 131868bdca
			
		
	
	131868bdca
	
	
	
		
			
			Major security, observability, and configuration improvements:
## Security Hardening
- Implemented configurable CORS (no more wildcards)
- Added comprehensive auth middleware for admin endpoints
- Enhanced webhook HMAC validation
- Added input validation and rate limiting
- Security headers and CSP policies
## Configuration Management
- Made N8N webhook URL configurable (WHOOSH_N8N_BASE_URL)
- Replaced all hardcoded endpoints with environment variables
- Added feature flags for LLM vs heuristic composition
- Gitea fetch hardening with EAGER_FILTER and FULL_RESCAN options
## API Completeness
- Implemented GetCouncilComposition function
- Added GET /api/v1/councils/{id} endpoint
- Council artifacts API (POST/GET /api/v1/councils/{id}/artifacts)
- /admin/health/details endpoint with component status
- Database lookup for repository URLs (no hardcoded fallbacks)
## Observability & Performance
- Added OpenTelemetry distributed tracing with goal/pulse correlation
- Performance optimization database indexes
- Comprehensive health monitoring
- Enhanced logging and error handling
## Infrastructure
- Production-ready P2P discovery (replaces mock implementation)
- Removed unused Redis configuration
- Enhanced Docker Swarm integration
- Added migration files for performance indexes
## Code Quality
- Comprehensive input validation
- Graceful error handling and failsafe fallbacks
- Backwards compatibility maintained
- Following security best practices
🤖 Generated with [Claude Code](https://claude.ai/code)
Co-Authored-By: Claude <noreply@anthropic.com>
		
	
		
			
				
	
	
		
			186 lines
		
	
	
		
			6.3 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
			
		
		
	
	
			186 lines
		
	
	
		
			6.3 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
| // Copyright The OpenTelemetry Authors
 | |
| //
 | |
| // Licensed under the Apache License, Version 2.0 (the "License");
 | |
| // you may not use this file except in compliance with the License.
 | |
| // You may obtain a copy of the License at
 | |
| //
 | |
| //     http://www.apache.org/licenses/LICENSE-2.0
 | |
| //
 | |
| // Unless required by applicable law or agreed to in writing, software
 | |
| // distributed under the License is distributed on an "AS IS" BASIS,
 | |
| // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 | |
| // See the License for the specific language governing permissions and
 | |
| // limitations under the License.
 | |
| 
 | |
| package metric // import "go.opentelemetry.io/otel/metric"
 | |
| 
 | |
| import (
 | |
| 	"context"
 | |
| 
 | |
| 	"go.opentelemetry.io/otel/metric/embedded"
 | |
| )
 | |
| 
 | |
| // Float64Counter is an instrument that records increasing float64 values.
 | |
| //
 | |
| // Warning: Methods may be added to this interface in minor releases. See
 | |
| // package documentation on API implementation for information on how to set
 | |
| // default behavior for unimplemented methods.
 | |
| type Float64Counter interface {
 | |
| 	// Users of the interface can ignore this. This embedded type is only used
 | |
| 	// by implementations of this interface. See the "API Implementations"
 | |
| 	// section of the package documentation for more information.
 | |
| 	embedded.Float64Counter
 | |
| 
 | |
| 	// Add records a change to the counter.
 | |
| 	//
 | |
| 	// Use the WithAttributeSet (or, if performance is not a concern,
 | |
| 	// the WithAttributes) option to include measurement attributes.
 | |
| 	Add(ctx context.Context, incr float64, options ...AddOption)
 | |
| }
 | |
| 
 | |
| // Float64CounterConfig contains options for synchronous counter instruments that
 | |
| // record int64 values.
 | |
| type Float64CounterConfig struct {
 | |
| 	description string
 | |
| 	unit        string
 | |
| }
 | |
| 
 | |
| // NewFloat64CounterConfig returns a new [Float64CounterConfig] with all opts
 | |
| // applied.
 | |
| func NewFloat64CounterConfig(opts ...Float64CounterOption) Float64CounterConfig {
 | |
| 	var config Float64CounterConfig
 | |
| 	for _, o := range opts {
 | |
| 		config = o.applyFloat64Counter(config)
 | |
| 	}
 | |
| 	return config
 | |
| }
 | |
| 
 | |
| // Description returns the configured description.
 | |
| func (c Float64CounterConfig) Description() string {
 | |
| 	return c.description
 | |
| }
 | |
| 
 | |
| // Unit returns the configured unit.
 | |
| func (c Float64CounterConfig) Unit() string {
 | |
| 	return c.unit
 | |
| }
 | |
| 
 | |
| // Float64CounterOption applies options to a [Float64CounterConfig]. See
 | |
| // [InstrumentOption] for other options that can be used as a
 | |
| // Float64CounterOption.
 | |
| type Float64CounterOption interface {
 | |
| 	applyFloat64Counter(Float64CounterConfig) Float64CounterConfig
 | |
| }
 | |
| 
 | |
| // Float64UpDownCounter is an instrument that records increasing or decreasing
 | |
| // float64 values.
 | |
| //
 | |
| // Warning: Methods may be added to this interface in minor releases. See
 | |
| // package documentation on API implementation for information on how to set
 | |
| // default behavior for unimplemented methods.
 | |
| type Float64UpDownCounter interface {
 | |
| 	// Users of the interface can ignore this. This embedded type is only used
 | |
| 	// by implementations of this interface. See the "API Implementations"
 | |
| 	// section of the package documentation for more information.
 | |
| 	embedded.Float64UpDownCounter
 | |
| 
 | |
| 	// Add records a change to the counter.
 | |
| 	//
 | |
| 	// Use the WithAttributeSet (or, if performance is not a concern,
 | |
| 	// the WithAttributes) option to include measurement attributes.
 | |
| 	Add(ctx context.Context, incr float64, options ...AddOption)
 | |
| }
 | |
| 
 | |
| // Float64UpDownCounterConfig contains options for synchronous counter
 | |
| // instruments that record int64 values.
 | |
| type Float64UpDownCounterConfig struct {
 | |
| 	description string
 | |
| 	unit        string
 | |
| }
 | |
| 
 | |
| // NewFloat64UpDownCounterConfig returns a new [Float64UpDownCounterConfig]
 | |
| // with all opts applied.
 | |
| func NewFloat64UpDownCounterConfig(opts ...Float64UpDownCounterOption) Float64UpDownCounterConfig {
 | |
| 	var config Float64UpDownCounterConfig
 | |
| 	for _, o := range opts {
 | |
| 		config = o.applyFloat64UpDownCounter(config)
 | |
| 	}
 | |
| 	return config
 | |
| }
 | |
| 
 | |
| // Description returns the configured description.
 | |
| func (c Float64UpDownCounterConfig) Description() string {
 | |
| 	return c.description
 | |
| }
 | |
| 
 | |
| // Unit returns the configured unit.
 | |
| func (c Float64UpDownCounterConfig) Unit() string {
 | |
| 	return c.unit
 | |
| }
 | |
| 
 | |
| // Float64UpDownCounterOption applies options to a
 | |
| // [Float64UpDownCounterConfig]. See [InstrumentOption] for other options that
 | |
| // can be used as a Float64UpDownCounterOption.
 | |
| type Float64UpDownCounterOption interface {
 | |
| 	applyFloat64UpDownCounter(Float64UpDownCounterConfig) Float64UpDownCounterConfig
 | |
| }
 | |
| 
 | |
| // Float64Histogram is an instrument that records a distribution of float64
 | |
| // values.
 | |
| //
 | |
| // Warning: Methods may be added to this interface in minor releases. See
 | |
| // package documentation on API implementation for information on how to set
 | |
| // default behavior for unimplemented methods.
 | |
| type Float64Histogram interface {
 | |
| 	// Users of the interface can ignore this. This embedded type is only used
 | |
| 	// by implementations of this interface. See the "API Implementations"
 | |
| 	// section of the package documentation for more information.
 | |
| 	embedded.Float64Histogram
 | |
| 
 | |
| 	// Record adds an additional value to the distribution.
 | |
| 	//
 | |
| 	// Use the WithAttributeSet (or, if performance is not a concern,
 | |
| 	// the WithAttributes) option to include measurement attributes.
 | |
| 	Record(ctx context.Context, incr float64, options ...RecordOption)
 | |
| }
 | |
| 
 | |
| // Float64HistogramConfig contains options for synchronous counter instruments
 | |
| // that record int64 values.
 | |
| type Float64HistogramConfig struct {
 | |
| 	description              string
 | |
| 	unit                     string
 | |
| 	explicitBucketBoundaries []float64
 | |
| }
 | |
| 
 | |
| // NewFloat64HistogramConfig returns a new [Float64HistogramConfig] with all
 | |
| // opts applied.
 | |
| func NewFloat64HistogramConfig(opts ...Float64HistogramOption) Float64HistogramConfig {
 | |
| 	var config Float64HistogramConfig
 | |
| 	for _, o := range opts {
 | |
| 		config = o.applyFloat64Histogram(config)
 | |
| 	}
 | |
| 	return config
 | |
| }
 | |
| 
 | |
| // Description returns the configured description.
 | |
| func (c Float64HistogramConfig) Description() string {
 | |
| 	return c.description
 | |
| }
 | |
| 
 | |
| // Unit returns the configured unit.
 | |
| func (c Float64HistogramConfig) Unit() string {
 | |
| 	return c.unit
 | |
| }
 | |
| 
 | |
| // ExplicitBucketBoundaries returns the configured explicit bucket boundaries.
 | |
| func (c Float64HistogramConfig) ExplicitBucketBoundaries() []float64 {
 | |
| 	return c.explicitBucketBoundaries
 | |
| }
 | |
| 
 | |
| // Float64HistogramOption applies options to a [Float64HistogramConfig]. See
 | |
| // [InstrumentOption] for other options that can be used as a
 | |
| // Float64HistogramOption.
 | |
| type Float64HistogramOption interface {
 | |
| 	applyFloat64Histogram(Float64HistogramConfig) Float64HistogramConfig
 | |
| }
 |