From ea7c74f33b154c4b2ff7e0e86db1c04f54c65f9a Mon Sep 17 00:00:00 2001
From: ezl-keygraph <ezhil@keygraph.io>
Date: Tue, 17 Mar 2026 03:22:10 +0530
Subject: [PATCH] fix: resolve unsubstituted placeholders in report prompt

Remove unused {{GITHUB_URL}} placeholder and wire up {{AUTH_CONTEXT}}
with structured auth context (login type, username, URL, MFA status).
---
 apps/worker/prompts/report-executive.txt   |  1 -
 apps/worker/src/services/prompt-manager.ts | 22 +++++++++++++++++++++-
 2 files changed, 21 insertions(+), 2 deletions(-)

diff --git a/apps/worker/prompts/report-executive.txt b/apps/worker/prompts/report-executive.txt
index 565ba25..6dcca3a 100644
--- a/apps/worker/prompts/report-executive.txt
+++ b/apps/worker/prompts/report-executive.txt
@@ -21,7 +21,6 @@ IMPORTANT: You are MODIFYING an existing file, not creating a new one.
 
 <target>
 URL: {{WEB_URL}}
-Repository: {{GITHUB_URL}}
 </target>
 
 <context>
diff --git a/apps/worker/src/services/prompt-manager.ts b/apps/worker/src/services/prompt-manager.ts
index 0876431..de93c48 100644
--- a/apps/worker/src/services/prompt-manager.ts
+++ b/apps/worker/src/services/prompt-manager.ts
@@ -123,6 +123,25 @@ async function processIncludes(content: string, baseDir: string): Promise<string
   return content;
 }
 
+function buildAuthContext(config: DistributedConfig | null): string {
+  if (!config?.authentication) {
+    return 'No authentication configured - unauthenticated testing only';
+  }
+
+  const auth = config.authentication;
+  const lines = [
+    `- Login type: ${auth.login_type.toUpperCase()}`,
+    `- Username: ${auth.credentials.username}`,
+    `- Login URL: ${auth.login_url}`,
+  ];
+
+  if (auth.credentials?.totp_secret) {
+    lines.push('- MFA: TOTP enabled');
+  }
+
+  return lines.join('\n');
+}
+
 // Pure function: Variable interpolation
 async function interpolateVariables(
   template: string,
@@ -147,7 +166,8 @@ async function interpolateVariables(
     let result = template
       .replace(/{{WEB_URL}}/g, variables.webUrl)
       .replace(/{{REPO_PATH}}/g, variables.repoPath)
-      .replace(/{{MCP_SERVER}}/g, variables.MCP_SERVER || 'playwright-agent1');
+      .replace(/{{MCP_SERVER}}/g, variables.MCP_SERVER || 'playwright-agent1')
+      .replace(/{{AUTH_CONTEXT}}/g, buildAuthContext(config));
 
     if (config) {
       // Handle rules section - if both are empty, use cleaner messaging