From d6b65501ecd2936d79db0fa52009e81c1e36d68f Mon Sep 17 00:00:00 2001
From: vikingowl <christian@nachtigall.dev>
Date: Tue, 21 Apr 2026 09:48:32 +0200
Subject: [PATCH] security: redact agent ID from helm values; gitignore
 superpowers docs

Remove Mistral agent ID from agentDiscovery comment in helm values.yaml.
Add docs/superpowers/ to .gitignore to prevent re-tracking internal AI plans.
---
 .gitignore                      | 3 +++
 backend/deploy/helm/values.yaml | 2 +-
 2 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/.gitignore b/.gitignore
index f459274..0e6ee50 100644
--- a/.gitignore
+++ b/.gitignore
@@ -22,6 +22,9 @@ vendor/
 /app/.flutter-plugins
 /app/.flutter-plugins-dependencies
 
+# ── Docs ─────────────────────────────────────
+/docs/superpowers/
+
 # ── Shared ───────────────────────────────────
 .env
 .env.local
diff --git a/backend/deploy/helm/values.yaml b/backend/deploy/helm/values.yaml
index 36f5ced..1d952ef 100644
--- a/backend/deploy/helm/values.yaml
+++ b/backend/deploy/helm/values.yaml
@@ -99,7 +99,7 @@ smtp:
 ai:
   apiKey: ""
   agentSimple: ""
-  agentDiscovery: ""          # ag_019d9ec1702675dbbd80e526c8957ce2 in production
+  agentDiscovery: ""          # set via CI secret in production
   rateLimitRps: 1
 
 # Discovery cron — token passed via CI secrets during deploy.