 131868bdca
			
		
	
	131868bdca
	
	
	
		
			
			Major security, observability, and configuration improvements:
## Security Hardening
- Implemented configurable CORS (no more wildcards)
- Added comprehensive auth middleware for admin endpoints
- Enhanced webhook HMAC validation
- Added input validation and rate limiting
- Security headers and CSP policies
## Configuration Management
- Made N8N webhook URL configurable (WHOOSH_N8N_BASE_URL)
- Replaced all hardcoded endpoints with environment variables
- Added feature flags for LLM vs heuristic composition
- Gitea fetch hardening with EAGER_FILTER and FULL_RESCAN options
## API Completeness
- Implemented GetCouncilComposition function
- Added GET /api/v1/councils/{id} endpoint
- Council artifacts API (POST/GET /api/v1/councils/{id}/artifacts)
- /admin/health/details endpoint with component status
- Database lookup for repository URLs (no hardcoded fallbacks)
## Observability & Performance
- Added OpenTelemetry distributed tracing with goal/pulse correlation
- Performance optimization database indexes
- Comprehensive health monitoring
- Enhanced logging and error handling
## Infrastructure
- Production-ready P2P discovery (replaces mock implementation)
- Removed unused Redis configuration
- Enhanced Docker Swarm integration
- Added migration files for performance indexes
## Code Quality
- Comprehensive input validation
- Graceful error handling and failsafe fallbacks
- Backwards compatibility maintained
- Following security best practices
🤖 Generated with [Claude Code](https://claude.ai/code)
Co-Authored-By: Claude <noreply@anthropic.com>
		
	
		
			
				
	
	
		
			271 lines
		
	
	
		
			6.4 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
			
		
		
	
	
			271 lines
		
	
	
		
			6.4 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
| // Copyright The OpenTelemetry Authors
 | |
| //
 | |
| // Licensed under the Apache License, Version 2.0 (the "License");
 | |
| // you may not use this file except in compliance with the License.
 | |
| // You may obtain a copy of the License at
 | |
| //
 | |
| //     http://www.apache.org/licenses/LICENSE-2.0
 | |
| //
 | |
| // Unless required by applicable law or agreed to in writing, software
 | |
| // distributed under the License is distributed on an "AS IS" BASIS,
 | |
| // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 | |
| // See the License for the specific language governing permissions and
 | |
| // limitations under the License.
 | |
| 
 | |
| package attribute // import "go.opentelemetry.io/otel/attribute"
 | |
| 
 | |
| import (
 | |
| 	"encoding/json"
 | |
| 	"fmt"
 | |
| 	"reflect"
 | |
| 	"strconv"
 | |
| 
 | |
| 	"go.opentelemetry.io/otel/internal"
 | |
| 	"go.opentelemetry.io/otel/internal/attribute"
 | |
| )
 | |
| 
 | |
| //go:generate stringer -type=Type
 | |
| 
 | |
| // Type describes the type of the data Value holds.
 | |
| type Type int // nolint: revive  // redefines builtin Type.
 | |
| 
 | |
| // Value represents the value part in key-value pairs.
 | |
| type Value struct {
 | |
| 	vtype    Type
 | |
| 	numeric  uint64
 | |
| 	stringly string
 | |
| 	slice    interface{}
 | |
| }
 | |
| 
 | |
| const (
 | |
| 	// INVALID is used for a Value with no value set.
 | |
| 	INVALID Type = iota
 | |
| 	// BOOL is a boolean Type Value.
 | |
| 	BOOL
 | |
| 	// INT64 is a 64-bit signed integral Type Value.
 | |
| 	INT64
 | |
| 	// FLOAT64 is a 64-bit floating point Type Value.
 | |
| 	FLOAT64
 | |
| 	// STRING is a string Type Value.
 | |
| 	STRING
 | |
| 	// BOOLSLICE is a slice of booleans Type Value.
 | |
| 	BOOLSLICE
 | |
| 	// INT64SLICE is a slice of 64-bit signed integral numbers Type Value.
 | |
| 	INT64SLICE
 | |
| 	// FLOAT64SLICE is a slice of 64-bit floating point numbers Type Value.
 | |
| 	FLOAT64SLICE
 | |
| 	// STRINGSLICE is a slice of strings Type Value.
 | |
| 	STRINGSLICE
 | |
| )
 | |
| 
 | |
| // BoolValue creates a BOOL Value.
 | |
| func BoolValue(v bool) Value {
 | |
| 	return Value{
 | |
| 		vtype:   BOOL,
 | |
| 		numeric: internal.BoolToRaw(v),
 | |
| 	}
 | |
| }
 | |
| 
 | |
| // BoolSliceValue creates a BOOLSLICE Value.
 | |
| func BoolSliceValue(v []bool) Value {
 | |
| 	return Value{vtype: BOOLSLICE, slice: attribute.BoolSliceValue(v)}
 | |
| }
 | |
| 
 | |
| // IntValue creates an INT64 Value.
 | |
| func IntValue(v int) Value {
 | |
| 	return Int64Value(int64(v))
 | |
| }
 | |
| 
 | |
| // IntSliceValue creates an INTSLICE Value.
 | |
| func IntSliceValue(v []int) Value {
 | |
| 	var int64Val int64
 | |
| 	cp := reflect.New(reflect.ArrayOf(len(v), reflect.TypeOf(int64Val)))
 | |
| 	for i, val := range v {
 | |
| 		cp.Elem().Index(i).SetInt(int64(val))
 | |
| 	}
 | |
| 	return Value{
 | |
| 		vtype: INT64SLICE,
 | |
| 		slice: cp.Elem().Interface(),
 | |
| 	}
 | |
| }
 | |
| 
 | |
| // Int64Value creates an INT64 Value.
 | |
| func Int64Value(v int64) Value {
 | |
| 	return Value{
 | |
| 		vtype:   INT64,
 | |
| 		numeric: internal.Int64ToRaw(v),
 | |
| 	}
 | |
| }
 | |
| 
 | |
| // Int64SliceValue creates an INT64SLICE Value.
 | |
| func Int64SliceValue(v []int64) Value {
 | |
| 	return Value{vtype: INT64SLICE, slice: attribute.Int64SliceValue(v)}
 | |
| }
 | |
| 
 | |
| // Float64Value creates a FLOAT64 Value.
 | |
| func Float64Value(v float64) Value {
 | |
| 	return Value{
 | |
| 		vtype:   FLOAT64,
 | |
| 		numeric: internal.Float64ToRaw(v),
 | |
| 	}
 | |
| }
 | |
| 
 | |
| // Float64SliceValue creates a FLOAT64SLICE Value.
 | |
| func Float64SliceValue(v []float64) Value {
 | |
| 	return Value{vtype: FLOAT64SLICE, slice: attribute.Float64SliceValue(v)}
 | |
| }
 | |
| 
 | |
| // StringValue creates a STRING Value.
 | |
| func StringValue(v string) Value {
 | |
| 	return Value{
 | |
| 		vtype:    STRING,
 | |
| 		stringly: v,
 | |
| 	}
 | |
| }
 | |
| 
 | |
| // StringSliceValue creates a STRINGSLICE Value.
 | |
| func StringSliceValue(v []string) Value {
 | |
| 	return Value{vtype: STRINGSLICE, slice: attribute.StringSliceValue(v)}
 | |
| }
 | |
| 
 | |
| // Type returns a type of the Value.
 | |
| func (v Value) Type() Type {
 | |
| 	return v.vtype
 | |
| }
 | |
| 
 | |
| // AsBool returns the bool value. Make sure that the Value's type is
 | |
| // BOOL.
 | |
| func (v Value) AsBool() bool {
 | |
| 	return internal.RawToBool(v.numeric)
 | |
| }
 | |
| 
 | |
| // AsBoolSlice returns the []bool value. Make sure that the Value's type is
 | |
| // BOOLSLICE.
 | |
| func (v Value) AsBoolSlice() []bool {
 | |
| 	if v.vtype != BOOLSLICE {
 | |
| 		return nil
 | |
| 	}
 | |
| 	return v.asBoolSlice()
 | |
| }
 | |
| 
 | |
| func (v Value) asBoolSlice() []bool {
 | |
| 	return attribute.AsBoolSlice(v.slice)
 | |
| }
 | |
| 
 | |
| // AsInt64 returns the int64 value. Make sure that the Value's type is
 | |
| // INT64.
 | |
| func (v Value) AsInt64() int64 {
 | |
| 	return internal.RawToInt64(v.numeric)
 | |
| }
 | |
| 
 | |
| // AsInt64Slice returns the []int64 value. Make sure that the Value's type is
 | |
| // INT64SLICE.
 | |
| func (v Value) AsInt64Slice() []int64 {
 | |
| 	if v.vtype != INT64SLICE {
 | |
| 		return nil
 | |
| 	}
 | |
| 	return v.asInt64Slice()
 | |
| }
 | |
| 
 | |
| func (v Value) asInt64Slice() []int64 {
 | |
| 	return attribute.AsInt64Slice(v.slice)
 | |
| }
 | |
| 
 | |
| // AsFloat64 returns the float64 value. Make sure that the Value's
 | |
| // type is FLOAT64.
 | |
| func (v Value) AsFloat64() float64 {
 | |
| 	return internal.RawToFloat64(v.numeric)
 | |
| }
 | |
| 
 | |
| // AsFloat64Slice returns the []float64 value. Make sure that the Value's type is
 | |
| // FLOAT64SLICE.
 | |
| func (v Value) AsFloat64Slice() []float64 {
 | |
| 	if v.vtype != FLOAT64SLICE {
 | |
| 		return nil
 | |
| 	}
 | |
| 	return v.asFloat64Slice()
 | |
| }
 | |
| 
 | |
| func (v Value) asFloat64Slice() []float64 {
 | |
| 	return attribute.AsFloat64Slice(v.slice)
 | |
| }
 | |
| 
 | |
| // AsString returns the string value. Make sure that the Value's type
 | |
| // is STRING.
 | |
| func (v Value) AsString() string {
 | |
| 	return v.stringly
 | |
| }
 | |
| 
 | |
| // AsStringSlice returns the []string value. Make sure that the Value's type is
 | |
| // STRINGSLICE.
 | |
| func (v Value) AsStringSlice() []string {
 | |
| 	if v.vtype != STRINGSLICE {
 | |
| 		return nil
 | |
| 	}
 | |
| 	return v.asStringSlice()
 | |
| }
 | |
| 
 | |
| func (v Value) asStringSlice() []string {
 | |
| 	return attribute.AsStringSlice(v.slice)
 | |
| }
 | |
| 
 | |
| type unknownValueType struct{}
 | |
| 
 | |
| // AsInterface returns Value's data as interface{}.
 | |
| func (v Value) AsInterface() interface{} {
 | |
| 	switch v.Type() {
 | |
| 	case BOOL:
 | |
| 		return v.AsBool()
 | |
| 	case BOOLSLICE:
 | |
| 		return v.asBoolSlice()
 | |
| 	case INT64:
 | |
| 		return v.AsInt64()
 | |
| 	case INT64SLICE:
 | |
| 		return v.asInt64Slice()
 | |
| 	case FLOAT64:
 | |
| 		return v.AsFloat64()
 | |
| 	case FLOAT64SLICE:
 | |
| 		return v.asFloat64Slice()
 | |
| 	case STRING:
 | |
| 		return v.stringly
 | |
| 	case STRINGSLICE:
 | |
| 		return v.asStringSlice()
 | |
| 	}
 | |
| 	return unknownValueType{}
 | |
| }
 | |
| 
 | |
| // Emit returns a string representation of Value's data.
 | |
| func (v Value) Emit() string {
 | |
| 	switch v.Type() {
 | |
| 	case BOOLSLICE:
 | |
| 		return fmt.Sprint(v.asBoolSlice())
 | |
| 	case BOOL:
 | |
| 		return strconv.FormatBool(v.AsBool())
 | |
| 	case INT64SLICE:
 | |
| 		return fmt.Sprint(v.asInt64Slice())
 | |
| 	case INT64:
 | |
| 		return strconv.FormatInt(v.AsInt64(), 10)
 | |
| 	case FLOAT64SLICE:
 | |
| 		return fmt.Sprint(v.asFloat64Slice())
 | |
| 	case FLOAT64:
 | |
| 		return fmt.Sprint(v.AsFloat64())
 | |
| 	case STRINGSLICE:
 | |
| 		return fmt.Sprint(v.asStringSlice())
 | |
| 	case STRING:
 | |
| 		return v.stringly
 | |
| 	default:
 | |
| 		return "unknown"
 | |
| 	}
 | |
| }
 | |
| 
 | |
| // MarshalJSON returns the JSON encoding of the Value.
 | |
| func (v Value) MarshalJSON() ([]byte, error) {
 | |
| 	var jsonVal struct {
 | |
| 		Type  string
 | |
| 		Value interface{}
 | |
| 	}
 | |
| 	jsonVal.Type = v.Type().String()
 | |
| 	jsonVal.Value = v.AsInterface()
 | |
| 	return json.Marshal(jsonVal)
 | |
| }
 |