Cairn
NousResearch/hermes-agent

Anthropic tests leaking into macOS Keychain and browser

Cluster 27003 · agent. Data as of

3 open items. Fix merged in #74517. Check it covers your case.

The short answer

1open issue
2open PRs
12items grouped
Known?
Yes. 12 related items grouped here, 3 issues already closed.
Fix event
A fix was merged to main in PR #74517. Check it covers your case. No release data is tracked.
Tracker
The maintainers' tracker marks this unresolved. That is separate from the fix event.
Still open
1 issue and 2 PRs.

A cluster of bugs and fixes addressing test isolation failures where the Anthropic adapter test suite inadvertently reads from the developer's macOS Keychain or opens real browser OAuth flows during local runs. Work spans hardening keychain output parsing and mocking out system-level side effects.

Open issues1

  • Issue#27003Pre-existing failure: test_returns_token_from_credential_files

Open PRs2

  • PR#27065fix(anthropic): guard keychain reader against non-string stdout (#27003)
  • PR#57111fix(anthropic): harden keychain credential parsing

Fixes on record

Merged to main. A stamp counts the issues a fix is linked to.

  • #74517 test: land the test-stability backlog — 12 PRs salvaged, Windows hermeticity, fail-closed guards, event-based waits

    merged to main

    files: .github/workflows/tests.yml, contributors/emails/[redacted:email], contributors/emails/[redacted:email], contributors/emails/[redacted:email], contributors/emails/[redacted:email], gateway/restart.py, gateway/slash_commands.py, hermes_cli/web_server.py, hermes_state.py, plugins/memory/honcho/session.py, scripts/run_tests.sh, tests/agent/test_anthropic_keychain.py, tests/agent/test_copilot_acp_client.py, tests/agent/test_vision_routing_31179.py, tests/conftest.py, tests/cron/test_sessiondb_init_hang.py, tests/gateway/test_approve_deny_commands.py, tests/gateway/test_complete_path_at_filter.py, tests/gateway/test_restart_drain.py, tests/gateway/test_restart_service_detection.py (+13 more)

5 PRs closed without merging

From the close comments: done elsewhere 2 · merged via another change 1 · stale or abandoned 1 · superseded by another PR 1

  • #35464 test: guard browser and Keychain side effects · merged via another change → 45ffeea, #74517, #35404
  • #41880 test(auth): prevent browser popup during OAuth loopback tests · stale or abandoned
  • #58419 test(agent): isolate anthropic oauth setup token from macos keychain · done elsewhere → #74517, #35464, #35093
  • #58612 fix(tests): isolate anthropic adapter tests from macOS Keychain · done elsewhere → #74517, #35464, #58609, #43344
  • #58613 fix(tests): isolate Anthropic keychain credentials · superseded by another PR → #58612, #58609, #57111, #27065
Closed issues · 3
  • Closed#35404Test suite opens a real browser / xAI OAuth flow + reads the dev's macOS Keychain on local runs
  • Closed#58415[Bug]: Anthropic OAuth setup-token tests fail on macOS keychain subprocess path
  • Closed#58609Anthropic adapter tests are not isolated from Claude Code macOS Keychain
How this cluster was grouped
  • Link evidence (partly structural links): some members are connected by structural evidence (shared changed files, or a closing/superseded reference); the rest are joined by an automated relevance judgement over their text.
  • Members outside that structural core may belong to a different underlying problem.
  • Pairwise link density 0.17: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Subsystem
agent
Merged PRs
#74517
Closed issues
3
Attempts
5 PRs closed without merging
Fix link checked
30 Jul 2026

For your agent

The same facts, typed.

cluster/27003.json
cluster/27003.md