131868bdca
Major security, observability, and configuration improvements:
## Security Hardening
- Implemented configurable CORS (no more wildcards)
- Added comprehensive auth middleware for admin endpoints
- Enhanced webhook HMAC validation
- Added input validation and rate limiting
- Security headers and CSP policies
## Configuration Management
- Made N8N webhook URL configurable (WHOOSH_N8N_BASE_URL)
- Replaced all hardcoded endpoints with environment variables
- Added feature flags for LLM vs heuristic composition
- Gitea fetch hardening with EAGER_FILTER and FULL_RESCAN options
## API Completeness
- Implemented GetCouncilComposition function
- Added GET /api/v1/councils/{id} endpoint
- Council artifacts API (POST/GET /api/v1/councils/{id}/artifacts)
- /admin/health/details endpoint with component status
- Database lookup for repository URLs (no hardcoded fallbacks)
## Observability & Performance
- Added OpenTelemetry distributed tracing with goal/pulse correlation
- Performance optimization database indexes
- Comprehensive health monitoring
- Enhanced logging and error handling
## Infrastructure
- Production-ready P2P discovery (replaces mock implementation)
- Removed unused Redis configuration
- Enhanced Docker Swarm integration
- Added migration files for performance indexes
## Code Quality
- Comprehensive input validation
- Graceful error handling and failsafe fallbacks
- Backwards compatibility maintained
- Following security best practices
🤖 Generated with [Claude Code](https://claude.ai/code)
Co-Authored-By: Claude <noreply@anthropic.com>
45 lines
871 B
Makefile
45 lines
871 B
Makefile
PKGS := github.com/pkg/errors
|
|
SRCDIRS := $(shell go list -f '{{.Dir}}' $(PKGS))
|
|
GO := go
|
|
|
|
check: test vet gofmt misspell unconvert staticcheck ineffassign unparam
|
|
|
|
test:
|
|
$(GO) test $(PKGS)
|
|
|
|
vet: | test
|
|
$(GO) vet $(PKGS)
|
|
|
|
staticcheck:
|
|
$(GO) get honnef.co/go/tools/cmd/staticcheck
|
|
staticcheck -checks all $(PKGS)
|
|
|
|
misspell:
|
|
$(GO) get github.com/client9/misspell/cmd/misspell
|
|
misspell \
|
|
-locale GB \
|
|
-error \
|
|
*.md *.go
|
|
|
|
unconvert:
|
|
$(GO) get github.com/mdempsky/unconvert
|
|
unconvert -v $(PKGS)
|
|
|
|
ineffassign:
|
|
$(GO) get github.com/gordonklaus/ineffassign
|
|
find $(SRCDIRS) -name '*.go' | xargs ineffassign
|
|
|
|
pedantic: check errcheck
|
|
|
|
unparam:
|
|
$(GO) get mvdan.cc/unparam
|
|
unparam ./...
|
|
|
|
errcheck:
|
|
$(GO) get github.com/kisielk/errcheck
|
|
errcheck $(PKGS)
|
|
|
|
gofmt:
|
|
@echo Checking code is gofmted
|
|
@test -z "$(shell gofmt -s -l -d -e $(SRCDIRS) | tee /dev/stderr)"
|