# NousResearch/hermes-agent · Codex OAuth auth sharing and fallback across profiles

## Open now

- 1 issue, 1 PR open on GitHub.
- #38176: Share Codex CLI auth across Hermes gateway profiles
- PR #64572: fix(auth): canonicalize inherited Codex refresh state

These issues and fixes center on Codex CLI authentication credentials not being properly shared, inherited, or synchronized across Hermes gateway profiles, including stale pool keys, missing fallbacks to global auth.json, and reauthentication loops when switching profiles.

## TL;DR

- 6 member(s): 1 open issue(s), 1 closed issue(s), 1 open PR(s), 0 merged PR(s), 3 PR(s) closed without merging.
- No fix has been merged to main; one or more PRs were attempted (see below).
- **Recommended:** review the prior/competing PR(s) below. A fix was attempted but not merged; your case may extend or revive that work.

## Maintainer resolution verdict

- Internal-tracker verdict over this cluster's issue members: `unresolved`. This is distinct from the fix status above. Weigh it yourself.

## How this cluster was grouped

- Link evidence (`STRUCTURAL_PARTIAL`): some members are connected by structural evidence (shared changed files, or a closing/superseded reference); the rest are joined by an automated relevance judgement over their text.
- Members outside that structural core may belong to a different underlying problem.
- Pairwise link density `0.29`: the share of member pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. `1.00` means every pair is linked.

## Open related issues

- #38176: Share Codex CLI auth across Hermes gateway profiles

## Closed / duplicate issues

- #6653: \[Bug\] openai-codex reauthentication loop when switching back from local models across Hermes profiles

## Prior & competing PRs

- **#38178: feat(auth): share Codex CLI auth across gateway profiles**. closed without merge · fix tier `suggested`
  - maintainer direction: category `uncategorized`; implication `needs_llm`
  - _suggested-tier fix detail withheld; re-request with `?tier=all` to include it._
- **#39796: fix(auth): recover codex tokens from sibling profile stores (#6653)**. closed without merge
  - maintainer direction: category `uncategorized`; implication `needs_llm`
- **#41705: fix(auth): resync copied Codex profile tokens**. closed without merge
  - maintainer direction: category `uncategorized`; implication `needs_llm`; refs `#34141`
- **#64572: fix(auth): canonicalize inherited Codex refresh state**. open
  - maintainer direction: category `partial_fix`; implication `needs_llm`; refs `69dfcdcc15f71ba5ee243bc192365629b9b9b85c`, `a4091e49f`, `da6d5fcd1`, `5300727a08eb74afd3649118142af8e25e08d05a`, `761b744abbc6`, `c78b3e1d3ccc`, `bd66e7e3fbbc8f18d29fd800762a0264e8a64bbd`, `01f44f56ca68`, `#6653`, `#64572`, `#5612`, `#8277`, `#12360`, `#11512`, `#15104`, `#7806`, `#22903`, `#15173`, `#17480`, `#28277`, `#29502`, `#29530`, `#20405`, `#29873`, `#34121`, `#34141`, `#34143`, `#34820`, `#56233`, `#38273`, `#39222`, `#39352`, `#39796`, `#41704`, `#41705`, `#42434`, `#43415`, `#45261`, `#47221`, `#52760`, `#47233`, `#48364`, `#48416`, `#49032`, `#49127`, `#49170`, `#49988`, `#50632`, `#51753`, `#48415`, `#65844`, `#70147`, `#374151`
  - files: `agent/credential_pool.py`, `hermes_cli/auth.py`, `tests/agent/test_credential_pool_oauth_writethrough.py`, `tests/hermes_cli/test_auth_codex_provider.py`, `tests/hermes_cli/test_auth_profile_fallback.py`

## Fix status

- No merged fix on record.
- Subsystem: `agent`