NousResearch/hermes-agent

Nous OAuth refresh token single-use pool fixes

Cluster 121649 · agent/secret sources. Data as of 2026-10-27 11:58 UTC

1 open item. Fix merged in #125033 on 27 Sep 2026. Check it covers your case.

open issues

open PR

items grouped

Known?: Yes. 4 related items grouped here, 1 issue already closed.
Fix event: A fix was merged to main in PR #125033. Check it covers your case. No release data is tracked.
Tracker: The maintainers' tracker marks this resolved, deciding PR #125033. That is separate from the fix event.
Still open: 0 issues and 1 PR.

Next step: read #125033, then check it covers your case.

Read #125033 Pick up a Lab task

These issues and pull requests address a bug where Nous refresh tokens were not treated as single-use, causing cloned profiles to share and invalidate each other's tokens. The work involves adding Nous to the single-use refresh pool and related auth handling corrections.

Open issues0

No open issues.

Open PRs1

PR#121658fix(auth): prevent cloned Nous OAuth refresh-token forks

Fixes on record

Merged to main. A stamp counts the issues a fix is linked to.

#125033 fix(auth): keep root's single-use Nous refresh token out of named profiles

merged to main

files: agent/credential_pool.py, hermes_cli/auth_oauth_grants.py, tests/agent/test_credential_pool_profile_oauth_fork.py

1 PR closed without merging

From the close comments: closed without comment 1

#121781 fix(p0p1): nous single-use pool + canonical dashboard matcher · closed without comment

Closed issues · 1

Closed#121649[Bug]: nous is missing from SINGLE_USE_REFRESH_POOL_PROVIDERS — cloned profiles fork one refresh token and strand each other with invalid_grant

How this cluster was grouped

Link evidence (structural links throughout): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
Pairwise link density 0.50: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Subsystem: agent/secret sources
Merged PRs: #125033
Closed issues: 1
Attempts: 1 PR closed without merging
Fix link checked: 27 Sep 2026

For your agent

The same facts, typed.

cluster/121649.json
cluster/121649.md