{"repo":"NousResearch/hermes-agent","public_id":"78128","display_label":"Redacting dotted and prefixed API keys in output","summary":"These issues and PRs concern gaps in secret-redaction logic where API keys containing embedded dots or specific prefixes (such as Alibaba and Zhipu token formats) were not fully masked in terminal and tool output. The work focuses on extending redaction patterns to cover these key formats.","subsystem":"agent","counts":{"members":4,"open_issues":0,"open_issues_distinct":0,"open_prs":0,"closed_issues":1,"merged_prs":1,"attempt_prs":2},"landed_fix":{"status":"merged_to_main","basis":"structural","pr":114839,"merged_at":"2026-09-18T16:58:13+00:00"},"resolution":{"state":"resolved","by":"pr-114839"},"freshness":{"state":"verified","last_verified_at":"2026-09-18T16:58:13+00:00","is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":0.5},"fix_edges":[{"issue_number":78128,"pr_number":114839,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true,"pr_merged_at":"2026-09-18T16:58:13+00:00"},{"issue_number":106508,"pr_number":114839,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true,"pr_merged_at":"2026-09-18T16:58:13+00:00"},{"issue_number":113901,"pr_number":114839,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true,"pr_merged_at":"2026-09-18T16:58:13+00:00"}],"members":[{"kind":"issue","number":78128,"title":"[Bug]: redact — dotted sk-sp- keys (Alibaba Token Plan) leak past the sk- prefix pattern on the code_file path","url":null,"state":"closed"},{"kind":"pr","number":78138,"title":"fix(security): redact dotted Alibaba token-plan keys (#78128)","url":null,"state":"closed","close_reason":{"category":"uncategorized","implication":"needs_llm"},"merged":false},{"kind":"pr","number":106535,"title":"fix(terminal): mask JWT-format keys with embedded dots","url":null,"state":"closed","close_reason":{"category":"stale_abandoned","implication":"active"},"merged":false},{"kind":"pr","number":114839,"title":"fix(redact): dotted sk- keys and prefix-less Zhipu keys are fully masked in tool output (#113901, #78128, #106508, salvage #113908)","url":null,"state":"merged","close_reason":{"category":"merged"},"merged":true,"is_fix_pr":true,"fix_tier":"verified","files_changed":["agent/redact.py","tests/agent/test_redact.py","tests/tools/test_mcp_tool.py","tools/mcp_tool_common.py"]}],"trust":{"default_tier":"verified","includes_suggested":false}}