 131868bdca
			
		
	
	131868bdca
	
	
	
		
			
			Major security, observability, and configuration improvements:
## Security Hardening
- Implemented configurable CORS (no more wildcards)
- Added comprehensive auth middleware for admin endpoints
- Enhanced webhook HMAC validation
- Added input validation and rate limiting
- Security headers and CSP policies
## Configuration Management
- Made N8N webhook URL configurable (WHOOSH_N8N_BASE_URL)
- Replaced all hardcoded endpoints with environment variables
- Added feature flags for LLM vs heuristic composition
- Gitea fetch hardening with EAGER_FILTER and FULL_RESCAN options
## API Completeness
- Implemented GetCouncilComposition function
- Added GET /api/v1/councils/{id} endpoint
- Council artifacts API (POST/GET /api/v1/councils/{id}/artifacts)
- /admin/health/details endpoint with component status
- Database lookup for repository URLs (no hardcoded fallbacks)
## Observability & Performance
- Added OpenTelemetry distributed tracing with goal/pulse correlation
- Performance optimization database indexes
- Comprehensive health monitoring
- Enhanced logging and error handling
## Infrastructure
- Production-ready P2P discovery (replaces mock implementation)
- Removed unused Redis configuration
- Enhanced Docker Swarm integration
- Added migration files for performance indexes
## Code Quality
- Comprehensive input validation
- Graceful error handling and failsafe fallbacks
- Backwards compatibility maintained
- Following security best practices
🤖 Generated with [Claude Code](https://claude.ai/code)
Co-Authored-By: Claude <noreply@anthropic.com>
		
	
		
			
				
	
	
		
			84 lines
		
	
	
		
			2.2 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
			
		
		
	
	
			84 lines
		
	
	
		
			2.2 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
| //go:build go1.21
 | |
| // +build go1.21
 | |
| 
 | |
| /*
 | |
| Copyright 2019 The logr Authors.
 | |
| 
 | |
| Licensed under the Apache License, Version 2.0 (the "License");
 | |
| you may not use this file except in compliance with the License.
 | |
| You may obtain a copy of the License at
 | |
| 
 | |
|     http://www.apache.org/licenses/LICENSE-2.0
 | |
| 
 | |
| Unless required by applicable law or agreed to in writing, software
 | |
| distributed under the License is distributed on an "AS IS" BASIS,
 | |
| WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 | |
| See the License for the specific language governing permissions and
 | |
| limitations under the License.
 | |
| */
 | |
| 
 | |
| package logr
 | |
| 
 | |
| import (
 | |
| 	"context"
 | |
| 	"fmt"
 | |
| 	"log/slog"
 | |
| )
 | |
| 
 | |
| // FromContext returns a Logger from ctx or an error if no Logger is found.
 | |
| func FromContext(ctx context.Context) (Logger, error) {
 | |
| 	v := ctx.Value(contextKey{})
 | |
| 	if v == nil {
 | |
| 		return Logger{}, notFoundError{}
 | |
| 	}
 | |
| 
 | |
| 	switch v := v.(type) {
 | |
| 	case Logger:
 | |
| 		return v, nil
 | |
| 	case *slog.Logger:
 | |
| 		return FromSlogHandler(v.Handler()), nil
 | |
| 	default:
 | |
| 		// Not reached.
 | |
| 		panic(fmt.Sprintf("unexpected value type for logr context key: %T", v))
 | |
| 	}
 | |
| }
 | |
| 
 | |
| // FromContextAsSlogLogger returns a slog.Logger from ctx or nil if no such Logger is found.
 | |
| func FromContextAsSlogLogger(ctx context.Context) *slog.Logger {
 | |
| 	v := ctx.Value(contextKey{})
 | |
| 	if v == nil {
 | |
| 		return nil
 | |
| 	}
 | |
| 
 | |
| 	switch v := v.(type) {
 | |
| 	case Logger:
 | |
| 		return slog.New(ToSlogHandler(v))
 | |
| 	case *slog.Logger:
 | |
| 		return v
 | |
| 	default:
 | |
| 		// Not reached.
 | |
| 		panic(fmt.Sprintf("unexpected value type for logr context key: %T", v))
 | |
| 	}
 | |
| }
 | |
| 
 | |
| // FromContextOrDiscard returns a Logger from ctx.  If no Logger is found, this
 | |
| // returns a Logger that discards all log messages.
 | |
| func FromContextOrDiscard(ctx context.Context) Logger {
 | |
| 	if logger, err := FromContext(ctx); err == nil {
 | |
| 		return logger
 | |
| 	}
 | |
| 	return Discard()
 | |
| }
 | |
| 
 | |
| // NewContext returns a new Context, derived from ctx, which carries the
 | |
| // provided Logger.
 | |
| func NewContext(ctx context.Context, logger Logger) context.Context {
 | |
| 	return context.WithValue(ctx, contextKey{}, logger)
 | |
| }
 | |
| 
 | |
| // NewContextWithSlogLogger returns a new Context, derived from ctx, which carries the
 | |
| // provided slog.Logger.
 | |
| func NewContextWithSlogLogger(ctx context.Context, logger *slog.Logger) context.Context {
 | |
| 	return context.WithValue(ctx, contextKey{}, logger)
 | |
| }
 |