{"repo":"NousResearch/hermes-agent","public_id":"137804","display_label":"Keep llama-server API key out of argv and logs","summary":"These members all concern the local runtime supervisor exposing the llama-server API key, via command-line arguments and the plain-text llama-server.log. Three are fix-titled changes proposing to pass the key by file or otherwise keep it off argv and out of the log, and one is an issue reporting the logging.","subsystem":"hermes_cli","counts":{"members":4,"open_issues":1,"open_issues_distinct":1,"open_prs":3,"closed_issues":0,"merged_prs":0,"attempt_prs":3},"landed_fix":null,"resolution":{"state":"unresolved","by":null},"freshness":{"state":"never_verified","last_verified_at":null,"is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":0.5},"fix_edges":[],"members":[{"kind":"issue","number":137804,"title":"Local runtime supervisor logs llama-server API key in plain text (llama-server.log)","url":null,"state":"open"},{"kind":"pr","number":137808,"title":"fix(local_runtime): hand llama-server its api key by file, not argv","url":null,"state":"open","close_reason":{"category":"silent_close","implication":"active"},"merged":false},{"kind":"pr","number":137812,"title":"fix(security): keep the llama-server API key out of argv and the spawn log","url":null,"state":"open","close_reason":{"category":"silent_close","implication":"active"},"merged":false},{"kind":"pr","number":137813,"title":"fix(local-runtime): keep the llama-server API key off argv and out of its log","url":null,"state":"open","close_reason":{"category":"silent_close","implication":"active"},"merged":false}],"trust":{"default_tier":"verified","includes_suggested":false}}