[obasilakis]

Summary

• Five user-facing messages sent users to "Settings → GitHub token", which does not exist. They now say Settings → MCP Keys → Personal GitHub Token, the tab and card labels Settings renders.
• Backend (FORK_PAT_REQUIRED, saved-token failure) and frontend (saved-token line, Bind repo and fork-to-own missing-token errors) use the same wording.
• A unit test reads the tab label from Settings.vue and the card heading from UserGitHubPatPanel.vue, so renaming either fails CI.

Changes

• src/backend/services/agent_service/fork_to_own.py
• src/frontend/src/components/{SavedGithubTokenField,BindRepoPanel,CreateAgentModal}.vue
• src/frontend/tests/unit/savedGithubToken.mount.spec.js (two pins updated)
• tests/unit/test_3543_personal_token_location.py (new)
• docs/memory/requirements/github.md, docs/memory/feature-flows/github-import-intents.md (same string)

Test Plan

• cd tests && pytest unit/test_3543_personal_token_location.py unit/test_3164_fork_uses_saved_pat.py — 24 passed (new test was red on 4 of 5 before the fix)
• npx vitest run tests/unit/savedGithubToken.mount.spec.js tests/unit/rawColorRatchet.spec.js — 23 passed
• Manual: Bind repo with no token saved, message names MCP Keys → Personal GitHub Token

Fixes #3543

🤖 Generated with Claude Code

[obasilakis]

/review + /validate-pr

Verdict: APPROVE. No critical findings. Lane B, no schema change.

Review

• Scope clean. All three acceptance criteria met: the five messages name Settings → MCP Keys → Personal GitHub Token, backend and frontend use the same wording, and the two spec assertions are updated.
• The location exists for every user: the MCP Keys tab is adminOnly: false and renders UserGitHubPatPanel, heading "Personal GitHub Token".
• Mutation: restoring the dev strings turns 4/5 new pytest cases and 2/9 mount tests red; renaming the tab label fails test_location_matches_the_rendered_settings_labels.

Fixed after review

• Two code comments (fork_to_own.py, routers/git.py) still named the old location.
• The github-token-saved line's text is now asserted on the mounted component.

Validate: commits, base dev, size, closing keyword, security greps, file modes all ✅. CI green at review time.

Open: the manual Bind-repo check in the test plan.

[vybe]

merge-train: batch validated on train/20261023-2211 (#3930, all checks green)