Major security, observability, and configuration improvements:
## Security Hardening
- Implemented configurable CORS (no more wildcards)
- Added comprehensive auth middleware for admin endpoints
- Enhanced webhook HMAC validation
- Added input validation and rate limiting
- Security headers and CSP policies
## Configuration Management
- Made N8N webhook URL configurable (WHOOSH_N8N_BASE_URL)
- Replaced all hardcoded endpoints with environment variables
- Added feature flags for LLM vs heuristic composition
- Gitea fetch hardening with EAGER_FILTER and FULL_RESCAN options
## API Completeness
- Implemented GetCouncilComposition function
- Added GET /api/v1/councils/{id} endpoint
- Council artifacts API (POST/GET /api/v1/councils/{id}/artifacts)
- /admin/health/details endpoint with component status
- Database lookup for repository URLs (no hardcoded fallbacks)
## Observability & Performance
- Added OpenTelemetry distributed tracing with goal/pulse correlation
- Performance optimization database indexes
- Comprehensive health monitoring
- Enhanced logging and error handling
## Infrastructure
- Production-ready P2P discovery (replaces mock implementation)
- Removed unused Redis configuration
- Enhanced Docker Swarm integration
- Added migration files for performance indexes
## Code Quality
- Comprehensive input validation
- Graceful error handling and failsafe fallbacks
- Backwards compatibility maintained
- Following security best practices
🤖 Generated with [Claude Code](https://claude.ai/code)
Co-Authored-By: Claude <noreply@anthropic.com>
119 lines
3.9 KiB
Go
119 lines
3.9 KiB
Go
// Package source provides the Source interface.
|
|
// All source drivers must implement this interface, register themselves,
|
|
// optionally provide a `WithInstance` function and pass the tests
|
|
// in package source/testing.
|
|
package source
|
|
|
|
import (
|
|
"fmt"
|
|
"io"
|
|
nurl "net/url"
|
|
"sync"
|
|
)
|
|
|
|
var driversMu sync.RWMutex
|
|
var drivers = make(map[string]Driver)
|
|
|
|
// Driver is the interface every source driver must implement.
|
|
//
|
|
// How to implement a source driver?
|
|
// 1. Implement this interface.
|
|
// 2. Optionally, add a function named `WithInstance`.
|
|
// This function should accept an existing source instance and a Config{} struct
|
|
// and return a driver instance.
|
|
// 3. Add a test that calls source/testing.go:Test()
|
|
// 4. Add own tests for Open(), WithInstance() (when provided) and Close().
|
|
// All other functions are tested by tests in source/testing.
|
|
// Saves you some time and makes sure all source drivers behave the same way.
|
|
// 5. Call Register in init().
|
|
//
|
|
// Guidelines:
|
|
// - All configuration input must come from the URL string in func Open()
|
|
// or the Config{} struct in WithInstance. Don't os.Getenv().
|
|
// - Drivers are supposed to be read only.
|
|
// - Ideally don't load any contents (into memory) in Open or WithInstance.
|
|
type Driver interface {
|
|
// Open returns a new driver instance configured with parameters
|
|
// coming from the URL string. Migrate will call this function
|
|
// only once per instance.
|
|
Open(url string) (Driver, error)
|
|
|
|
// Close closes the underlying source instance managed by the driver.
|
|
// Migrate will call this function only once per instance.
|
|
Close() error
|
|
|
|
// First returns the very first migration version available to the driver.
|
|
// Migrate will call this function multiple times.
|
|
// If there is no version available, it must return os.ErrNotExist.
|
|
First() (version uint, err error)
|
|
|
|
// Prev returns the previous version for a given version available to the driver.
|
|
// Migrate will call this function multiple times.
|
|
// If there is no previous version available, it must return os.ErrNotExist.
|
|
Prev(version uint) (prevVersion uint, err error)
|
|
|
|
// Next returns the next version for a given version available to the driver.
|
|
// Migrate will call this function multiple times.
|
|
// If there is no next version available, it must return os.ErrNotExist.
|
|
Next(version uint) (nextVersion uint, err error)
|
|
|
|
// ReadUp returns the UP migration body and an identifier that helps
|
|
// finding this migration in the source for a given version.
|
|
// If there is no up migration available for this version,
|
|
// it must return os.ErrNotExist.
|
|
// Do not start reading, just return the ReadCloser!
|
|
ReadUp(version uint) (r io.ReadCloser, identifier string, err error)
|
|
|
|
// ReadDown returns the DOWN migration body and an identifier that helps
|
|
// finding this migration in the source for a given version.
|
|
// If there is no down migration available for this version,
|
|
// it must return os.ErrNotExist.
|
|
// Do not start reading, just return the ReadCloser!
|
|
ReadDown(version uint) (r io.ReadCloser, identifier string, err error)
|
|
}
|
|
|
|
// Open returns a new driver instance.
|
|
func Open(url string) (Driver, error) {
|
|
u, err := nurl.Parse(url)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
if u.Scheme == "" {
|
|
return nil, fmt.Errorf("source driver: invalid URL scheme")
|
|
}
|
|
|
|
driversMu.RLock()
|
|
d, ok := drivers[u.Scheme]
|
|
driversMu.RUnlock()
|
|
if !ok {
|
|
return nil, fmt.Errorf("source driver: unknown driver '%s' (forgotten import?)", u.Scheme)
|
|
}
|
|
|
|
return d.Open(url)
|
|
}
|
|
|
|
// Register globally registers a driver.
|
|
func Register(name string, driver Driver) {
|
|
driversMu.Lock()
|
|
defer driversMu.Unlock()
|
|
if driver == nil {
|
|
panic("Register driver is nil")
|
|
}
|
|
if _, dup := drivers[name]; dup {
|
|
panic("Register called twice for driver " + name)
|
|
}
|
|
drivers[name] = driver
|
|
}
|
|
|
|
// List lists the registered drivers
|
|
func List() []string {
|
|
driversMu.RLock()
|
|
defer driversMu.RUnlock()
|
|
names := make([]string, 0, len(drivers))
|
|
for n := range drivers {
|
|
names = append(names, n)
|
|
}
|
|
return names
|
|
}
|