From 52a73622c7c5528831c150b0715f93794cce4034 Mon Sep 17 00:00:00 2001
From: Gergo Magyar <gergomagyar@icloud.com>
Date: Sun, 14 Jun 2026 09:21:08 +0000
Subject: [PATCH] fix(ci-setup): drop double-hash in the ACA script auth
 comment
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

authComment lines already begin with `#`, but the injection site prefixed
another `# `, producing `# # Auth: …` in the generated bash script. Inject
the comment block without the extra prefix so each line is single-hashed.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 gitnexus/src/cli/ci-setup/templates.ts        | 2 +-
 gitnexus/test/unit/ci-setup-templates.test.ts | 6 ++++++
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/gitnexus/src/cli/ci-setup/templates.ts b/gitnexus/src/cli/ci-setup/templates.ts
index b97e514b4..bc193f2ab 100644
--- a/gitnexus/src/cli/ci-setup/templates.ts
+++ b/gitnexus/src/cli/ci-setup/templates.ts
@@ -273,7 +273,7 @@ function buildAcaDeployScript(opts: CiSetupOptions): string {
 # Deploy GitNexus as an Azure Container App.
 # Requires: az CLI, logged in with Contributor on the target resource group.
 #
-# ${authComment}
+${authComment}
 
 set -euo pipefail
 
diff --git a/gitnexus/test/unit/ci-setup-templates.test.ts b/gitnexus/test/unit/ci-setup-templates.test.ts
index a01698128..9828d165f 100644
--- a/gitnexus/test/unit/ci-setup-templates.test.ts
+++ b/gitnexus/test/unit/ci-setup-templates.test.ts
@@ -160,6 +160,12 @@ describe('ACA deploy script + connection guidance (U6)', () => {
     expect(md).toContain('ingress internal');
     expect(md).not.toContain(':4748/api/mcp');
   });
+
+  it('ACA auth comment is not double-hashed (U10)', () => {
+    expect(aca({ auth: 'token' })).not.toContain('# # ');
+    expect(aca({ auth: 'none' })).not.toContain('# # ');
+    expect(aca({ auth: 'token' })).toContain('# Auth: this deploys with --ingress internal');
+  });
 });
 
 describe('version pinning (U9)', () => {