131868bdca
Major security, observability, and configuration improvements:
## Security Hardening
- Implemented configurable CORS (no more wildcards)
- Added comprehensive auth middleware for admin endpoints
- Enhanced webhook HMAC validation
- Added input validation and rate limiting
- Security headers and CSP policies
## Configuration Management
- Made N8N webhook URL configurable (WHOOSH_N8N_BASE_URL)
- Replaced all hardcoded endpoints with environment variables
- Added feature flags for LLM vs heuristic composition
- Gitea fetch hardening with EAGER_FILTER and FULL_RESCAN options
## API Completeness
- Implemented GetCouncilComposition function
- Added GET /api/v1/councils/{id} endpoint
- Council artifacts API (POST/GET /api/v1/councils/{id}/artifacts)
- /admin/health/details endpoint with component status
- Database lookup for repository URLs (no hardcoded fallbacks)
## Observability & Performance
- Added OpenTelemetry distributed tracing with goal/pulse correlation
- Performance optimization database indexes
- Comprehensive health monitoring
- Enhanced logging and error handling
## Infrastructure
- Production-ready P2P discovery (replaces mock implementation)
- Removed unused Redis configuration
- Enhanced Docker Swarm integration
- Added migration files for performance indexes
## Code Quality
- Comprehensive input validation
- Graceful error handling and failsafe fallbacks
- Backwards compatibility maintained
- Following security best practices
🤖 Generated with [Claude Code](https://claude.ai/code)
Co-Authored-By: Claude <noreply@anthropic.com>
103 lines
2.9 KiB
Go
103 lines
2.9 KiB
Go
// @generated Code generated by gen-atomicint.
|
|
|
|
// Copyright (c) 2020 Uber Technologies, Inc.
|
|
//
|
|
// Permission is hereby granted, free of charge, to any person obtaining a copy
|
|
// of this software and associated documentation files (the "Software"), to deal
|
|
// in the Software without restriction, including without limitation the rights
|
|
// to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
|
// copies of the Software, and to permit persons to whom the Software is
|
|
// furnished to do so, subject to the following conditions:
|
|
//
|
|
// The above copyright notice and this permission notice shall be included in
|
|
// all copies or substantial portions of the Software.
|
|
//
|
|
// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
|
// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
|
// FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
|
|
// AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
|
// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
|
|
// OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
|
|
// THE SOFTWARE.
|
|
|
|
package atomic
|
|
|
|
import (
|
|
"encoding/json"
|
|
"strconv"
|
|
"sync/atomic"
|
|
)
|
|
|
|
// Int64 is an atomic wrapper around int64.
|
|
type Int64 struct {
|
|
_ nocmp // disallow non-atomic comparison
|
|
|
|
v int64
|
|
}
|
|
|
|
// NewInt64 creates a new Int64.
|
|
func NewInt64(i int64) *Int64 {
|
|
return &Int64{v: i}
|
|
}
|
|
|
|
// Load atomically loads the wrapped value.
|
|
func (i *Int64) Load() int64 {
|
|
return atomic.LoadInt64(&i.v)
|
|
}
|
|
|
|
// Add atomically adds to the wrapped int64 and returns the new value.
|
|
func (i *Int64) Add(n int64) int64 {
|
|
return atomic.AddInt64(&i.v, n)
|
|
}
|
|
|
|
// Sub atomically subtracts from the wrapped int64 and returns the new value.
|
|
func (i *Int64) Sub(n int64) int64 {
|
|
return atomic.AddInt64(&i.v, -n)
|
|
}
|
|
|
|
// Inc atomically increments the wrapped int64 and returns the new value.
|
|
func (i *Int64) Inc() int64 {
|
|
return i.Add(1)
|
|
}
|
|
|
|
// Dec atomically decrements the wrapped int64 and returns the new value.
|
|
func (i *Int64) Dec() int64 {
|
|
return i.Sub(1)
|
|
}
|
|
|
|
// CAS is an atomic compare-and-swap.
|
|
func (i *Int64) CAS(old, new int64) bool {
|
|
return atomic.CompareAndSwapInt64(&i.v, old, new)
|
|
}
|
|
|
|
// Store atomically stores the passed value.
|
|
func (i *Int64) Store(n int64) {
|
|
atomic.StoreInt64(&i.v, n)
|
|
}
|
|
|
|
// Swap atomically swaps the wrapped int64 and returns the old value.
|
|
func (i *Int64) Swap(n int64) int64 {
|
|
return atomic.SwapInt64(&i.v, n)
|
|
}
|
|
|
|
// MarshalJSON encodes the wrapped int64 into JSON.
|
|
func (i *Int64) MarshalJSON() ([]byte, error) {
|
|
return json.Marshal(i.Load())
|
|
}
|
|
|
|
// UnmarshalJSON decodes JSON into the wrapped int64.
|
|
func (i *Int64) UnmarshalJSON(b []byte) error {
|
|
var v int64
|
|
if err := json.Unmarshal(b, &v); err != nil {
|
|
return err
|
|
}
|
|
i.Store(v)
|
|
return nil
|
|
}
|
|
|
|
// String encodes the wrapped value as a string.
|
|
func (i *Int64) String() string {
|
|
v := i.Load()
|
|
return strconv.FormatInt(int64(v), 10)
|
|
}
|