mirror of
https://github.com/openai/codex.git
synced 2026-08-24 13:20:07 +00:00
## Why Concurrent MCP startup and status checks should not serialize when they only read the shared credential store. Repeated reads of the encrypted MCP OAuth store also needlessly decrypted unchanged contents. ## What changed - Use shared locks for `File` and `Secrets` credential reads while keeping saves and deletes exclusive. - Cache decrypted MCP OAuth secrets by store path, ciphertext, and passphrase, and invalidate the cache after writes. ## Testing - Cover concurrent readers, reader/writer exclusion, shared credential loads, and cache invalidation after updates and deletes. GitOrigin-RevId: f13512e6404d4919879ba5ba77a3e34e52b35640