hermes - 💡(How to fix) Fix [Feishu] Session titles in /sessions and /resume expose private conversation content [1 comments, 1 participants]

Problem

When the Feishu (Lark) adapter displays the session list via /sessions or /resume, each session is shown with a title auto-generated from the conversation content (e.g. User asks about installing last30days-skill or Debugging OAuth flow with GitHub API).

These titles are visible to anyone who has access to the Feishu bot/DM — including other members in group chats.

Privacy Issues

1. Group chat exposure: In Feishu group chats, session titles from other users' conversations may be visible to all group members
2. Sensitive content in titles: The auto-generated title can reveal:
   • Project names and internal code names
   • Personal queries and errors the user was working on
   • Business context from the conversation
3. No opt-out: Users cannot disable title generation or suppress titles in the session list
4. No per-session privacy control: Even if a user starts a sensitive conversation, the title still gets generated and listed

Expected Behavior

• Session titles should be disabled by default in group contexts, or
• Users should have a privacy setting to disable conversation-derived titles in session lists
• Session list should show generic titles (e.g. Session 1, Session 2, Conversation from Apr 24) instead of auto-generated summaries
• Consider adding --privacy flag to /sessions to suppress titles

Related

This issue is related to the session switching UX problem (Issue #15537) — fixing both together would give users proper control over what is visible in the session list.

Environment

• Hermes Agent version: latest
• Platform: Feishu/Lark via WebSocket gateway
• Channel: Group chat