mirror of
https://github.com/openai/codex.git
synced 2026-10-22 17:58:46 +00:00
## What changed - Add a test-only `CredentialStore` adapter that maps RMCP refreshes onto Codex's pinned OAuth credential backend. - Require refresh transaction guards for mutations, preserve the pinned backend, and update the runtime credential snapshot only after persistence succeeds. - Preserve scopes and token expiry metadata while rejecting credentials that no longer match the connection's client or issuer. ## Testing - Cover guarded save and clear operations, persistence failures, pinned-store read failures, replacement and removal handling, and expiry round trips. GitOrigin-RevId: eb1b98024322c03af94f5ab2e88c7dc4ae54893a