131868bdca
Major security, observability, and configuration improvements:
## Security Hardening
- Implemented configurable CORS (no more wildcards)
- Added comprehensive auth middleware for admin endpoints
- Enhanced webhook HMAC validation
- Added input validation and rate limiting
- Security headers and CSP policies
## Configuration Management
- Made N8N webhook URL configurable (WHOOSH_N8N_BASE_URL)
- Replaced all hardcoded endpoints with environment variables
- Added feature flags for LLM vs heuristic composition
- Gitea fetch hardening with EAGER_FILTER and FULL_RESCAN options
## API Completeness
- Implemented GetCouncilComposition function
- Added GET /api/v1/councils/{id} endpoint
- Council artifacts API (POST/GET /api/v1/councils/{id}/artifacts)
- /admin/health/details endpoint with component status
- Database lookup for repository URLs (no hardcoded fallbacks)
## Observability & Performance
- Added OpenTelemetry distributed tracing with goal/pulse correlation
- Performance optimization database indexes
- Comprehensive health monitoring
- Enhanced logging and error handling
## Infrastructure
- Production-ready P2P discovery (replaces mock implementation)
- Removed unused Redis configuration
- Enhanced Docker Swarm integration
- Added migration files for performance indexes
## Code Quality
- Comprehensive input validation
- Graceful error handling and failsafe fallbacks
- Backwards compatibility maintained
- Following security best practices
🤖 Generated with [Claude Code](https://claude.ai/code)
Co-Authored-By: Claude <noreply@anthropic.com>
48 lines
1.8 KiB
Markdown
48 lines
1.8 KiB
Markdown
# NUID
|
|
|
|
[](https://www.apache.org/licenses/LICENSE-2.0)
|
|
[](http://goreportcard.com/report/nats-io/nuid)
|
|
[](http://travis-ci.org/nats-io/nuid)
|
|
[](https://github.com/nats-io/nuid/releases/tag/v1.0.1)
|
|
[](http://godoc.org/github.com/nats-io/nuid)
|
|
[](https://coveralls.io/github/nats-io/nuid?branch=master)
|
|
|
|
A highly performant unique identifier generator.
|
|
|
|
## Installation
|
|
|
|
Use the `go` command:
|
|
|
|
$ go get github.com/nats-io/nuid
|
|
|
|
## Basic Usage
|
|
```go
|
|
|
|
// Utilize the global locked instance
|
|
nuid := nuid.Next()
|
|
|
|
// Create an instance, these are not locked.
|
|
n := nuid.New()
|
|
nuid = n.Next()
|
|
|
|
// Generate a new crypto/rand seeded prefix.
|
|
// Generally not needed, happens automatically.
|
|
n.RandomizePrefix()
|
|
```
|
|
|
|
## Performance
|
|
NUID needs to be very fast to generate and be truly unique, all while being entropy pool friendly.
|
|
NUID uses 12 bytes of crypto generated data (entropy draining), and 10 bytes of pseudo-random
|
|
sequential data that increments with a pseudo-random increment.
|
|
|
|
Total length of a NUID string is 22 bytes of base 62 ascii text, so 62^22 or
|
|
2707803647802660400290261537185326956544 possibilities.
|
|
|
|
NUID can generate identifiers as fast as 60ns, or ~16 million per second. There is an associated
|
|
benchmark you can use to test performance on your own hardware.
|
|
|
|
## License
|
|
|
|
Unless otherwise noted, the NATS source files are distributed
|
|
under the Apache Version 2.0 license found in the LICENSE file.
|