Cairn
NousResearch/hermes-agent

OAuth refresh drops credential fields on macOS

Cluster 83338 · agent. Data as of

2 open items. Fix merged in #115690 on 19 Sep 2026. Check it covers your case.

The short answer

1open issue
1open PR
4items grouped
Known?
Yes. 4 related items grouped here, 0 issues already closed.
Fix event
A fix was merged to main in PR #115690. Check it covers your case. No release data is tracked.
Tracker
The maintainers' tracker marks this unresolved. That is separate from the fix event.
Still open
1 issue and 1 PR.

These issues and PRs concern a bug where OAuth token refresh overwrites credential storage (file and/or macOS Keychain) without preserving existing fields like subscriptionType, potentially degrading Claude Code to API-key mode. The members address detection of the problem and proposed fixes to credential handling during refresh.

Open issues1

  • Issue#83338[Bug]: OAuth refresh rewrites ~/.claude/.credentials.json and drops subscriptionType, downgrading Claude Code to API-key mode

Open PRs1

  • PR#83366fix(oauth): preserve Claude Code credential keys on refresh

Fixes on record

Merged to main. A stamp counts the issues a fix is linked to.

  • #115690 macOS: a Hermes OAuth refresh no longer leaves Claude Code's Keychain holding a spent refresh token (#98334, salvage #109584)

    merged to main

    files: agent/anthropic_credentials.py, agent/credential_pool.py, tests/agent/test_anthropic_borrowed_row_authority.py, tests/agent/test_anthropic_keychain.py, tests/agent/test_auxiliary_client.py, tests/conftest.py

1 PR closed without merging

From the close comments: merged via another change 1

  • #109584 fix(agent): mirror Claude Code OAuth refresh into the macOS Keychain (#98334) · merged via another change → 14a3463, #115690, #98334
How this cluster was grouped
  • Link evidence (structural links throughout): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
  • Pairwise link density 0.50: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Subsystem
agent
Merged PRs
#115690
Closed issues
0
Attempts
1 PR closed without merging
Fix link checked
19 Sep 2026

For your agent

The same facts, typed.

cluster/83338.json
cluster/83338.md