131868bdca
Major security, observability, and configuration improvements:
## Security Hardening
- Implemented configurable CORS (no more wildcards)
- Added comprehensive auth middleware for admin endpoints
- Enhanced webhook HMAC validation
- Added input validation and rate limiting
- Security headers and CSP policies
## Configuration Management
- Made N8N webhook URL configurable (WHOOSH_N8N_BASE_URL)
- Replaced all hardcoded endpoints with environment variables
- Added feature flags for LLM vs heuristic composition
- Gitea fetch hardening with EAGER_FILTER and FULL_RESCAN options
## API Completeness
- Implemented GetCouncilComposition function
- Added GET /api/v1/councils/{id} endpoint
- Council artifacts API (POST/GET /api/v1/councils/{id}/artifacts)
- /admin/health/details endpoint with component status
- Database lookup for repository URLs (no hardcoded fallbacks)
## Observability & Performance
- Added OpenTelemetry distributed tracing with goal/pulse correlation
- Performance optimization database indexes
- Comprehensive health monitoring
- Enhanced logging and error handling
## Infrastructure
- Production-ready P2P discovery (replaces mock implementation)
- Removed unused Redis configuration
- Enhanced Docker Swarm integration
- Added migration files for performance indexes
## Code Quality
- Comprehensive input validation
- Graceful error handling and failsafe fallbacks
- Backwards compatibility maintained
- Following security best practices
🤖 Generated with [Claude Code](https://claude.ai/code)
Co-Authored-By: Claude <noreply@anthropic.com>
118 lines
2.9 KiB
Go
118 lines
2.9 KiB
Go
package cbor
|
|
|
|
import "fmt"
|
|
|
|
// AppendStrings encodes and adds an array of strings to the dst byte array.
|
|
func (e Encoder) AppendStrings(dst []byte, vals []string) []byte {
|
|
major := majorTypeArray
|
|
l := len(vals)
|
|
if l <= additionalMax {
|
|
lb := byte(l)
|
|
dst = append(dst, major|lb)
|
|
} else {
|
|
dst = appendCborTypePrefix(dst, major, uint64(l))
|
|
}
|
|
for _, v := range vals {
|
|
dst = e.AppendString(dst, v)
|
|
}
|
|
return dst
|
|
}
|
|
|
|
// AppendString encodes and adds a string to the dst byte array.
|
|
func (Encoder) AppendString(dst []byte, s string) []byte {
|
|
major := majorTypeUtf8String
|
|
|
|
l := len(s)
|
|
if l <= additionalMax {
|
|
lb := byte(l)
|
|
dst = append(dst, major|lb)
|
|
} else {
|
|
dst = appendCborTypePrefix(dst, majorTypeUtf8String, uint64(l))
|
|
}
|
|
return append(dst, s...)
|
|
}
|
|
|
|
// AppendStringers encodes and adds an array of Stringer values
|
|
// to the dst byte array.
|
|
func (e Encoder) AppendStringers(dst []byte, vals []fmt.Stringer) []byte {
|
|
if len(vals) == 0 {
|
|
return e.AppendArrayEnd(e.AppendArrayStart(dst))
|
|
}
|
|
dst = e.AppendArrayStart(dst)
|
|
dst = e.AppendStringer(dst, vals[0])
|
|
if len(vals) > 1 {
|
|
for _, val := range vals[1:] {
|
|
dst = e.AppendStringer(dst, val)
|
|
}
|
|
}
|
|
return e.AppendArrayEnd(dst)
|
|
}
|
|
|
|
// AppendStringer encodes and adds the Stringer value to the dst
|
|
// byte array.
|
|
func (e Encoder) AppendStringer(dst []byte, val fmt.Stringer) []byte {
|
|
if val == nil {
|
|
return e.AppendNil(dst)
|
|
}
|
|
return e.AppendString(dst, val.String())
|
|
}
|
|
|
|
// AppendBytes encodes and adds an array of bytes to the dst byte array.
|
|
func (Encoder) AppendBytes(dst, s []byte) []byte {
|
|
major := majorTypeByteString
|
|
|
|
l := len(s)
|
|
if l <= additionalMax {
|
|
lb := byte(l)
|
|
dst = append(dst, major|lb)
|
|
} else {
|
|
dst = appendCborTypePrefix(dst, major, uint64(l))
|
|
}
|
|
return append(dst, s...)
|
|
}
|
|
|
|
// AppendEmbeddedJSON adds a tag and embeds input JSON as such.
|
|
func AppendEmbeddedJSON(dst, s []byte) []byte {
|
|
major := majorTypeTags
|
|
minor := additionalTypeEmbeddedJSON
|
|
|
|
// Append the TAG to indicate this is Embedded JSON.
|
|
dst = append(dst, major|additionalTypeIntUint16)
|
|
dst = append(dst, byte(minor>>8))
|
|
dst = append(dst, byte(minor&0xff))
|
|
|
|
// Append the JSON Object as Byte String.
|
|
major = majorTypeByteString
|
|
|
|
l := len(s)
|
|
if l <= additionalMax {
|
|
lb := byte(l)
|
|
dst = append(dst, major|lb)
|
|
} else {
|
|
dst = appendCborTypePrefix(dst, major, uint64(l))
|
|
}
|
|
return append(dst, s...)
|
|
}
|
|
|
|
// AppendEmbeddedCBOR adds a tag and embeds input CBOR as such.
|
|
func AppendEmbeddedCBOR(dst, s []byte) []byte {
|
|
major := majorTypeTags
|
|
minor := additionalTypeEmbeddedCBOR
|
|
|
|
// Append the TAG to indicate this is Embedded JSON.
|
|
dst = append(dst, major|additionalTypeIntUint8)
|
|
dst = append(dst, minor)
|
|
|
|
// Append the CBOR Object as Byte String.
|
|
major = majorTypeByteString
|
|
|
|
l := len(s)
|
|
if l <= additionalMax {
|
|
lb := byte(l)
|
|
dst = append(dst, major|lb)
|
|
} else {
|
|
dst = appendCborTypePrefix(dst, major, uint64(l))
|
|
}
|
|
return append(dst, s...)
|
|
}
|