/hermes-agent","public_id":"121486","display_label":"Custom Codex base URL leaks credentials to chatgpt.com","summary":"These issues and fixes address a bug where credentials intended for a custom Codex gateway are incorrectly sent to chatgpt.com, and fast mode is improperly restricted to chatgpt.com only.","subsystem":"agent","counts":{"members":3,"open_issues":1,"open_issues_distinct":1,"open_prs":0,"closed_issues":0,"merged_prs":1,"attempt_prs":1},"landed_fix":{"status":"merged_to_main","basis":"structural","pr":121751,"merged_at":"2026-09-25T15:57:07+00:00"},"resolution":{"state":"unresolved","by":null},"freshness":{"state":"verified","last_verified_at":"2026-09-25T15:57:07+00:00","is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":0.6666666666666666},"fix_edges":[{"issue_number":121486,"pr_number":121751,"tier":"verified","basis":"superseded_ref","confidence":0.9,"recoverable_from_timeline":false,"pr_merged_at":"2026-09-25T15:57:07+00:00"}],"members":[{"kind":"issue","number":121486,"title":"openai-codex behind a custom Codex base URL still calls chatgpt.com with the resolved credential, and fast mode is gated to chatgpt.com","url":null,"state":"open"},{"kind":"pr","number":121508,"title":"fix(agent): keep custom-Codex-base credentials off chatgpt.com","url":null,"state":"closed","close_reason":{"refs":[{"kind":"commit","value":"5260e42521","number":0},{"kind":"pr","value":"#121751","number":121751},{"kind":"pr","value":"#121486","number":121486},{"kind":"pr","value":"#121497","number":121497}],"category":"merged_via","implication":"superseded"},"merged":false},{"kind":"pr","number":121751,"title":"fix(codex): keep custom-gateway Codex credentials off chatgpt.com","url":null,"state":"merged","close_reason":{"category":"merged"},"merged":true,"is_fix_pr":true,"fix_tier":"verified","files_changed":["agent/account_usage.py","agent/auxiliary_client.py","agent/credential_pool.py","agent/model_metadata.py","hermes_cli/auth.py","hermes_cli/auth_codex.py","hermes_cli/auth_nous.py","hermes_cli/cli_model_switch_mixin.py","hermes_cli/codex_models.py","hermes_cli/model_setup_flows.py","hermes_cli/models.py","plugins/image_gen/openai-codex/__init__.py","tests/agent/test_astra_baseline_runtime.py","tests/agent/test_auxiliary_client.py","tests/agent/test_codex_cloudflare_headers.py","tests/agent/test_codex_usage_attribution.py","tests/agent/test_model_metadata.py","tests/agent/test_provider_parity.py","tests/hermes_cli/test_codex_credential_host_binding.py","tests/hermes_cli/test_codex_models.py","tests/plugins/image_gen/test_openai_codex_provider.py"]}],"trust":{"default_tier":"verified","includes_suggested":false}}