{"repo":"NousResearch/hermes-agent","public_id":"81012","display_label":"ANSI CSI sequence stripping in redaction masking","summary":"These issues and pull requests address a bug where incomplete ANSI CSI/SGR escape sequence stripping allows terminal control characters to defeat prefix and token-split masking in the redact logic. Multiple fix approaches target different masking code paths affected by the same underlying problem.","subsystem":"agent","counts":{"members":6,"open_issues":1,"open_issues_distinct":1,"open_prs":1,"closed_issues":0,"merged_prs":0,"attempt_prs":5},"landed_fix":null,"resolution":{"state":"unresolved","by":null},"freshness":{"state":"never_verified","last_verified_at":null,"is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":0.3333333333333333},"fix_edges":[],"members":[{"kind":"issue","number":81012,"title":"redact: complete CSI/SGR sequences defeat prefix masking (ESC-byte-only stripping leaves 'm'-glue)","url":null,"state":"open"},{"kind":"pr","number":81060,"title":"fix(redact): strip complete CSI/SGR sequences in token-split shadow (#81012)","url":null,"state":"closed","close_reason":{"refs":[{"kind":"pr","value":"#81121","number":81121},{"kind":"pr","value":"#81012","number":81012}],"category":"partial_fix","implication":"needs_llm"},"merged":false},{"kind":"pr","number":81062,"title":"fix(redact): strip complete CSI sequences before prefix masking (#81012)","url":null,"state":"closed","close_reason":{"refs":[{"kind":"pr","value":"#81060","number":81060}],"category":"superseded_by_pr","implication":"superseded"},"merged":false},{"kind":"pr","number":81079,"title":"fix(redact): strip complete CSI/SGR sequences from shadow copy (#81012)","url":null,"state":"closed","close_reason":{"refs":[{"kind":"pr","value":"#81060","number":81060}],"category":"superseded_by_pr","implication":"superseded"},"merged":false},{"kind":"pr","number":81083,"title":"fix(redact): strip complete CSI sequences before prefix-mask scan","url":null,"state":"closed","close_reason":{"refs":[{"kind":"pr","value":"#81060","number":81060}],"category":"superseded_by_pr","implication":"superseded"},"merged":false},{"kind":"pr","number":81121,"title":"fix(redact): strip complete ANSI CSI sequences before control-split masking","url":null,"state":"open","close_reason":{"refs":[{"kind":"commit","value":"bcdd84af31cc6638c232fa96e3bb9c733e79386e","number":0},{"kind":"commit","value":"4621a2d699daeaa92efb93dae9db076308cbe823","number":0},{"kind":"commit","value":"aaaaabbbbbcccccccccc","number":0},{"kind":"pr","value":"#77484","number":77484},{"kind":"pr","value":"#81012","number":81012}],"category":"implemented_elsewhere","implication":"superseded"},"merged":false}],"trust":{"default_tier":"verified","includes_suggested":false}}