backend-manager 5.2.14 → 5.2.15

package/CHANGELOG.md

@@ -14,6 +14,12 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 - `Fixed` for any bug fixes.
 - `Security` in case of vulnerabilities.
 
+# [5.2.15] - 2026-05-28
+
+### Changed
+
+- **Standardized the GitHub token env var `GITHUB_TOKEN` → `GH_TOKEN`** across the entire repo, to match the convention used in all other ITW repos. Updated every GitHub-backed route and action (`admin/post`, `content/post`, `admin/repo/content`, `general/fetch-post`, `admin/write-repo-content`, `admin/edit-post`, `admin/create-post`, legacy `create-post`), the email image-host library (`libraries/email/generators/lib/image-host.js`), the CLI deprecated-env notice, the `templates/_.env` scaffold, the `docs/marketing-campaigns.md` reference, and all related test files. This is a hard rename with no fallback — any environment (CI, prod, local `.env`) that still sets `GITHUB_TOKEN` must switch to `GH_TOKEN` for the GitHub-backed routes to work.
+
 # [5.2.14] - 2026-05-28
 
 ### Removed

package/docs/marketing-campaigns.md

@@ -208,7 +208,7 @@ Templates add their own fields on top (e.g. classic adds `intro` + `sections`; f
 
 This means the newsletter is never "stuck" — even with Beehiiv disabled or failing, you get an actionable email pointing to ready-to-paste assets. The alert is best-effort; failure to send is logged but does not block the Firestore campaign-doc write.
 
-Requires `GITHUB_TOKEN` env var (org-scoped, write access to `newsletter-assets`). Without it, the cron's HTML/image upload calls throw and the run aborts.
+Requires `GH_TOKEN` env var (org-scoped, write access to `newsletter-assets`). Without it, the cron's HTML/image upload calls throw and the run aborts.
 
 ## Iteration test asset story
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "backend-manager",
-  "version": "5.2.14",
+  "version": "5.2.15",
   "description": "Quick tools for developing Firebase functions",
   "main": "src/manager/index.js",
   "bin": {

package/src/cli/commands/setup-tests/env-runtime-config-deprecated.js

@@ -36,7 +36,7 @@ class EnvRuntimeConfigDeprecatedTest extends BaseTest {
       '  The new format uses individual environment variables:\n' +
       '    BACKEND_MANAGER_KEY=\n' +
       '    BACKEND_MANAGER_NAMESPACE=\n' +
-      '    GITHUB_TOKEN=\n' +
+      '    GH_TOKEN=\n' +
       '  Please update your .env file manually and remove RUNTIME_CONFIG.'
     );
   }

package/src/manager/functions/_legacy/admin/create-post.js

@@ -55,7 +55,7 @@ let Module = {
           return new Promise(async function(resolve, reject) {
             let finalPath = poster.removeDirDot(meta.finalPath);
             let tempPath = (meta.tempPath);
-            await createFile(self.Manager.config?.github?.user, repoInfo.user, repoInfo.name, process.env.GITHUB_TOKEN, finalPath, await poster.readImage(tempPath))
+            await createFile(self.Manager.config?.github?.user, repoInfo.user, repoInfo.name, process.env.GH_TOKEN, finalPath, await poster.readImage(tempPath))
             .catch((e) => {
               // console.log('---CAUGHT 1', e);
             })
@@ -66,7 +66,7 @@ let Module = {
         let finalPost = await poster.create(assistant.request.data);
 
         // Save post OR commit
-        await createFile(self.Manager.config?.github?.user, repoInfo.user, repoInfo.name, process.env.GITHUB_TOKEN, poster.removeDirDot(finalPost.path), finalPost.content)
+        await createFile(self.Manager.config?.github?.user, repoInfo.user, repoInfo.name, process.env.GH_TOKEN, poster.removeDirDot(finalPost.path), finalPost.content)
         .catch((e) => {
           response.status = 400;
           response.error = new Error('Failed to post: ' + e);

package/src/manager/functions/core/actions/api/admin/create-post.js

@@ -39,7 +39,7 @@ Module.prototype.main = function () {
 
       // Setup Octokit
       self.octokit = new Octokit({
-        auth: process.env.GITHUB_TOKEN,
+        auth: process.env.GH_TOKEN,
       });
 
       // Check for required values

package/src/manager/functions/core/actions/api/admin/edit-post.js

@@ -25,7 +25,7 @@ Module.prototype.main = function () {
       }
 
       // Check for GitHub configuration
-      if (!process.env.GITHUB_TOKEN) {
+      if (!process.env.GH_TOKEN) {
         return reject(assistant.errorify(`GitHub API key not configured.`, {code: 500}));
       }
 
@@ -42,7 +42,7 @@ Module.prototype.main = function () {
 
       // Setup Octokit
       self.octokit = new Octokit({
-        auth: process.env.GITHUB_TOKEN,
+        auth: process.env.GH_TOKEN,
       });
 
       // Check for required values

package/src/manager/functions/core/actions/api/admin/write-repo-content.js

@@ -25,7 +25,7 @@ Module.prototype.main = function () {
       }
 
       // Check for GitHub configuration
-      if (!process.env.GITHUB_TOKEN) {
+      if (!process.env.GH_TOKEN) {
         return reject(assistant.errorify(`GitHub API key not configured.`, {code: 500}));
       }
 
@@ -42,7 +42,7 @@ Module.prototype.main = function () {
 
       // Setup Octokit
       self.octokit = new Octokit({
-        auth: process.env.GITHUB_TOKEN,
+        auth: process.env.GH_TOKEN,
       });
 
       // Check for required values

package/src/manager/functions/core/actions/api/general/fetch-post.js

@@ -14,7 +14,7 @@ Module.prototype.main = function () {
 
   return new Promise(async function(resolve, reject) {
     // Check for GitHub configuration
-    if (!process.env.GITHUB_TOKEN) {
+    if (!process.env.GH_TOKEN) {
       return reject(assistant.errorify(`GitHub API key not configured.`, {code: 500}));
     }
 
@@ -24,7 +24,7 @@ Module.prototype.main = function () {
 
     // Setup Octokit
     const octokit = new Octokit({
-      auth: process.env.GITHUB_TOKEN,
+      auth: process.env.GH_TOKEN,
     });
 
     // Setup options

package/src/manager/libraries/email/generators/lib/image-host.js

@@ -59,7 +59,7 @@ const PNG_MAGIC = Buffer.from([0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a]);
  * @param {string} [args.subject] - Newsletter subject. Embedded in the commit message so
  *                                  `git log` reads as a human-browseable history.
  * @param {string} [args.commitMessage] - Full override of the default commit message
- * @param {string} [args.token] - GitHub token (defaults to process.env.GITHUB_TOKEN)
+ * @param {string} [args.token] - GitHub token (defaults to process.env.GH_TOKEN)
  * @param {object} [args.assistant] - logger
  * @returns {Promise<{ urls: string[], paths: string[], htmlUrl?: string, htmlPath?: string, folderUrl: string, commitSha: string }>}
  */
@@ -76,10 +76,10 @@ async function uploadAssets({ images, html, markdown, summary, brandId, campaign
   validateBrandId(brandId);
   validateCampaignId(campaignId);
 
-  const githubToken = token || process.env.GITHUB_TOKEN;
+  const githubToken = token || process.env.GH_TOKEN;
 
   if (!githubToken) {
-    throw new Error('image-host: GITHUB_TOKEN env var (or token arg) is required');
+    throw new Error('image-host: GH_TOKEN env var (or token arg) is required');
   }
 
   const log = (msg) => assistant?.log ? assistant.log(`[image-host] ${msg}`) : null;

package/src/manager/routes/admin/post/post.js

@@ -37,7 +37,7 @@ module.exports = async ({ assistant, Manager, user, settings, analytics }) => {
   }
 
   // Check for GitHub configuration
-  if (!process.env.GITHUB_TOKEN) {
+  if (!process.env.GH_TOKEN) {
     return assistant.respond('GitHub API key not configured.', { code: 500 });
   }
 
@@ -52,7 +52,7 @@ module.exports = async ({ assistant, Manager, user, settings, analytics }) => {
 
   // Setup Octokit
   const octokit = new Octokit({
-    auth: process.env.GITHUB_TOKEN,
+    auth: process.env.GH_TOKEN,
   });
 
   // Check for required values

package/src/manager/routes/admin/post/put.js

@@ -20,7 +20,7 @@ module.exports = async ({ assistant, Manager, user, settings, analytics }) => {
   }
 
   // Check for GitHub configuration
-  if (!process.env.GITHUB_TOKEN) {
+  if (!process.env.GH_TOKEN) {
     return assistant.respond('GitHub API key not configured.', { code: 500 });
   }
 
@@ -35,7 +35,7 @@ module.exports = async ({ assistant, Manager, user, settings, analytics }) => {
 
   // Setup Octokit
   const octokit = new Octokit({
-    auth: process.env.GITHUB_TOKEN,
+    auth: process.env.GH_TOKEN,
   });
 
   // Check for required values

package/src/manager/routes/admin/repo/content/post.js

@@ -17,7 +17,7 @@ module.exports = async ({ assistant, Manager, user, settings, analytics }) => {
   }
 
   // Check for GitHub configuration
-  if (!process.env.GITHUB_TOKEN) {
+  if (!process.env.GH_TOKEN) {
     return assistant.respond('GitHub API key not configured.', { code: 500 });
   }
 
@@ -31,7 +31,7 @@ module.exports = async ({ assistant, Manager, user, settings, analytics }) => {
 
   // Setup Octokit
   const octokit = new Octokit({
-    auth: process.env.GITHUB_TOKEN,
+    auth: process.env.GH_TOKEN,
   });
 
   // Check for required values

package/src/manager/routes/content/post/get.js

@@ -8,7 +8,7 @@ const { parse } = require('yaml');
 module.exports = async ({ assistant, Manager, settings, analytics }) => {
 
   // Check for GitHub configuration
-  if (!process.env.GITHUB_TOKEN) {
+  if (!process.env.GH_TOKEN) {
     return assistant.respond('GitHub API key not configured.', { code: 500 });
   }
 
@@ -18,7 +18,7 @@ module.exports = async ({ assistant, Manager, settings, analytics }) => {
 
   // Setup Octokit
   const octokit = new Octokit({
-    auth: process.env.GITHUB_TOKEN,
+    auth: process.env.GH_TOKEN,
   });
 
   // Check for required parameters

package/templates/_.env

@@ -1,4 +1,7 @@
 # ========== Default Values ==========
+# GitHub
+GH_TOKEN=""
+
 # Backend Manager
 BACKEND_MANAGER_KEY=""
 BACKEND_MANAGER_WEBHOOK_KEY=""
@@ -6,9 +9,6 @@ BACKEND_MANAGER_NAMESPACE=""
 BACKEND_MANAGER_OPENAI_API_KEY=""
 BACKEND_MANAGER_ANTHROPIC_API_KEY=""
 
-# GitHub
-GITHUB_TOKEN=""
-
 # AI
 OPENAI_API_KEY=""
 ANTHROPIC_API_KEY=""

package/test/functions/admin/edit-post.js

@@ -112,7 +112,7 @@ module.exports = {
       name: 'create-test-post',
       auth: 'admin',
       timeout: 60000,
-      skip: !process.env.GITHUB_TOKEN ? 'GITHUB_TOKEN env var not set' : false,
+      skip: !process.env.GH_TOKEN ? 'GH_TOKEN env var not set' : false,
 
       async run({ assert, state, config }) {
         if (!config.github?.repo_website) {
@@ -120,7 +120,7 @@ module.exports = {
           return;
         }
 
-        const octokit = new Octokit({ auth: process.env.GITHUB_TOKEN });
+        const octokit = new Octokit({ auth: process.env.GH_TOKEN });
 
         // Parse owner/repo from githubRepoWebsite
         const repoMatch = config.github?.repo_website.match(/github\.com\/([^/]+)\/([^/]+)/);
@@ -181,7 +181,7 @@ module.exports = {
       name: 'verify-file-exists',
       auth: 'admin',
       timeout: 30000,
-      skip: !process.env.GITHUB_TOKEN ? 'GITHUB_TOKEN env var not set' : false,
+      skip: !process.env.GH_TOKEN ? 'GH_TOKEN env var not set' : false,
 
       async run({ assert, state, config }) {
         if (!state.postPath) {
@@ -190,7 +190,7 @@ module.exports = {
 
         state.postUrl = `https://${config.domain}/blog/${state.postSlug}`;
 
-        const octokit = new Octokit({ auth: process.env.GITHUB_TOKEN });
+        const octokit = new Octokit({ auth: process.env.GH_TOKEN });
 
         // Verify the file exists via direct API (not code search)
         const { data: fileData } = await octokit.rest.repos.getContent({
@@ -211,7 +211,7 @@ module.exports = {
       name: 'edit-test-post',
       auth: 'admin',
       timeout: 60000,
-      skip: !process.env.GITHUB_TOKEN ? 'GITHUB_TOKEN env var not set' : false,
+      skip: !process.env.GH_TOKEN ? 'GH_TOKEN env var not set' : false,
 
       async run({ http, assert, state }) {
         if (!state.postUrl) {
@@ -244,7 +244,7 @@ module.exports = {
       name: 'verify-edit',
       auth: 'admin',
       timeout: 30000,
-      skip: !process.env.GITHUB_TOKEN ? 'GITHUB_TOKEN env var not set' : false,
+      skip: !process.env.GH_TOKEN ? 'GH_TOKEN env var not set' : false,
 
       async run({ assert, state }) {
         if (!state.postPath || state.editSkipped) {
@@ -252,7 +252,7 @@ module.exports = {
           return;
         }
 
-        const octokit = new Octokit({ auth: process.env.GITHUB_TOKEN });
+        const octokit = new Octokit({ auth: process.env.GH_TOKEN });
 
         // Fetch the file directly from GitHub
         const { data: fileData } = await octokit.rest.repos.getContent({
@@ -309,11 +309,11 @@ module.exports = {
       timeout: 60000,
 
       async run({ state }) {
-        if (!process.env.GITHUB_TOKEN || !state.postPath) {
+        if (!process.env.GH_TOKEN || !state.postPath) {
           return;
         }
 
-        const octokit = new Octokit({ auth: process.env.GITHUB_TOKEN });
+        const octokit = new Octokit({ auth: process.env.GH_TOKEN });
 
         // Get the current SHA (may have changed after edit)
         try {

package/test/functions/admin/write-repo-content.js

@@ -4,7 +4,7 @@
  * Writes arbitrary content to a GitHub repository
  * Requires admin/blogger role, GitHub API key, and repo_website config
  *
- * IMPORTANT: These tests require GITHUB_TOKEN and github.repo_website to be configured.
+ * IMPORTANT: These tests require GH_TOKEN and github.repo_website to be configured.
  * If GitHub is not configured, the tests will fail.
  *
  * This is a suite because we need to clean up created files and cancel workflows after tests.
@@ -155,11 +155,11 @@ module.exports = {
       timeout: 60000,
 
       async run({ state, config }) {
-        if (!process.env.GITHUB_TOKEN || !config.github?.repo_website) {
+        if (!process.env.GH_TOKEN || !config.github?.repo_website) {
           return;
         }
 
-        const octokit = new Octokit({ auth: process.env.GITHUB_TOKEN });
+        const octokit = new Octokit({ auth: process.env.GH_TOKEN });
 
         // Parse owner/repo from githubRepoWebsite (e.g., 'https://github.com/owner/repo')
         const repoMatch = config.github?.repo_website.match(/github\.com\/([^/]+)\/([^/]+)/);

package/test/routes/admin/create-post.js

@@ -111,8 +111,8 @@ module.exports = {
       skip: !process.env.TEST_EXTENDED_MODE ? 'TEST_EXTENDED_MODE env var not set' : false,
 
       async run({ http, assert, state, config }) {
-        if (!process.env.GITHUB_TOKEN) {
-          assert.fail('GITHUB_TOKEN env var not set');
+        if (!process.env.GH_TOKEN) {
+          assert.fail('GH_TOKEN env var not set');
           return;
         }
 
@@ -167,7 +167,7 @@ module.exports = {
           return; // Previous test didn't run
         }
 
-        const octokit = new Octokit({ auth: process.env.GITHUB_TOKEN });
+        const octokit = new Octokit({ auth: process.env.GH_TOKEN });
 
         // Fetch the committed post from GitHub
         const { data: fileData } = await octokit.rest.repos.getContent({
@@ -203,7 +203,7 @@ module.exports = {
           return; // Previous test didn't run
         }
 
-        const octokit = new Octokit({ auth: process.env.GITHUB_TOKEN });
+        const octokit = new Octokit({ auth: process.env.GH_TOKEN });
         const imageDir = `src/assets/images/blog/post-${state.postId}/`;
 
         // List committed images and pick the header (matches the slugified URL "bem-test-create-post")
@@ -285,11 +285,11 @@ module.exports = {
       timeout: 60000,
 
       async run({ state }) {
-        if (!process.env.GITHUB_TOKEN || !state.postPath) {
+        if (!process.env.GH_TOKEN || !state.postPath) {
           return;
         }
 
-        const octokit = new Octokit({ auth: process.env.GITHUB_TOKEN });
+        const octokit = new Octokit({ auth: process.env.GH_TOKEN });
 
         // Delete the test post
         try {

package/test/routes/admin/post.js

@@ -114,7 +114,7 @@ module.exports = {
       name: 'create-test-post',
       auth: 'admin',
       timeout: 60000,
-      skip: !process.env.GITHUB_TOKEN ? 'GITHUB_TOKEN env var not set' : false,
+      skip: !process.env.GH_TOKEN ? 'GH_TOKEN env var not set' : false,
 
       async run({ assert, state, config }) {
         if (!config.github?.repo_website) {
@@ -122,7 +122,7 @@ module.exports = {
           return;
         }
 
-        const octokit = new Octokit({ auth: process.env.GITHUB_TOKEN });
+        const octokit = new Octokit({ auth: process.env.GH_TOKEN });
 
         // Parse owner/repo from githubRepoWebsite
         const repoMatch = config.github?.repo_website.match(/github\.com\/([^/]+)\/([^/]+)/);
@@ -183,7 +183,7 @@ module.exports = {
       name: 'verify-file-exists',
       auth: 'admin',
       timeout: 30000,
-      skip: !process.env.GITHUB_TOKEN ? 'GITHUB_TOKEN env var not set' : false,
+      skip: !process.env.GH_TOKEN ? 'GH_TOKEN env var not set' : false,
 
       async run({ assert, state, config }) {
         if (!state.postPath) {
@@ -192,7 +192,7 @@ module.exports = {
 
         state.postUrl = `https://${config.domain}/blog/${state.postSlug}`;
 
-        const octokit = new Octokit({ auth: process.env.GITHUB_TOKEN });
+        const octokit = new Octokit({ auth: process.env.GH_TOKEN });
 
         // Verify the file exists via direct API (not code search)
         const { data: fileData } = await octokit.rest.repos.getContent({
@@ -213,7 +213,7 @@ module.exports = {
       name: 'edit-test-post',
       auth: 'admin',
       timeout: 60000,
-      skip: !process.env.GITHUB_TOKEN ? 'GITHUB_TOKEN env var not set' : false,
+      skip: !process.env.GH_TOKEN ? 'GH_TOKEN env var not set' : false,
 
       async run({ http, assert, state }) {
         if (!state.postUrl) {
@@ -246,7 +246,7 @@ module.exports = {
       name: 'verify-edit',
       auth: 'admin',
       timeout: 30000,
-      skip: !process.env.GITHUB_TOKEN ? 'GITHUB_TOKEN env var not set' : false,
+      skip: !process.env.GH_TOKEN ? 'GH_TOKEN env var not set' : false,
 
       async run({ assert, state }) {
         if (!state.postPath || state.editSkipped) {
@@ -254,7 +254,7 @@ module.exports = {
           return;
         }
 
-        const octokit = new Octokit({ auth: process.env.GITHUB_TOKEN });
+        const octokit = new Octokit({ auth: process.env.GH_TOKEN });
 
         // Fetch the file directly from GitHub
         const { data: fileData } = await octokit.rest.repos.getContent({
@@ -311,11 +311,11 @@ module.exports = {
       timeout: 60000,
 
       async run({ state }) {
-        if (!process.env.GITHUB_TOKEN || !state.postPath) {
+        if (!process.env.GH_TOKEN || !state.postPath) {
           return;
         }
 
-        const octokit = new Octokit({ auth: process.env.GITHUB_TOKEN });
+        const octokit = new Octokit({ auth: process.env.GH_TOKEN });
 
         // Get the current SHA (may have changed after edit)
         try {

package/test/routes/admin/repo-content.js

@@ -4,7 +4,7 @@
  * Writes arbitrary content to a GitHub repository
  * Requires admin/blogger role, GitHub API key, and repo_website config
  *
- * IMPORTANT: These tests require GITHUB_TOKEN and github.repo_website to be configured.
+ * IMPORTANT: These tests require GH_TOKEN and github.repo_website to be configured.
  * If GitHub is not configured, the tests will fail.
  *
  * This is a suite because we need to clean up created files and cancel workflows after tests.
@@ -155,11 +155,11 @@ module.exports = {
       timeout: 60000,
 
       async run({ state, config }) {
-        if (!process.env.GITHUB_TOKEN || !config.github?.repo_website) {
+        if (!process.env.GH_TOKEN || !config.github?.repo_website) {
           return;
         }
 
-        const octokit = new Octokit({ auth: process.env.GITHUB_TOKEN });
+        const octokit = new Octokit({ auth: process.env.GH_TOKEN });
 
         // Parse owner/repo from githubRepoWebsite (e.g., 'https://github.com/owner/repo')
         const repoMatch = config.github?.repo_website.match(/github\.com\/([^/]+)\/([^/]+)/);