Skip to content

refactor(mcp): drop cross-process mcp auth file locking - #1458

Merged
TheGreatAxios merged 1 commit into
mainfrom
cl-10662-drop-auth-file-lock
Oct 16, 2026
Merged

TheGreatAxios merged 1 commit into
mainfrom
cl-10662-drop-auth-file-lock

Conversation

@TheGreatAxios

Copy link
Copy Markdown
Collaborator

Summary

  • MCP auth files no longer take a cross-process lock or reload on every token read. Same-process updates still queue, and writes stay an atomic rename.
  • A live session keeps its own tokens. A session started later still reads the file. Resetting one session no longer deletes another session's client registration.

Two processes can still lose an overlapping write. That is the single-process trade.

Verification

  • bun run check passes (9123 tests, 0 fail)
  • bun test ./src/mcp/auth-store.test.ts ./src/mcp/oauth-provider.test.ts ./src/mcp/client-redirect-policy.test.ts --randomize --seed 424242 passes (41 tests)

Part of CL-10662

@linear-code

linear-code Bot commented Oct 16, 2026

Copy link
Copy Markdown

CL-10662

@corbits-triage

corbits-triage Bot commented Oct 16, 2026 •

Copy link
Copy Markdown
Contributor

Triage: Pass

No changes needed from you. A maintainer will review this pull request.

@TheGreatAxios
TheGreatAxios merged commit b996533 into main Oct 16, 2026
13 checks passed
@TheGreatAxios
TheGreatAxios deleted the cl-10662-drop-auth-file-lock branch October 16, 2026 05:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant