131868bdca
Major security, observability, and configuration improvements:
## Security Hardening
- Implemented configurable CORS (no more wildcards)
- Added comprehensive auth middleware for admin endpoints
- Enhanced webhook HMAC validation
- Added input validation and rate limiting
- Security headers and CSP policies
## Configuration Management
- Made N8N webhook URL configurable (WHOOSH_N8N_BASE_URL)
- Replaced all hardcoded endpoints with environment variables
- Added feature flags for LLM vs heuristic composition
- Gitea fetch hardening with EAGER_FILTER and FULL_RESCAN options
## API Completeness
- Implemented GetCouncilComposition function
- Added GET /api/v1/councils/{id} endpoint
- Council artifacts API (POST/GET /api/v1/councils/{id}/artifacts)
- /admin/health/details endpoint with component status
- Database lookup for repository URLs (no hardcoded fallbacks)
## Observability & Performance
- Added OpenTelemetry distributed tracing with goal/pulse correlation
- Performance optimization database indexes
- Comprehensive health monitoring
- Enhanced logging and error handling
## Infrastructure
- Production-ready P2P discovery (replaces mock implementation)
- Removed unused Redis configuration
- Enhanced Docker Swarm integration
- Added migration files for performance indexes
## Code Quality
- Comprehensive input validation
- Graceful error handling and failsafe fallbacks
- Backwards compatibility maintained
- Following security best practices
🤖 Generated with [Claude Code](https://claude.ai/code)
Co-Authored-By: Claude <noreply@anthropic.com>
37 lines
1.2 KiB
Markdown
37 lines
1.2 KiB
Markdown
# pq - A pure Go postgres driver for Go's database/sql package
|
|
|
|
[](https://pkg.go.dev/github.com/lib/pq?tab=doc)
|
|
|
|
## Install
|
|
|
|
go get github.com/lib/pq
|
|
|
|
## Features
|
|
|
|
* SSL
|
|
* Handles bad connections for `database/sql`
|
|
* Scan `time.Time` correctly (i.e. `timestamp[tz]`, `time[tz]`, `date`)
|
|
* Scan binary blobs correctly (i.e. `bytea`)
|
|
* Package for `hstore` support
|
|
* COPY FROM support
|
|
* pq.ParseURL for converting urls to connection strings for sql.Open.
|
|
* Many libpq compatible environment variables
|
|
* Unix socket support
|
|
* Notifications: `LISTEN`/`NOTIFY`
|
|
* pgpass support
|
|
* GSS (Kerberos) auth
|
|
|
|
## Tests
|
|
|
|
`go test` is used for testing. See [TESTS.md](TESTS.md) for more details.
|
|
|
|
## Status
|
|
|
|
This package is currently in maintenance mode, which means:
|
|
1. It generally does not accept new features.
|
|
2. It does accept bug fixes and version compatability changes provided by the community.
|
|
3. Maintainers usually do not resolve reported issues.
|
|
4. Community members are encouraged to help each other with reported issues.
|
|
|
|
For users that require new features or reliable resolution of reported bugs, we recommend using [pgx](https://github.com/jackc/pgx) which is under active development.
|