docs: redact secret literal from db.ts scrub-comment (gitleaks hygiene)

f771a9127894bd3b5307d45f15a9538fb0e2597d · 2026-05-30 10:00:36 -0700 · Steve

Files touched

M lib/db.ts

Diff

commit f771a9127894bd3b5307d45f15a9538fb0e2597d
Author: Steve <steve@designerwallcoverings.com>
Date:   Sat May 30 10:00:36 2026 -0700

    docs: redact secret literal from db.ts scrub-comment (gitleaks hygiene)
---
 lib/db.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/db.ts b/lib/db.ts
index a48d991..f2dcdd7 100644
--- a/lib/db.ts
+++ b/lib/db.ts
@@ -1,6 +1,6 @@
 import { Pool, PoolClient, QueryResult, QueryResultRow } from 'pg';
 
-// 2026-05-05 (P0 leak scrub): hardcoded DW2024SecurePass fallback removed.
+// 2026-05-05 (P0 leak scrub): hardcoded DB-password fallback removed.
 // Also: the fallback pointed at dw_unified (DW commerce DB) which is the
 // wrong database — PoppyPetitions uses its own schema. Fail-fast on missing
 // DATABASE_URL is safer than silently writing to the wrong place.

← 7f44f02 P1-B: defensive input-length caps on petition write endpoint · back to PoppyPetitions · P1-E: agent_id session-binding via validate-and-audit (DTD v b444995 →