131868bdca
Major security, observability, and configuration improvements:
## Security Hardening
- Implemented configurable CORS (no more wildcards)
- Added comprehensive auth middleware for admin endpoints
- Enhanced webhook HMAC validation
- Added input validation and rate limiting
- Security headers and CSP policies
## Configuration Management
- Made N8N webhook URL configurable (WHOOSH_N8N_BASE_URL)
- Replaced all hardcoded endpoints with environment variables
- Added feature flags for LLM vs heuristic composition
- Gitea fetch hardening with EAGER_FILTER and FULL_RESCAN options
## API Completeness
- Implemented GetCouncilComposition function
- Added GET /api/v1/councils/{id} endpoint
- Council artifacts API (POST/GET /api/v1/councils/{id}/artifacts)
- /admin/health/details endpoint with component status
- Database lookup for repository URLs (no hardcoded fallbacks)
## Observability & Performance
- Added OpenTelemetry distributed tracing with goal/pulse correlation
- Performance optimization database indexes
- Comprehensive health monitoring
- Enhanced logging and error handling
## Infrastructure
- Production-ready P2P discovery (replaces mock implementation)
- Removed unused Redis configuration
- Enhanced Docker Swarm integration
- Added migration files for performance indexes
## Code Quality
- Comprehensive input validation
- Graceful error handling and failsafe fallbacks
- Backwards compatibility maintained
- Following security best practices
🤖 Generated with [Claude Code](https://claude.ai/code)
Co-Authored-By: Claude <noreply@anthropic.com>
372 lines
8.4 KiB
Go
372 lines
8.4 KiB
Go
// Copyright The OpenTelemetry Authors
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
package global // import "go.opentelemetry.io/otel/internal/global"
|
|
|
|
import (
|
|
"context"
|
|
"sync/atomic"
|
|
|
|
"go.opentelemetry.io/otel/metric"
|
|
"go.opentelemetry.io/otel/metric/embedded"
|
|
)
|
|
|
|
// unwrapper unwraps to return the underlying instrument implementation.
|
|
type unwrapper interface {
|
|
Unwrap() metric.Observable
|
|
}
|
|
|
|
type afCounter struct {
|
|
embedded.Float64ObservableCounter
|
|
metric.Float64Observable
|
|
|
|
name string
|
|
opts []metric.Float64ObservableCounterOption
|
|
|
|
delegate atomic.Value // metric.Float64ObservableCounter
|
|
}
|
|
|
|
var (
|
|
_ unwrapper = (*afCounter)(nil)
|
|
_ metric.Float64ObservableCounter = (*afCounter)(nil)
|
|
)
|
|
|
|
func (i *afCounter) setDelegate(m metric.Meter) {
|
|
ctr, err := m.Float64ObservableCounter(i.name, i.opts...)
|
|
if err != nil {
|
|
GetErrorHandler().Handle(err)
|
|
return
|
|
}
|
|
i.delegate.Store(ctr)
|
|
}
|
|
|
|
func (i *afCounter) Unwrap() metric.Observable {
|
|
if ctr := i.delegate.Load(); ctr != nil {
|
|
return ctr.(metric.Float64ObservableCounter)
|
|
}
|
|
return nil
|
|
}
|
|
|
|
type afUpDownCounter struct {
|
|
embedded.Float64ObservableUpDownCounter
|
|
metric.Float64Observable
|
|
|
|
name string
|
|
opts []metric.Float64ObservableUpDownCounterOption
|
|
|
|
delegate atomic.Value // metric.Float64ObservableUpDownCounter
|
|
}
|
|
|
|
var (
|
|
_ unwrapper = (*afUpDownCounter)(nil)
|
|
_ metric.Float64ObservableUpDownCounter = (*afUpDownCounter)(nil)
|
|
)
|
|
|
|
func (i *afUpDownCounter) setDelegate(m metric.Meter) {
|
|
ctr, err := m.Float64ObservableUpDownCounter(i.name, i.opts...)
|
|
if err != nil {
|
|
GetErrorHandler().Handle(err)
|
|
return
|
|
}
|
|
i.delegate.Store(ctr)
|
|
}
|
|
|
|
func (i *afUpDownCounter) Unwrap() metric.Observable {
|
|
if ctr := i.delegate.Load(); ctr != nil {
|
|
return ctr.(metric.Float64ObservableUpDownCounter)
|
|
}
|
|
return nil
|
|
}
|
|
|
|
type afGauge struct {
|
|
embedded.Float64ObservableGauge
|
|
metric.Float64Observable
|
|
|
|
name string
|
|
opts []metric.Float64ObservableGaugeOption
|
|
|
|
delegate atomic.Value // metric.Float64ObservableGauge
|
|
}
|
|
|
|
var (
|
|
_ unwrapper = (*afGauge)(nil)
|
|
_ metric.Float64ObservableGauge = (*afGauge)(nil)
|
|
)
|
|
|
|
func (i *afGauge) setDelegate(m metric.Meter) {
|
|
ctr, err := m.Float64ObservableGauge(i.name, i.opts...)
|
|
if err != nil {
|
|
GetErrorHandler().Handle(err)
|
|
return
|
|
}
|
|
i.delegate.Store(ctr)
|
|
}
|
|
|
|
func (i *afGauge) Unwrap() metric.Observable {
|
|
if ctr := i.delegate.Load(); ctr != nil {
|
|
return ctr.(metric.Float64ObservableGauge)
|
|
}
|
|
return nil
|
|
}
|
|
|
|
type aiCounter struct {
|
|
embedded.Int64ObservableCounter
|
|
metric.Int64Observable
|
|
|
|
name string
|
|
opts []metric.Int64ObservableCounterOption
|
|
|
|
delegate atomic.Value // metric.Int64ObservableCounter
|
|
}
|
|
|
|
var (
|
|
_ unwrapper = (*aiCounter)(nil)
|
|
_ metric.Int64ObservableCounter = (*aiCounter)(nil)
|
|
)
|
|
|
|
func (i *aiCounter) setDelegate(m metric.Meter) {
|
|
ctr, err := m.Int64ObservableCounter(i.name, i.opts...)
|
|
if err != nil {
|
|
GetErrorHandler().Handle(err)
|
|
return
|
|
}
|
|
i.delegate.Store(ctr)
|
|
}
|
|
|
|
func (i *aiCounter) Unwrap() metric.Observable {
|
|
if ctr := i.delegate.Load(); ctr != nil {
|
|
return ctr.(metric.Int64ObservableCounter)
|
|
}
|
|
return nil
|
|
}
|
|
|
|
type aiUpDownCounter struct {
|
|
embedded.Int64ObservableUpDownCounter
|
|
metric.Int64Observable
|
|
|
|
name string
|
|
opts []metric.Int64ObservableUpDownCounterOption
|
|
|
|
delegate atomic.Value // metric.Int64ObservableUpDownCounter
|
|
}
|
|
|
|
var (
|
|
_ unwrapper = (*aiUpDownCounter)(nil)
|
|
_ metric.Int64ObservableUpDownCounter = (*aiUpDownCounter)(nil)
|
|
)
|
|
|
|
func (i *aiUpDownCounter) setDelegate(m metric.Meter) {
|
|
ctr, err := m.Int64ObservableUpDownCounter(i.name, i.opts...)
|
|
if err != nil {
|
|
GetErrorHandler().Handle(err)
|
|
return
|
|
}
|
|
i.delegate.Store(ctr)
|
|
}
|
|
|
|
func (i *aiUpDownCounter) Unwrap() metric.Observable {
|
|
if ctr := i.delegate.Load(); ctr != nil {
|
|
return ctr.(metric.Int64ObservableUpDownCounter)
|
|
}
|
|
return nil
|
|
}
|
|
|
|
type aiGauge struct {
|
|
embedded.Int64ObservableGauge
|
|
metric.Int64Observable
|
|
|
|
name string
|
|
opts []metric.Int64ObservableGaugeOption
|
|
|
|
delegate atomic.Value // metric.Int64ObservableGauge
|
|
}
|
|
|
|
var (
|
|
_ unwrapper = (*aiGauge)(nil)
|
|
_ metric.Int64ObservableGauge = (*aiGauge)(nil)
|
|
)
|
|
|
|
func (i *aiGauge) setDelegate(m metric.Meter) {
|
|
ctr, err := m.Int64ObservableGauge(i.name, i.opts...)
|
|
if err != nil {
|
|
GetErrorHandler().Handle(err)
|
|
return
|
|
}
|
|
i.delegate.Store(ctr)
|
|
}
|
|
|
|
func (i *aiGauge) Unwrap() metric.Observable {
|
|
if ctr := i.delegate.Load(); ctr != nil {
|
|
return ctr.(metric.Int64ObservableGauge)
|
|
}
|
|
return nil
|
|
}
|
|
|
|
// Sync Instruments.
|
|
type sfCounter struct {
|
|
embedded.Float64Counter
|
|
|
|
name string
|
|
opts []metric.Float64CounterOption
|
|
|
|
delegate atomic.Value // metric.Float64Counter
|
|
}
|
|
|
|
var _ metric.Float64Counter = (*sfCounter)(nil)
|
|
|
|
func (i *sfCounter) setDelegate(m metric.Meter) {
|
|
ctr, err := m.Float64Counter(i.name, i.opts...)
|
|
if err != nil {
|
|
GetErrorHandler().Handle(err)
|
|
return
|
|
}
|
|
i.delegate.Store(ctr)
|
|
}
|
|
|
|
func (i *sfCounter) Add(ctx context.Context, incr float64, opts ...metric.AddOption) {
|
|
if ctr := i.delegate.Load(); ctr != nil {
|
|
ctr.(metric.Float64Counter).Add(ctx, incr, opts...)
|
|
}
|
|
}
|
|
|
|
type sfUpDownCounter struct {
|
|
embedded.Float64UpDownCounter
|
|
|
|
name string
|
|
opts []metric.Float64UpDownCounterOption
|
|
|
|
delegate atomic.Value // metric.Float64UpDownCounter
|
|
}
|
|
|
|
var _ metric.Float64UpDownCounter = (*sfUpDownCounter)(nil)
|
|
|
|
func (i *sfUpDownCounter) setDelegate(m metric.Meter) {
|
|
ctr, err := m.Float64UpDownCounter(i.name, i.opts...)
|
|
if err != nil {
|
|
GetErrorHandler().Handle(err)
|
|
return
|
|
}
|
|
i.delegate.Store(ctr)
|
|
}
|
|
|
|
func (i *sfUpDownCounter) Add(ctx context.Context, incr float64, opts ...metric.AddOption) {
|
|
if ctr := i.delegate.Load(); ctr != nil {
|
|
ctr.(metric.Float64UpDownCounter).Add(ctx, incr, opts...)
|
|
}
|
|
}
|
|
|
|
type sfHistogram struct {
|
|
embedded.Float64Histogram
|
|
|
|
name string
|
|
opts []metric.Float64HistogramOption
|
|
|
|
delegate atomic.Value // metric.Float64Histogram
|
|
}
|
|
|
|
var _ metric.Float64Histogram = (*sfHistogram)(nil)
|
|
|
|
func (i *sfHistogram) setDelegate(m metric.Meter) {
|
|
ctr, err := m.Float64Histogram(i.name, i.opts...)
|
|
if err != nil {
|
|
GetErrorHandler().Handle(err)
|
|
return
|
|
}
|
|
i.delegate.Store(ctr)
|
|
}
|
|
|
|
func (i *sfHistogram) Record(ctx context.Context, x float64, opts ...metric.RecordOption) {
|
|
if ctr := i.delegate.Load(); ctr != nil {
|
|
ctr.(metric.Float64Histogram).Record(ctx, x, opts...)
|
|
}
|
|
}
|
|
|
|
type siCounter struct {
|
|
embedded.Int64Counter
|
|
|
|
name string
|
|
opts []metric.Int64CounterOption
|
|
|
|
delegate atomic.Value // metric.Int64Counter
|
|
}
|
|
|
|
var _ metric.Int64Counter = (*siCounter)(nil)
|
|
|
|
func (i *siCounter) setDelegate(m metric.Meter) {
|
|
ctr, err := m.Int64Counter(i.name, i.opts...)
|
|
if err != nil {
|
|
GetErrorHandler().Handle(err)
|
|
return
|
|
}
|
|
i.delegate.Store(ctr)
|
|
}
|
|
|
|
func (i *siCounter) Add(ctx context.Context, x int64, opts ...metric.AddOption) {
|
|
if ctr := i.delegate.Load(); ctr != nil {
|
|
ctr.(metric.Int64Counter).Add(ctx, x, opts...)
|
|
}
|
|
}
|
|
|
|
type siUpDownCounter struct {
|
|
embedded.Int64UpDownCounter
|
|
|
|
name string
|
|
opts []metric.Int64UpDownCounterOption
|
|
|
|
delegate atomic.Value // metric.Int64UpDownCounter
|
|
}
|
|
|
|
var _ metric.Int64UpDownCounter = (*siUpDownCounter)(nil)
|
|
|
|
func (i *siUpDownCounter) setDelegate(m metric.Meter) {
|
|
ctr, err := m.Int64UpDownCounter(i.name, i.opts...)
|
|
if err != nil {
|
|
GetErrorHandler().Handle(err)
|
|
return
|
|
}
|
|
i.delegate.Store(ctr)
|
|
}
|
|
|
|
func (i *siUpDownCounter) Add(ctx context.Context, x int64, opts ...metric.AddOption) {
|
|
if ctr := i.delegate.Load(); ctr != nil {
|
|
ctr.(metric.Int64UpDownCounter).Add(ctx, x, opts...)
|
|
}
|
|
}
|
|
|
|
type siHistogram struct {
|
|
embedded.Int64Histogram
|
|
|
|
name string
|
|
opts []metric.Int64HistogramOption
|
|
|
|
delegate atomic.Value // metric.Int64Histogram
|
|
}
|
|
|
|
var _ metric.Int64Histogram = (*siHistogram)(nil)
|
|
|
|
func (i *siHistogram) setDelegate(m metric.Meter) {
|
|
ctr, err := m.Int64Histogram(i.name, i.opts...)
|
|
if err != nil {
|
|
GetErrorHandler().Handle(err)
|
|
return
|
|
}
|
|
i.delegate.Store(ctr)
|
|
}
|
|
|
|
func (i *siHistogram) Record(ctx context.Context, x int64, opts ...metric.RecordOption) {
|
|
if ctr := i.delegate.Load(); ctr != nil {
|
|
ctr.(metric.Int64Histogram).Record(ctx, x, opts...)
|
|
}
|
|
}
|