Cairn
NousResearch/hermes-agent

Codex token refresh not persisted to global auth store

Cluster 87503 · agent. Data as of

Nothing open on GitHub. Fix merged in #110024 on 14 Sep 2026. Check it covers your case.

The short answer

0open issues
0open PRs
4items grouped
Known?
Yes. 4 related items grouped here, 1 issue already closed.
Fix event
A fix was merged to main in PR #110024. Check it covers your case. No release data is tracked.
Tracker
The maintainers' tracker marks this resolved, deciding PR #110024. That is separate from the fix event.
Still open
Nothing open on GitHub.

A bug where profile-scoped Codex token refreshes fail to write updated tokens back to the global authentication store, causing rotation family revocation. Multiple fixes and a salvage attempt address the write-through and reuse behavior of the root grant.

Open issues0

No open issues.

Open PRs0

No open pull requests.

Fixes on record

Merged to main. A stamp counts the issues a fix is linked to.

  • #110024 fix(auth): a Codex refresh under a profile rotates the root grant it borrowed (#87503, salvage #87510)

    merged to main

    files: hermes_cli/auth_codex.py, tests/hermes_cli/test_codex_token_writethrough.py

2 PRs closed without merging

From the close comments: done elsewhere 1 · merged via another change 1

  • #87510 fix(auth): write profile-refreshed Codex tokens through to the global store · merged via another change → 66ddd5f, #110024, #87503
  • #95984 fix(auth): codex singleton root write-through + reuse-rescue (#87503) · done elsewhere → 66ddd5f, #110024, #87510, #87503
Closed issues · 1
  • Closed#87503[Bug][auth] _save_codex_tokens() never writes back to the global auth store, so a profile-scoped refresh revokes the rotation family
How this cluster was grouped
  • Link evidence (structural links throughout): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
  • Pairwise link density 0.50: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Subsystem
agent
Merged PRs
#110024
Closed issues
1
Attempts
2 PRs closed without merging
Fix link checked
14 Sep 2026

For your agent

The same facts, typed.

cluster/87503.json
cluster/87503.md