131868bdca
Major security, observability, and configuration improvements:
## Security Hardening
- Implemented configurable CORS (no more wildcards)
- Added comprehensive auth middleware for admin endpoints
- Enhanced webhook HMAC validation
- Added input validation and rate limiting
- Security headers and CSP policies
## Configuration Management
- Made N8N webhook URL configurable (WHOOSH_N8N_BASE_URL)
- Replaced all hardcoded endpoints with environment variables
- Added feature flags for LLM vs heuristic composition
- Gitea fetch hardening with EAGER_FILTER and FULL_RESCAN options
## API Completeness
- Implemented GetCouncilComposition function
- Added GET /api/v1/councils/{id} endpoint
- Council artifacts API (POST/GET /api/v1/councils/{id}/artifacts)
- /admin/health/details endpoint with component status
- Database lookup for repository URLs (no hardcoded fallbacks)
## Observability & Performance
- Added OpenTelemetry distributed tracing with goal/pulse correlation
- Performance optimization database indexes
- Comprehensive health monitoring
- Enhanced logging and error handling
## Infrastructure
- Production-ready P2P discovery (replaces mock implementation)
- Removed unused Redis configuration
- Enhanced Docker Swarm integration
- Added migration files for performance indexes
## Code Quality
- Comprehensive input validation
- Graceful error handling and failsafe fallbacks
- Backwards compatibility maintained
- Following security best practices
🤖 Generated with [Claude Code](https://claude.ai/code)
Co-Authored-By: Claude <noreply@anthropic.com>
94 lines
2.5 KiB
Go
94 lines
2.5 KiB
Go
package cbor
|
|
|
|
import (
|
|
"time"
|
|
)
|
|
|
|
func appendIntegerTimestamp(dst []byte, t time.Time) []byte {
|
|
major := majorTypeTags
|
|
minor := additionalTypeTimestamp
|
|
dst = append(dst, major|minor)
|
|
secs := t.Unix()
|
|
var val uint64
|
|
if secs < 0 {
|
|
major = majorTypeNegativeInt
|
|
val = uint64(-secs - 1)
|
|
} else {
|
|
major = majorTypeUnsignedInt
|
|
val = uint64(secs)
|
|
}
|
|
dst = appendCborTypePrefix(dst, major, val)
|
|
return dst
|
|
}
|
|
|
|
func (e Encoder) appendFloatTimestamp(dst []byte, t time.Time) []byte {
|
|
major := majorTypeTags
|
|
minor := additionalTypeTimestamp
|
|
dst = append(dst, major|minor)
|
|
secs := t.Unix()
|
|
nanos := t.Nanosecond()
|
|
var val float64
|
|
val = float64(secs)*1.0 + float64(nanos)*1e-9
|
|
return e.AppendFloat64(dst, val)
|
|
}
|
|
|
|
// AppendTime encodes and adds a timestamp to the dst byte array.
|
|
func (e Encoder) AppendTime(dst []byte, t time.Time, unused string) []byte {
|
|
utc := t.UTC()
|
|
if utc.Nanosecond() == 0 {
|
|
return appendIntegerTimestamp(dst, utc)
|
|
}
|
|
return e.appendFloatTimestamp(dst, utc)
|
|
}
|
|
|
|
// AppendTimes encodes and adds an array of timestamps to the dst byte array.
|
|
func (e Encoder) AppendTimes(dst []byte, vals []time.Time, unused string) []byte {
|
|
major := majorTypeArray
|
|
l := len(vals)
|
|
if l == 0 {
|
|
return e.AppendArrayEnd(e.AppendArrayStart(dst))
|
|
}
|
|
if l <= additionalMax {
|
|
lb := byte(l)
|
|
dst = append(dst, major|lb)
|
|
} else {
|
|
dst = appendCborTypePrefix(dst, major, uint64(l))
|
|
}
|
|
|
|
for _, t := range vals {
|
|
dst = e.AppendTime(dst, t, unused)
|
|
}
|
|
return dst
|
|
}
|
|
|
|
// AppendDuration encodes and adds a duration to the dst byte array.
|
|
// useInt field indicates whether to store the duration as seconds (integer) or
|
|
// as seconds+nanoseconds (float).
|
|
func (e Encoder) AppendDuration(dst []byte, d time.Duration, unit time.Duration, useInt bool) []byte {
|
|
if useInt {
|
|
return e.AppendInt64(dst, int64(d/unit))
|
|
}
|
|
return e.AppendFloat64(dst, float64(d)/float64(unit))
|
|
}
|
|
|
|
// AppendDurations encodes and adds an array of durations to the dst byte array.
|
|
// useInt field indicates whether to store the duration as seconds (integer) or
|
|
// as seconds+nanoseconds (float).
|
|
func (e Encoder) AppendDurations(dst []byte, vals []time.Duration, unit time.Duration, useInt bool) []byte {
|
|
major := majorTypeArray
|
|
l := len(vals)
|
|
if l == 0 {
|
|
return e.AppendArrayEnd(e.AppendArrayStart(dst))
|
|
}
|
|
if l <= additionalMax {
|
|
lb := byte(l)
|
|
dst = append(dst, major|lb)
|
|
} else {
|
|
dst = appendCborTypePrefix(dst, major, uint64(l))
|
|
}
|
|
for _, d := range vals {
|
|
dst = e.AppendDuration(dst, d, unit, useInt)
|
|
}
|
|
return dst
|
|
}
|