Cairn
NousResearch/hermes-agent

Stale Copilot auth cache entries never evicted

Cluster 130256 · hermes cli. Data as of

2 open items. Fix attempted, not merged.

The short answer

1open issue
1open PR
3items grouped
Known?
Yes. 3 related items grouped here, 0 issues already closed.
Fix event
No fix has been merged to main. 1 PR closed without merging; see the attempts below.
Tracker
The maintainers' tracker marks this unresolved. That is separate from the fix event.
Still open
1 issue and 1 PR.

A bug was identified where internal caches keyed by token fingerprint are never cleaned up when tokens rotate, causing unbounded retention of stale entries. The accompanying items address pruning these stale Copilot credential and token exchange caches.

Open issues1

  • Issue#130256[Bug]: copilot_auth `_jwt_cache` / `_exchange_failure_cache` / `_exchange_locks` are keyed by a token fingerprint and only ever popped on a repeat success, so rotated-away tokens are retained forever

Open PRs1

  • PR#130268fix(auth): evict stale Copilot credential caches

1 PR closed without merging

From the close comments: superseded by another PR 1

  • #130276 fix(auth): prune stale Copilot token exchange caches · superseded by another PR → #130268, #130256
How this cluster was grouped
  • Link evidence (structural links throughout): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
  • Pairwise link density 0.67: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Subsystem
hermes cli
Closed issues
0
Attempts
1 PR closed without merging

For your agent

The same facts, typed.

cluster/130256.json
cluster/130256.md