@episoda/cli 0.2.159 → 0.2.160

package/dist/daemon/daemon-process.js

@@ -2909,7 +2909,7 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "@episoda/cli",
-      version: "0.2.159",
+      version: "0.2.160",
       description: "CLI tool for Episoda local development workflow orchestration",
       main: "dist/index.js",
       types: "dist/index.d.ts",
@@ -6410,6 +6410,24 @@ var path10 = __toESM(require("path"));
 var fs9 = __toESM(require("fs"));
 var os4 = __toESM(require("os"));
 var import_core8 = __toESM(require_dist());
+
+// src/utils/github-token.ts
+var INVALID_GITHUB_TOKEN_LITERALS = /* @__PURE__ */ new Set([
+  "${GITHUB_PERSONAL_ACCESS_TOKEN}",
+  "undefined",
+  "null",
+  '""',
+  "''"
+]);
+function sanitizeGithubToken(token) {
+  if (token === void 0) return "";
+  const trimmed = token.trim();
+  if (!trimmed) return "";
+  if (INVALID_GITHUB_TOKEN_LITERALS.has(trimmed)) return "";
+  return trimmed;
+}
+
+// src/agent/mcp-server-configurator.ts
 var McpServerConfigurator = class {
   // ---------------------------------------------------------------------------
   // MCP Auth Resolution
@@ -6479,10 +6497,10 @@ var McpServerConfigurator = class {
     }
     servers.push({
       name: "github",
-      command: "npx -y @modelcontextprotocol/server-github"
+      command: "bash scripts/github-mcp-server.sh"
     });
-    if (!session.credentials.githubToken) {
-      console.warn("[McpServerConfigurator] EP1296: GitHub MCP registered without token (githubToken missing)");
+    if (!sanitizeGithubToken(session.credentials.githubToken)) {
+      console.warn('[McpServerConfigurator] EP1377: GitHub MCP registered without token \u2014 GitHub tools may fail with "Requires authentication"');
     } else {
       console.log("[McpServerConfigurator] EP1251: GitHub MCP server registered");
     }
@@ -7369,9 +7387,10 @@ ${message}`;
           if (sessionToken) {
             episodaMcpEnv.EPISODA_SESSION_TOKEN = sessionToken;
           }
+          const githubToken = sanitizeGithubToken(session.credentials.githubToken);
           const githubMcpEnv = {
             ...baseEnv,
-            GITHUB_PERSONAL_ACCESS_TOKEN: session.credentials.githubToken || ""
+            GITHUB_PERSONAL_ACCESS_TOKEN: githubToken
           };
           for (const mcpServer of mcpServersToRegister) {
             const parts = mcpServer.command.split(" ");
@@ -7506,10 +7525,7 @@ ${message}`;
               const args2 = parts.slice(1);
               let env;
               if (server.name === "github") {
-                env = {
-                  ...baseEnv,
-                  GITHUB_PERSONAL_ACCESS_TOKEN: session.credentials.githubToken || ""
-                };
+                env = { ...baseEnv };
               } else {
                 env = {
                   ...baseEnv,
@@ -7629,9 +7645,10 @@ ${message}`;
           console.warn("[AgentManager] EP1287: No session token available for MCP servers");
         }
       }
-      if (session.credentials.githubToken) {
-        envVars.GITHUB_PERSONAL_ACCESS_TOKEN = session.credentials.githubToken;
-        console.log("[AgentManager] EP1251: Set GITHUB_PERSONAL_ACCESS_TOKEN for GitHub MCP");
+      const processGithubToken = sanitizeGithubToken(session.credentials.githubToken);
+      if (processGithubToken) {
+        envVars.GITHUB_PERSONAL_ACCESS_TOKEN = processGithubToken;
+        console.log("[AgentManager] EP1377: Set GITHUB_PERSONAL_ACCESS_TOKEN for GitHub MCP");
       }
       if (useApiKey && session.credentials.apiKey) {
         if (provider === "codex") {
@@ -14349,9 +14366,9 @@ var Daemon = class _Daemon {
     });
     if (!process.env.EPISODA_CONTAINER_ID) {
       if (process.env.GITHUB_PERSONAL_ACCESS_TOKEN) {
-        console.log("[Daemon] EP1365: GITHUB_PERSONAL_ACCESS_TOKEN is set in environment");
+        console.log("[Daemon] EP1377: GITHUB_PERSONAL_ACCESS_TOKEN is set in environment");
       } else {
-        console.warn("[Daemon] EP1365: GITHUB_PERSONAL_ACCESS_TOKEN not set - GitHub MCP tools in local dev may fail");
+        console.log("[Daemon] EP1377: GITHUB_PERSONAL_ACCESS_TOKEN not set in daemon env (OK - daemon sessions inject token via credentials, local CLI uses scripts/github-mcp-server.sh)");
       }
     }
     this.updateManager.checkOnStartup();