.github/copilot-instructions.md

@@ -1 +0,0 @@
-../CLAUDE.md

CLAUDE.md

@@ -1,163 +0,0 @@
-# CLAUDE.md
-
-This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.
-
-## Commands
-
-### Testing
-- Run all tests: `go test ./...`
-- Run tests with verbose output: `go test -v ./...`
-- Run tests for specific package: `go test ./config`
-- Run specific test: `go test -run TestConfigBool ./config`
-
-### Building
-- Build all packages: `go build ./...`
-- Check module dependencies: `go mod tidy`
-- Verify dependencies: `go mod verify`
-
-### Code Quality
-- Format code: `go fmt ./...`
-- Vet code: `go vet ./...`
-- Run static analysis: `staticcheck ./...` (if available)
-
-## Architecture
-
-This is a common library (`go.ntppool.org/common`) providing shared infrastructure for the NTP Pool project. The codebase emphasizes observability, security, and modern Go practices.
-
-### Core Components
-
-**Web Service Foundation:**
-- `ekko/` - Enhanced Echo web framework with pre-configured middleware (OpenTelemetry, Prometheus, logging, security headers)
-- `health/` - Standalone health check HTTP server with `/__health` endpoint
-- `metricsserver/` - Prometheus metrics exposure via `/metrics` endpoint
-
-**Observability Stack:**
-- `logger/` - Structured logging with OpenTelemetry trace integration and multiple output formats
-- `tracing/` - OpenTelemetry distributed tracing with OTLP export support
-- `metricsserver/` - Prometheus metrics with custom registry
-
-**Configuration & Environment:**
-- `config/` - Environment-based configuration with code-generated accessors (`config_accessor.go`)
-- `version/` - Build metadata and version information with Cobra CLI integration
-
-**Security & Communication:**
-- `apitls/` - TLS certificate management with automatic renewal via certman
-- `kafka/` - Kafka client wrapper with TLS support for log streaming
-- `xff/fastlyxff/` - Fastly CDN IP range management for trusted proxy handling
-
-**Utilities:**
-- `ulid/` - Thread-safe ULID generation with monotonic ordering
-- `timeutil/` - JSON-serializable duration types
-- `types/` - Shared data structures (LogScoreAttributes for NTP server scoring)
-
-### Key Patterns
-
-**Functional Options:** Used extensively in `ekko/` for flexible service configuration
-**Interface-Based Design:** `CertificateProvider` in `apitls/` for pluggable certificate management
-**Context Propagation:** Throughout the codebase for cancellation and tracing
-**Graceful Shutdown:** Implemented in web servers and background services
-
-### Dependencies
-
-The codebase heavily uses:
-- Echo web framework with custom middleware stack
-- OpenTelemetry for observability (traces, metrics, logs)
-- Prometheus for metrics collection
-- Kafka for message streaming
-- Cobra for CLI applications
-
-### Code Generation
-
-`config/config_accessor.go` is generated - modify `config.go` and regenerate accessors when adding new configuration options.
-
-## Package Overview
-
-### `apitls/`
-TLS certificate management with automatic renewal support via certman. Provides a CA pool for trusted certificates and interfaces for pluggable certificate providers. Used for secure inter-service communication.
-
-### `config/`
-Environment-based configuration system with code-generated accessor methods. Handles deployment mode, hostname configuration, and TLS settings. Provides URL building utilities for web and management interfaces.
-
-### `ekko/`
-Enhanced Echo web framework wrapper with pre-configured middleware stack including OpenTelemetry tracing, Prometheus metrics, structured logging, gzip compression, and security headers. Supports HTTP/2 with graceful shutdown.
-
-### `health/`
-Standalone HTTP health check server that runs independently from the main application. Exposes `/__health` endpoint with configurable health handlers, timeouts, and graceful shutdown capabilities.
-
-### `kafka/`
-Kafka client wrapper with TLS support for secure log streaming. Provides connection management, broker discovery, and reader/writer factories with compression and batching optimizations.
-
-### `logger/`
-Structured logging system with OpenTelemetry trace integration. Supports multiple output formats (text, OTLP) with configurable log levels, systemd compatibility, and context-aware logging.
-
-### `metricsserver/`
-Dedicated Prometheus metrics HTTP server with custom registry isolation. Exposes `/metrics` endpoint with OpenMetrics support and graceful shutdown handling.
-
-### `timeutil/`
-JSON-serializable duration types that support both string parsing ("30s", "5m") and numeric nanosecond values. Compatible with configuration files and REST APIs.
-
-### `tracing/`
-OpenTelemetry distributed tracing setup with support for OTLP export via gRPC or HTTP. Handles resource detection, propagation, and automatic instrumentation with configurable TLS.
-
-### `types/`
-Shared data structures for the NTP Pool project. Currently contains `LogScoreAttributes` for NTP server scoring with JSON and SQL database compatibility.
-
-### `ulid/`
-Thread-safe ULID (Universally Unique Lexicographically Sortable Identifier) generation using cryptographically secure randomness. Optimized for simplicity and performance in high-concurrency environments.
-
-### `version/`
-Build metadata and version information system with Git integration. Provides CLI commands for Cobra and Kong frameworks, Prometheus build info metrics, and semantic version validation.
-
-### `xff/fastlyxff/`
-Fastly CDN IP range management for trusted proxy handling. Parses Fastly's IP ranges JSON file and generates Echo framework trust options for proper client IP extraction.
-
-## Go Development Best Practices
-
-### Code Style
-- Follow standard Go formatting (`go fmt ./...`)
-- Use `go vet ./...` for static analysis
-- Run `staticcheck ./...` when available
-- Prefer short, descriptive variable names
-- Use interfaces for testability and flexibility
-
-### Error Handling
-- Always handle errors explicitly
-- Use `errors.Join()` for combining multiple errors
-- Wrap errors with context using `fmt.Errorf("context: %w", err)`
-- Return early on errors to reduce nesting
-
-### Testing
-- Write table-driven tests when testing multiple scenarios
-- Use `t.Helper()` in test helper functions
-- Test error conditions, not just happy paths
-- Use `testing.Short()` for integration tests that can be skipped
-
-### Concurrency
-- Use contexts for cancellation and timeouts
-- Prefer channels for communication over shared memory
-- Use `sync.Once` for one-time initialization
-- Always call `defer cancel()` after `context.WithCancel()`
-
-### Performance
-- Use `sync.Pool` for frequently allocated objects
-- Prefer slices over arrays for better performance
-- Use `strings.Builder` for string concatenation in loops
-- Profile before optimizing with `go tool pprof`
-
-### Observability
-- Use structured logging with key-value pairs
-- Add OpenTelemetry spans for external calls
-- Include trace IDs in error messages
-- Use metrics for monitoring application health
-
-### Dependencies
-- Keep dependencies minimal and well-maintained
-- Use `go mod tidy` to clean up unused dependencies
-- Pin major versions to avoid breaking changes
-- Prefer standard library when possible
-
-### Security
-- Never log sensitive information (passwords, tokens)
-- Use `crypto/rand` for cryptographic randomness
-- Validate all inputs at API boundaries
-- Use TLS for all network communication

README.md

@@ -1,20 +0,0 @@
-
-Common library for the NTP Pool project with shared infrastructure components.
-
-## Packages
-
-- **apitls** - TLS setup for NTP Pool internal services with embedded CA
-- **config** - NTP Pool project configuration with environment variables
-- **ekko** - Enhanced Echo web framework with observability middleware
-- **health** - Standalone health check HTTP server
-- **kafka** - Kafka client wrapper with TLS support
-- **logger** - Structured logging with OpenTelemetry integration
-- **metricsserver** - Prometheus metrics HTTP server
-- **timeutil** - JSON-serializable duration types
-- **tracing** - OpenTelemetry distributed tracing setup
-- **types** - Shared data structures for NTP Pool
-- **ulid** - Thread-safe ULID generation
-- **version** - Build metadata and version information
-- **xff/fastlyxff** - Fastly CDN IP range management
-
-[![Go Reference](https://pkg.go.dev/badge/go.ntppool.org/common.svg)](https://pkg.go.dev/go.ntppool.org/common)

apitls/apitls.go

@@ -30,6 +30,7 @@ func CAPool() (*x509.CertPool, error) {
 // GetCertman sets up certman for the specified cert / key pair. It is
 // used in the monitor-api and (for now) in the client
 func GetCertman(certFile, keyFile string) (*certman.CertMan, error) {
+
 	cm, err := certman.New(certFile, keyFile)
 	if err != nil {
 		return nil, err

config/config.go

@@ -11,7 +11,7 @@ import (
 	"go.ntppool.org/common/logger"
 )
 
-//go:generate go tool github.com/masaushi/accessory -type Config
+//go:generate accessory -type Config
 
 type Config struct {
 	deploymentMode string `accessor:"getter"`
@@ -50,10 +50,6 @@ func (c *Config) WebURL(path string, query *url.Values) string {
 	return baseURL(c.webHostname, c.webTLS, path, query)
 }
 
-func (c *Config) ManageURL(path string, query *url.Values) string {
-	return baseURL(c.manageHostname, c.webTLS, path, query)
-}
-
 func baseURL(host string, tls bool, path string, query *url.Values) string {
 	uri := url.URL{}
 	uri.Host = host

config/config_test.go

@@ -7,6 +7,7 @@ import (
 )
 
 func TestBaseURL(t *testing.T) {
+
 	os.Setenv("web_hostname", "www.ntp.dev, web.ntppool.dev")
 	os.Setenv("web_tls", "yes")
 
@@ -21,4 +22,5 @@ func TestBaseURL(t *testing.T) {
 	if u != "https://www.ntp.dev/foo?foo=bar" {
 		t.Fatalf("unexpected WebURL: %s", u)
 	}
+
 }

config/depenv/context.go

@@ -1,18 +0,0 @@
-package depenv
-
-import "context"
-
-type contextKey struct{}
-
-// NewContext adds the deployment environment to the context
-func NewContext(ctx context.Context, d DeploymentEnvironment) context.Context {
-	return context.WithValue(ctx, contextKey{}, d)
-}
-
-// FromContext retrieves the deployment environment from the context
-func FromContext(ctx context.Context) DeploymentEnvironment {
-	if d, ok := ctx.Value(contextKey{}).(DeploymentEnvironment); ok {
-		return d
-	}
-	return DeployUndefined
-}

config/depenv/depenv.go

@@ -1,87 +0,0 @@
-package depenv
-
-import (
-	"fmt"
-	"os"
-)
-
-var manageServers = map[DeploymentEnvironment]string{
-	DeployDevel: "https://manage.askdev.grundclock.com",
-	DeployTest:  "https://manage.beta.grundclock.com",
-	DeployProd:  "https://manage.ntppool.org",
-}
-
-var apiServers = map[DeploymentEnvironment]string{
-	DeployDevel: "https://dev-api.ntppool.dev",
-	DeployTest:  "https://beta-api.ntppool.dev",
-	DeployProd:  "https://api.ntppool.dev",
-}
-
-// var validationServers = map[DeploymentEnvironment]string{
-// 	DeployDevel: "https://v.ntp.dev/d/",
-// 	DeployTest:  "https://v.ntp.dev/b/",
-// 	DeployProd:  "https://v.ntp.dev/p/",
-// }
-
-const (
-	DeployUndefined DeploymentEnvironment = iota
-	DeployDevel
-	DeployTest
-	DeployProd
-)
-
-type DeploymentEnvironment uint8
-
-func DeploymentEnvironmentFromString(s string) DeploymentEnvironment {
-	switch s {
-	case "devel", "dev":
-		return DeployDevel
-	case "test", "beta":
-		return DeployTest
-	case "prod":
-		return DeployProd
-	default:
-		return DeployUndefined
-	}
-}
-
-func (d DeploymentEnvironment) String() string {
-	switch d {
-	case DeployProd:
-		return "prod"
-	case DeployTest:
-		return "test"
-	case DeployDevel:
-		return "devel"
-	default:
-		panic("invalid DeploymentEnvironment")
-	}
-}
-
-func (d DeploymentEnvironment) APIHost() string {
-	if apiHost := os.Getenv("API_HOST"); apiHost != "" {
-		return apiHost
-	}
-	return apiServers[d]
-}
-
-func (d DeploymentEnvironment) ManageURL(path string) string {
-	return manageServers[d] + path
-}
-
-func (d DeploymentEnvironment) MonitorDomain() string {
-	return d.String() + ".mon.ntppool.dev"
-}
-
-func (d *DeploymentEnvironment) UnmarshalText(text []byte) error {
-	s := string(text)
-	if s == "" {
-		return nil
-	}
-	env := DeploymentEnvironmentFromString(s)
-	if env == DeployUndefined {
-		return fmt.Errorf("invalid deployment environment: %s", s)
-	}
-	*d = env
-	return nil
-}

config/depenv/monitor_names.go

@@ -1,40 +0,0 @@
-package depenv
-
-import (
-	"fmt"
-	"strings"
-)
-
-var monitorApiServers = map[DeploymentEnvironment]string{
-	DeployDevel: "https://api.devel.mon.ntppool.dev",
-	DeployTest:  "https://api.test.mon.ntppool.dev",
-	DeployProd:  "https://api.mon.ntppool.dev",
-}
-
-func (d DeploymentEnvironment) MonitorAPIHost() string {
-	return monitorApiServers[d]
-}
-
-func GetDeploymentEnvironmentFromName(clientName string) (DeploymentEnvironment, error) {
-	clientName = strings.ToLower(clientName)
-
-	if !strings.HasSuffix(clientName, ".mon.ntppool.dev") {
-		return DeployUndefined, fmt.Errorf("invalid client name %s", clientName)
-	}
-
-	if clientName == "api.mon.ntppool.dev" {
-		return DeployProd, nil
-	}
-
-	prefix := clientName[:strings.Index(clientName, ".mon.ntppool.dev")]
-	parts := strings.Split(prefix, ".")
-	if len(parts) != 2 {
-		return DeployUndefined, fmt.Errorf("invalid client name %s", clientName)
-	}
-
-	if d := DeploymentEnvironmentFromString(parts[1]); d != DeployUndefined {
-		return d, nil
-	}
-
-	return DeployUndefined, fmt.Errorf("invalid client name %s (unknown environment %s)", clientName, parts[1])
-}

ekko/ekko.go

@@ -16,16 +16,11 @@ import (
 	"go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho"
 	"go.opentelemetry.io/otel/attribute"
 	"go.opentelemetry.io/otel/trace"
-	"golang.org/x/net/http2"
 	"golang.org/x/sync/errgroup"
 )
 
 func New(name string, options ...func(*Ekko)) (*Ekko, error) {
-	ek := &Ekko{
-		writeTimeout:      60 * time.Second,
-		readHeaderTimeout: 30 * time.Second,
-	}
-
+	ek := &Ekko{}
 	for _, o := range options {
 		o(ek)
 	}
@@ -51,8 +46,7 @@ func (ek *Ekko) Start(ctx context.Context) error {
 	g.Go(func() error {
 		e.Server.Addr = fmt.Sprintf(":%d", ek.port)
 		log.Info("server starting", "port", ek.port)
-		// err := e.Server.ListenAndServe()
-		err := e.StartH2CServer(e.Server.Addr, &http2.Server{})
+		err := e.Server.ListenAndServe()
 		if err == http.ErrServerClosed {
 			return nil
 		}
@@ -74,8 +68,9 @@ func (ek *Ekko) setup(ctx context.Context) (*echo.Echo, error) {
 
 	e := echo.New()
 
-	e.Server.ReadHeaderTimeout = ek.readHeaderTimeout
-	e.Server.WriteTimeout = ek.writeTimeout
+	// todo: make these an option?
+	e.Server.ReadTimeout = 30 * time.Second
+	e.Server.WriteTimeout = 60 * time.Second
 
 	e.Server.BaseContext = func(_ net.Listener) context.Context {
 		return ctx
@@ -116,19 +111,9 @@ func (ek *Ekko) setup(ctx context.Context) (*echo.Echo, error) {
 		}))
 	}
 
-	if ek.gzipConfig != nil {
-		e.Use(middleware.GzipWithConfig(*ek.gzipConfig))
-	} else {
-		e.Use(middleware.Gzip())
-	}
+	e.Use(middleware.Gzip())
 
-	secureConfig := middleware.DefaultSecureConfig
-	// secureConfig.ContentSecurityPolicy = "default-src *"
-	secureConfig.ContentSecurityPolicy = ""
-	secureConfig.HSTSMaxAge = int(time.Hour * 168 * 30 / time.Second)
-	secureConfig.HSTSPreloadEnabled = true
-
-	e.Use(middleware.SecureWithConfig(secureConfig))
+	e.Use(middleware.Secure())
 
 	e.Use(
 		func(next echo.HandlerFunc) echo.HandlerFunc {

ekko/options.go

@@ -1,10 +1,7 @@
 package ekko
 
 import (
-	"time"
-
 	"github.com/labstack/echo/v4"
-	"github.com/labstack/echo/v4/middleware"
 	"github.com/prometheus/client_golang/prometheus"
 	slogecho "github.com/samber/slog-echo"
 )
@@ -16,10 +13,6 @@ type Ekko struct {
 	routeFn        func(e *echo.Echo) error
 	logFilters     []slogecho.Filter
 	otelmiddleware echo.MiddlewareFunc
-	gzipConfig     *middleware.GzipConfig
-
-	writeTimeout      time.Duration
-	readHeaderTimeout time.Duration
 }
 
 type RouteFn func(e *echo.Echo) error
@@ -53,21 +46,3 @@ func WithOtelMiddleware(mw echo.MiddlewareFunc) func(*Ekko) {
 		ek.otelmiddleware = mw
 	}
 }
-
-func WithWriteTimeout(t time.Duration) func(*Ekko) {
-	return func(ek *Ekko) {
-		ek.writeTimeout = t
-	}
-}
-
-func WithReadHeaderTimeout(t time.Duration) func(*Ekko) {
-	return func(ek *Ekko) {
-		ek.readHeaderTimeout = t
-	}
-}
-
-func WithGzipConfig(gzipConfig *middleware.GzipConfig) func(*Ekko) {
-	return func(ek *Ekko) {
-		ek.gzipConfig = gzipConfig
-	}
-}

go.mod

@@ -1,33 +1,32 @@
 module go.ntppool.org/common
 
-go 1.23.5
+go 1.22.9
 
 require (
 	github.com/abh/certman v0.4.0
-	github.com/labstack/echo-contrib v0.17.2
-	github.com/labstack/echo/v4 v4.13.3
+	github.com/labstack/echo-contrib v0.17.1
+	github.com/labstack/echo/v4 v4.12.0
 	github.com/oklog/ulid/v2 v2.1.0
 	github.com/prometheus/client_golang v1.20.5
 	github.com/remychantenay/slog-otel v1.3.2
-	github.com/samber/slog-echo v1.14.8
+	github.com/samber/slog-echo v1.14.7
 	github.com/samber/slog-multi v1.2.4
 	github.com/segmentio/kafka-go v0.4.47
 	github.com/spf13/cobra v1.8.1
-	go.opentelemetry.io/contrib/bridges/otelslog v0.8.0
-	go.opentelemetry.io/contrib/exporters/autoexport v0.58.0
-	go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho v0.58.0
-	go.opentelemetry.io/otel v1.33.0
-	go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.33.0
-	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.33.0
-	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.33.0
-	go.opentelemetry.io/otel/log v0.9.0
-	go.opentelemetry.io/otel/sdk v1.33.0
-	go.opentelemetry.io/otel/sdk/log v0.9.0
-	go.opentelemetry.io/otel/trace v1.33.0
+	go.opentelemetry.io/contrib/bridges/otelslog v0.6.0
+	go.opentelemetry.io/contrib/exporters/autoexport v0.56.0
+	go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho v0.56.0
+	go.opentelemetry.io/otel v1.31.0
+	go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.31.0
+	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.31.0
+	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.31.0
+	go.opentelemetry.io/otel/log v0.7.0
+	go.opentelemetry.io/otel/sdk v1.31.0
+	go.opentelemetry.io/otel/sdk/log v0.7.0
+	go.opentelemetry.io/otel/trace v1.31.0
 	golang.org/x/mod v0.22.0
-	golang.org/x/net v0.33.0
-	golang.org/x/sync v0.10.0
-	google.golang.org/grpc v1.69.2
+	golang.org/x/sync v0.9.0
+	google.golang.org/grpc v1.68.0
 )
 
 require (
@@ -37,41 +36,42 @@ require (
 	github.com/fsnotify/fsnotify v1.8.0 // indirect
 	github.com/go-logr/logr v1.4.2 // indirect
 	github.com/go-logr/stdr v1.2.2 // indirect
+	github.com/golang-jwt/jwt v3.2.2+incompatible // indirect
 	github.com/google/uuid v1.6.0 // indirect
-	github.com/grpc-ecosystem/grpc-gateway/v2 v2.25.1 // indirect
+	github.com/grpc-ecosystem/grpc-gateway/v2 v2.23.0 // indirect
 	github.com/inconshreveable/mousetrap v1.1.0 // indirect
 	github.com/klauspost/compress v1.17.11 // indirect
 	github.com/labstack/gommon v0.4.2 // indirect
 	github.com/mattn/go-colorable v0.1.13 // indirect
 	github.com/mattn/go-isatty v0.0.20 // indirect
 	github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
-	github.com/pierrec/lz4/v4 v4.1.22 // indirect
+	github.com/pierrec/lz4/v4 v4.1.21 // indirect
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/prometheus/client_model v0.6.1 // indirect
-	github.com/prometheus/common v0.61.0 // indirect
+	github.com/prometheus/common v0.60.1 // indirect
 	github.com/prometheus/procfs v0.15.1 // indirect
 	github.com/samber/lo v1.47.0 // indirect
 	github.com/spf13/pflag v1.0.5 // indirect
 	github.com/valyala/bytebufferpool v1.0.0 // indirect
 	github.com/valyala/fasttemplate v1.2.2 // indirect
-	go.opentelemetry.io/auto/sdk v1.1.0 // indirect
-	go.opentelemetry.io/contrib/bridges/prometheus v0.58.0 // indirect
-	go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc v0.9.0 // indirect
-	go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp v0.9.0 // indirect
-	go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.33.0 // indirect
-	go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.33.0 // indirect
-	go.opentelemetry.io/otel/exporters/prometheus v0.55.0 // indirect
-	go.opentelemetry.io/otel/exporters/stdout/stdoutlog v0.9.0 // indirect
-	go.opentelemetry.io/otel/exporters/stdout/stdoutmetric v1.33.0 // indirect
-	go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.33.0 // indirect
-	go.opentelemetry.io/otel/metric v1.33.0 // indirect
-	go.opentelemetry.io/otel/sdk/metric v1.33.0 // indirect
-	go.opentelemetry.io/proto/otlp v1.4.0 // indirect
-	golang.org/x/crypto v0.31.0 // indirect
-	golang.org/x/sys v0.28.0 // indirect
-	golang.org/x/text v0.21.0 // indirect
+	go.opentelemetry.io/contrib/bridges/prometheus v0.56.0 // indirect
+	go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc v0.7.0 // indirect
+	go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp v0.7.0 // indirect
+	go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.31.0 // indirect
+	go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.31.0 // indirect
+	go.opentelemetry.io/otel/exporters/prometheus v0.53.0 // indirect
+	go.opentelemetry.io/otel/exporters/stdout/stdoutlog v0.7.0 // indirect
+	go.opentelemetry.io/otel/exporters/stdout/stdoutmetric v1.31.0 // indirect
+	go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.31.0 // indirect
+	go.opentelemetry.io/otel/metric v1.31.0 // indirect
+	go.opentelemetry.io/otel/sdk/metric v1.31.0 // indirect
+	go.opentelemetry.io/proto/otlp v1.3.1 // indirect
+	golang.org/x/crypto v0.29.0 // indirect
+	golang.org/x/net v0.30.0 // indirect
+	golang.org/x/sys v0.27.0 // indirect
+	golang.org/x/text v0.20.0 // indirect
 	golang.org/x/time v0.8.0 // indirect
-	google.golang.org/genproto/googleapis/api v0.0.0-20241223144023-3abc09e42ca8 // indirect
-	google.golang.org/genproto/googleapis/rpc v0.0.0-20241223144023-3abc09e42ca8 // indirect
-	google.golang.org/protobuf v1.36.1 // indirect
+	google.golang.org/genproto/googleapis/api v0.0.0-20241104194629-dd2ea8efbc28 // indirect
+	google.golang.org/genproto/googleapis/rpc v0.0.0-20241104194629-dd2ea8efbc28 // indirect
+	google.golang.org/protobuf v1.35.1 // indirect
 )

go.sum

@@ -17,14 +17,16 @@ github.com/go-logr/logr v1.4.2 h1:6pFjapn8bFcIbiKo3XT4j/BhANplGihG6tvd+8rYgrY=
 github.com/go-logr/logr v1.4.2/go.mod h1:9T104GzyrTigFIr8wt5mBrctHMim0Nb2HLGrmQ40KvY=
 github.com/go-logr/stdr v1.2.2 h1:hSWxHoqTgW2S2qGc0LTAI563KZ5YKYRhT3MFKZMbjag=
 github.com/go-logr/stdr v1.2.2/go.mod h1:mMo/vtBO5dYbehREoey6XUKy/eSumjCCveDpRre4VKE=
+github.com/golang-jwt/jwt v3.2.2+incompatible h1:IfV12K8xAKAnZqdXVzCZ+TOjboZ2keLg81eXfW3O+oY=
+github.com/golang-jwt/jwt v3.2.2+incompatible/go.mod h1:8pz2t5EyA70fFQQSrl6XZXzqecmYZeUEB8OUGHkxJ+I=
 github.com/golang/protobuf v1.5.4 h1:i7eJL8qZTpSEXOPTxNKhASYpMn+8e5Q6AdndVa1dWek=
 github.com/golang/protobuf v1.5.4/go.mod h1:lnTiLA8Wa4RWRcIUkrtSVa5nRhsEGBg48fD6rSs7xps=
 github.com/google/go-cmp v0.6.0 h1:ofyhxvXcZhMsU5ulbFiLKl/XBFqE1GSq7atu8tAmTRI=
 github.com/google/go-cmp v0.6.0/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=
 github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
 github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
-github.com/grpc-ecosystem/grpc-gateway/v2 v2.25.1 h1:VNqngBF40hVlDloBruUehVYC3ArSgIyScOAyMRqBxRg=
-github.com/grpc-ecosystem/grpc-gateway/v2 v2.25.1/go.mod h1:RBRO7fro65R6tjKzYgLAFo0t1QEXY1Dp+i/bvpRiqiQ=
+github.com/grpc-ecosystem/grpc-gateway/v2 v2.23.0 h1:ad0vkEBuk23VJzZR9nkLVG0YAoN9coASF1GusYX6AlU=
+github.com/grpc-ecosystem/grpc-gateway/v2 v2.23.0/go.mod h1:igFoXX2ELCW06bol23DWPB5BEWfZISOzSP5K2sbLea0=
 github.com/inconshreveable/mousetrap v1.1.0 h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8=
 github.com/inconshreveable/mousetrap v1.1.0/go.mod h1:vpF70FUmC8bwa3OWnCshd2FqLfsEA9PFc4w1p2J65bw=
 github.com/klauspost/compress v1.15.9/go.mod h1:PhcZ0MbTNciWF3rruxRgKxI5NkcHHrHUDtV4Yw2GlzU=
@@ -32,10 +34,10 @@ github.com/klauspost/compress v1.17.11 h1:In6xLpyWOi1+C7tXUUWv2ot1QvBjxevKAaI6IX
 github.com/klauspost/compress v1.17.11/go.mod h1:pMDklpSncoRMuLFrf1W9Ss9KT+0rH90U12bZKk7uwG0=
 github.com/kylelemons/godebug v1.1.0 h1:RPNrshWIDI6G2gRW9EHilWtl7Z6Sb1BR0xunSBf0SNc=
 github.com/kylelemons/godebug v1.1.0/go.mod h1:9/0rRGxNHcop5bhtWyNeEfOS8JIWk580+fNqagV/RAw=
-github.com/labstack/echo-contrib v0.17.2 h1:K1zivqmtcC70X9VdBFdLomjPDEVHlrcAObqmuFj1c6w=
-github.com/labstack/echo-contrib v0.17.2/go.mod h1:NeDh3PX7j/u+jR4iuDt1zHmWZSCz9c/p9mxXcDpyS8E=
-github.com/labstack/echo/v4 v4.13.3 h1:pwhpCPrTl5qry5HRdM5FwdXnhXSLSY+WE+YQSeCaafY=
-github.com/labstack/echo/v4 v4.13.3/go.mod h1:o90YNEeQWjDozo584l7AwhJMHN0bOC4tAfg+Xox9q5g=
+github.com/labstack/echo-contrib v0.17.1 h1:7I/he7ylVKsDUieaGRZ9XxxTYOjfQwVzHzUYrNykfCU=
+github.com/labstack/echo-contrib v0.17.1/go.mod h1:SnsCZtwHBAZm5uBSAtQtXQHI3wqEA73hvTn0bYMKnZA=
+github.com/labstack/echo/v4 v4.12.0 h1:IKpw49IMryVB2p1a4dzwlhP1O2Tf2E0Ir/450lH+kI0=
+github.com/labstack/echo/v4 v4.12.0/go.mod h1:UP9Cr2DJXbOK3Kr9ONYzNowSh7HP0aG0ShAyycHSJvM=
 github.com/labstack/gommon v0.4.2 h1:F8qTUNXgG1+6WQmqoUWnz8WiEU60mXVVw0P4ht1WRA0=
 github.com/labstack/gommon v0.4.2/go.mod h1:QlUFxVM+SNXhDL/Z7YhocGIBYOiwB0mXm1+1bAPHPyU=
 github.com/mattn/go-colorable v0.1.13 h1:fFA4WZxdEF4tXPZVKMLwD8oUnCTTo08duU7wxecdEvA=
@@ -49,8 +51,8 @@ github.com/oklog/ulid/v2 v2.1.0 h1:+9lhoxAP56we25tyYETBBY1YLA2SaoLvUFgrP2miPJU=
 github.com/oklog/ulid/v2 v2.1.0/go.mod h1:rcEKHmBBKfef9DhnvX7y1HZBYxjXb0cP5ExxNsTT1QQ=
 github.com/pborman/getopt v0.0.0-20170112200414-7148bc3a4c30/go.mod h1:85jBQOZwpVEaDAr341tbn15RS4fCAsIst0qp7i8ex1o=
 github.com/pierrec/lz4/v4 v4.1.15/go.mod h1:gZWDp/Ze/IJXGXf23ltt2EXimqmTUXEy0GFuRQyBid4=
-github.com/pierrec/lz4/v4 v4.1.22 h1:cKFw6uJDK+/gfw5BcDL0JL5aBsAFdsIT18eRtLj7VIU=
-github.com/pierrec/lz4/v4 v4.1.22/go.mod h1:gZWDp/Ze/IJXGXf23ltt2EXimqmTUXEy0GFuRQyBid4=
+github.com/pierrec/lz4/v4 v4.1.21 h1:yOVMLb6qSIDP67pl/5F7RepeKYu/VmTyEXvuMI5d9mQ=
+github.com/pierrec/lz4/v4 v4.1.21/go.mod h1:gZWDp/Ze/IJXGXf23ltt2EXimqmTUXEy0GFuRQyBid4=
 github.com/pkg/errors v0.9.1 h1:FEBLx1zS214owpjy7qsBeixbURkuhQAwrK5UwLGTwt4=
 github.com/pkg/errors v0.9.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
 github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
@@ -59,8 +61,8 @@ github.com/prometheus/client_golang v1.20.5 h1:cxppBPuYhUnsO6yo/aoRol4L7q7UFfdm+
 github.com/prometheus/client_golang v1.20.5/go.mod h1:PIEt8X02hGcP8JWbeHyeZ53Y/jReSnHgO035n//V5WE=
 github.com/prometheus/client_model v0.6.1 h1:ZKSh/rekM+n3CeS952MLRAdFwIKqeY8b62p8ais2e9E=
 github.com/prometheus/client_model v0.6.1/go.mod h1:OrxVMOVHjw3lKMa8+x6HeMGkHMQyHDk9E3jmP2AmGiY=
-github.com/prometheus/common v0.61.0 h1:3gv/GThfX0cV2lpO7gkTUwZru38mxevy90Bj8YFSRQQ=
-github.com/prometheus/common v0.61.0/go.mod h1:zr29OCN/2BsJRaFwG8QOBr41D6kkchKbpeNH7pAjb/s=
+github.com/prometheus/common v0.60.1 h1:FUas6GcOw66yB/73KC+BOZoFJmbo/1pojoILArPAaSc=
+github.com/prometheus/common v0.60.1/go.mod h1:h0LYf1R1deLSKtD4Vdg8gy4RuOvENW2J/h19V5NADQw=
 github.com/prometheus/procfs v0.15.1 h1:YagwOFzUgYfKKHX6Dr+sHT7km/hxC76UB0learggepc=
 github.com/prometheus/procfs v0.15.1/go.mod h1:fB45yRUv8NstnjriLhBQLuOUt+WW4BsoGhij/e3PBqk=
 github.com/remychantenay/slog-otel v1.3.2 h1:ZBx8qnwfLJ6e18Vba4e9Xp9B7khTmpIwFsU1sAmActw=
@@ -68,8 +70,8 @@ github.com/remychantenay/slog-otel v1.3.2/go.mod h1:gKW4tQ8cGOKoA+bi7wtYba/tcJ6T
 github.com/russross/blackfriday/v2 v2.1.0/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM=
 github.com/samber/lo v1.47.0 h1:z7RynLwP5nbyRscyvcD043DWYoOcYRv3mV8lBeqOCLc=
 github.com/samber/lo v1.47.0/go.mod h1:RmDH9Ct32Qy3gduHQuKJ3gW1fMHAnE/fAzQuf6He5cU=
-github.com/samber/slog-echo v1.14.8 h1:R7RF2LWEepsKtC7i6A6o9peS3Rz5HO8+H8OD+8mPD1I=
-github.com/samber/slog-echo v1.14.8/go.mod h1:K21nbusPmai/MYm8PFactmZoFctkMmkeaTdXXyvhY1c=
+github.com/samber/slog-echo v1.14.7 h1:HLKW0WDOU/t4OoDbq+R/ZHc8qFpXj+2YdRVQxyRwW24=
+github.com/samber/slog-echo v1.14.7/go.mod h1:i8QlNMhE0rVr+Mjj5ZIm6DMuTQ87euvAL2jRAd5HNVY=
 github.com/samber/slog-multi v1.2.4 h1:k9x3JAWKJFPKffx+oXZ8TasaNuorIW4tG+TXxkt6Ry4=
 github.com/samber/slog-multi v1.2.4/go.mod h1:ACuZ5B6heK57TfMVkVknN2UZHoFfjCwRxR0Q2OXKHlo=
 github.com/segmentio/kafka-go v0.4.47 h1:IqziR4pA3vrZq7YdRxaT3w1/5fvIH5qpCwstUanQQB0=
@@ -82,8 +84,8 @@ github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+
 github.com/stretchr/objx v0.4.0/go.mod h1:YvHI0jy2hoMjB+UWwv71VJQ9isScKT/TqJzVSSt89Yw=
 github.com/stretchr/testify v1.7.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
 github.com/stretchr/testify v1.8.0/go.mod h1:yNjHg4UonilssWZ8iaSj1OCr/vHnekPRkoO+kdMU+MU=
-github.com/stretchr/testify v1.10.0 h1:Xv5erBjTwe/5IxqUQTdXv5kgmIvbHo3QQyRwhJsOfJA=
-github.com/stretchr/testify v1.10.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY=
+github.com/stretchr/testify v1.9.0 h1:HtqpIVDClZ4nwg75+f6Lvsy/wHu+3BoSGCbBAcpTsTg=
+github.com/stretchr/testify v1.9.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY=
 github.com/valyala/bytebufferpool v1.0.0 h1:GqA5TC/0021Y/b9FG4Oi9Mr3q7XYx6KllzawFIhcdPw=
 github.com/valyala/bytebufferpool v1.0.0/go.mod h1:6bBcMArwyJ5K/AmCkWv1jt77kVWyCJ6HpOuEn7z0Csc=
 github.com/valyala/fasttemplate v1.2.2 h1:lxLXG0uE3Qnshl9QyaK6XJxMXlQZELvChBOCmQD0Loo=
@@ -95,63 +97,61 @@ github.com/xdg-go/scram v1.1.2/go.mod h1:RT/sEzTbU5y00aCK8UOx6R7YryM0iF1N2MOmC3k
 github.com/xdg-go/stringprep v1.0.4 h1:XLI/Ng3O1Atzq0oBs3TWm+5ZVgkq2aqdlvP9JtoZ6c8=
 github.com/xdg-go/stringprep v1.0.4/go.mod h1:mPGuuIYwz7CmR2bT9j4GbQqutWS1zV24gijq1dTyGkM=
 github.com/yuin/goldmark v1.4.13/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
-go.opentelemetry.io/auto/sdk v1.1.0 h1:cH53jehLUN6UFLY71z+NDOiNJqDdPRaXzTel0sJySYA=
-go.opentelemetry.io/auto/sdk v1.1.0/go.mod h1:3wSPjt5PWp2RhlCcmmOial7AvC4DQqZb7a7wCow3W8A=
-go.opentelemetry.io/contrib/bridges/otelslog v0.8.0 h1:G3sKsNueSdxuACINFxKrQeimAIst0A5ytA2YJH+3e1c=
-go.opentelemetry.io/contrib/bridges/otelslog v0.8.0/go.mod h1:ptJm3wizguEPurZgarDAwOeX7O0iMR7l+QvIVenhYdE=
-go.opentelemetry.io/contrib/bridges/prometheus v0.58.0 h1:gQFwWiqm4JUvOjpdmyU0di+2pVQ8QNpk1Ak/54Y6NcY=
-go.opentelemetry.io/contrib/bridges/prometheus v0.58.0/go.mod h1:CNyFi9PuvHtEJNmMFHaXZMuA4XmgRXIqpFcHdqzLvVU=
-go.opentelemetry.io/contrib/exporters/autoexport v0.58.0 h1:qVsDVgZd/bC6ZKDOHSjILpm0T/BWvASC9cQU3GYga78=
-go.opentelemetry.io/contrib/exporters/autoexport v0.58.0/go.mod h1:bAv7mY+5qTsFPFaRpr75vDOocX09I36QH4Rg0slEG/U=
-go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho v0.58.0 h1:DBk8Zh+Yn3WtWCdGSx1pbEV9/naLtjG16c1zwQA2MBI=
-go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho v0.58.0/go.mod h1:DFx32LPclW1MNdSKIMrjjetsk0tJtYhAvuGjDIG2SKE=
-go.opentelemetry.io/contrib/propagators/b3 v1.33.0 h1:ig/IsHyyoQ1F1d6FUDIIW5oYpsuTVtN16AyGOgdjAHQ=
-go.opentelemetry.io/contrib/propagators/b3 v1.33.0/go.mod h1:EsVYoNy+Eol5znb6wwN3XQTILyjl040gUpEnUSNZfsk=
-go.opentelemetry.io/otel v1.33.0 h1:/FerN9bax5LoK51X/sI0SVYrjSE0/yUL7DpxW4K3FWw=
-go.opentelemetry.io/otel v1.33.0/go.mod h1:SUUkR6csvUQl+yjReHu5uM3EtVV7MBm5FHKRlNx4I8I=
-go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc v0.9.0 h1:gA2gh+3B3NDvRFP30Ufh7CC3TtJRbUSf2TTD0LbCagw=
-go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc v0.9.0/go.mod h1:smRTR+02OtrVGjvWE1sQxhuazozKc/BXvvqqnmOxy+s=
-go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp v0.9.0 h1:Za0Z/j9Gf3Z9DKQ1choU9xI2noCxlkcyFFP2Ob3miEQ=
-go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp v0.9.0/go.mod h1:jMRB8N75meTNjDFQyJBA/2Z9en21CsxwMctn08NHY6c=
-go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.33.0 h1:7F29RDmnlqk6B5d+sUqemt8TBfDqxryYW5gX6L74RFA=
-go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.33.0/go.mod h1:ZiGDq7xwDMKmWDrN1XsXAj0iC7hns+2DhxBFSncNHSE=
-go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.33.0 h1:bSjzTvsXZbLSWU8hnZXcKmEVaJjjnandxD0PxThhVU8=
-go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.33.0/go.mod h1:aj2rilHL8WjXY1I5V+ra+z8FELtk681deydgYT8ikxU=
-go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.33.0 h1:Vh5HayB/0HHfOQA7Ctx69E/Y/DcQSMPpKANYVMQ7fBA=
-go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.33.0/go.mod h1:cpgtDBaqD/6ok/UG0jT15/uKjAY8mRA53diogHBg3UI=
-go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.33.0 h1:5pojmb1U1AogINhN3SurB+zm/nIcusopeBNp42f45QM=
-go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.33.0/go.mod h1:57gTHJSE5S1tqg+EKsLPlTWhpHMsWlVmer+LA926XiA=
-go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.33.0 h1:wpMfgF8E1rkrT1Z6meFh1NDtownE9Ii3n3X2GJYjsaU=
-go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.33.0/go.mod h1:wAy0T/dUbs468uOlkT31xjvqQgEVXv58BRFWEgn5v/0=
-go.opentelemetry.io/otel/exporters/prometheus v0.55.0 h1:sSPw658Lk2NWAv74lkD3B/RSDb+xRFx46GjkrL3VUZo=
-go.opentelemetry.io/otel/exporters/prometheus v0.55.0/go.mod h1:nC00vyCmQixoeaxF6KNyP42II/RHa9UdruK02qBmHvI=
-go.opentelemetry.io/otel/exporters/stdout/stdoutlog v0.9.0 h1:iI15wfQb5ZtAVTdS5WROxpYmw6Kjez3hT9SuzXhrgGQ=
-go.opentelemetry.io/otel/exporters/stdout/stdoutlog v0.9.0/go.mod h1:yepwlNzVVxHWR5ugHIrll+euPQPq4pvysHTDr/daV9o=
-go.opentelemetry.io/otel/exporters/stdout/stdoutmetric v1.33.0 h1:FiOTYABOX4tdzi8A0+mtzcsTmi6WBOxk66u0f1Mj9Gs=
-go.opentelemetry.io/otel/exporters/stdout/stdoutmetric v1.33.0/go.mod h1:xyo5rS8DgzV0Jtsht+LCEMwyiDbjpsxBpWETwFRF0/4=
-go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.33.0 h1:W5AWUn/IVe8RFb5pZx1Uh9Laf/4+Qmm4kJL5zPuvR+0=
-go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.33.0/go.mod h1:mzKxJywMNBdEX8TSJais3NnsVZUaJ+bAy6UxPTng2vk=
-go.opentelemetry.io/otel/log v0.9.0 h1:0OiWRefqJ2QszpCiqwGO0u9ajMPe17q6IscQvvp3czY=
-go.opentelemetry.io/otel/log v0.9.0/go.mod h1:WPP4OJ+RBkQ416jrFCQFuFKtXKD6mOoYCQm6ykK8VaU=
-go.opentelemetry.io/otel/metric v1.33.0 h1:r+JOocAyeRVXD8lZpjdQjzMadVZp2M4WmQ+5WtEnklQ=
-go.opentelemetry.io/otel/metric v1.33.0/go.mod h1:L9+Fyctbp6HFTddIxClbQkjtubW6O9QS3Ann/M82u6M=
-go.opentelemetry.io/otel/sdk v1.33.0 h1:iax7M131HuAm9QkZotNHEfstof92xM+N8sr3uHXc2IM=
-go.opentelemetry.io/otel/sdk v1.33.0/go.mod h1:A1Q5oi7/9XaMlIWzPSxLRWOI8nG3FnzHJNbiENQuihM=
-go.opentelemetry.io/otel/sdk/log v0.9.0 h1:YPCi6W1Eg0vwT/XJWsv2/PaQ2nyAJYuF7UUjQSBe3bc=
-go.opentelemetry.io/otel/sdk/log v0.9.0/go.mod h1:y0HdrOz7OkXQBuc2yjiqnEHc+CRKeVhRE3hx4RwTmV4=
-go.opentelemetry.io/otel/sdk/metric v1.33.0 h1:Gs5VK9/WUJhNXZgn8MR6ITatvAmKeIuCtNbsP3JkNqU=
-go.opentelemetry.io/otel/sdk/metric v1.33.0/go.mod h1:dL5ykHZmm1B1nVRk9dDjChwDmt81MjVp3gLkQRwKf/Q=
-go.opentelemetry.io/otel/trace v1.33.0 h1:cCJuF7LRjUFso9LPnEAHJDB2pqzp+hbO8eu1qqW2d/s=
-go.opentelemetry.io/otel/trace v1.33.0/go.mod h1:uIcdVUZMpTAmz0tI1z04GoVSezK37CbGV4fr1f2nBck=
-go.opentelemetry.io/proto/otlp v1.4.0 h1:TA9WRvW6zMwP+Ssb6fLoUIuirti1gGbP28GcKG1jgeg=
-go.opentelemetry.io/proto/otlp v1.4.0/go.mod h1:PPBWZIP98o2ElSqI35IHfu7hIhSwvc5N38Jw8pXuGFY=
+go.opentelemetry.io/contrib/bridges/otelslog v0.6.0 h1:V/XtFJ8mMisAO2E0tXcgwi40wJUxbiz8I2/RtgaZ8AU=
+go.opentelemetry.io/contrib/bridges/otelslog v0.6.0/go.mod h1:g7kkoEznNXb0li+YvlwPWoqxTbpC3BtmZtZutB39G4M=
+go.opentelemetry.io/contrib/bridges/prometheus v0.56.0 h1:ax2MzrA26l3LTS2NRnagkbeKDrW4SM8VcAubasnpYqs=
+go.opentelemetry.io/contrib/bridges/prometheus v0.56.0/go.mod h1:+aiuB6jaKqSb5xaY7sOpGZEMIgjL0sxXfIW1PQmp5d0=
+go.opentelemetry.io/contrib/exporters/autoexport v0.56.0 h1:2k73WaZ+jHYcK3lLAC3CJ8viT/LqkIcDDUWpbbYbZK0=
+go.opentelemetry.io/contrib/exporters/autoexport v0.56.0/go.mod h1:RAHAFqVEQ+iKEAPgm6z+Gnsi0Fd5MDuqnD5T3Ms6Kg4=
+go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho v0.56.0 h1:INy+gB4Y1rE0gJNfjTgZBFVD4RuTV5NpRnafbwoeROU=
+go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho v0.56.0/go.mod h1:ZXC8RPcIIJTidnOto6PE5w5vPwSg6XngjBLiWlX4n2Q=
+go.opentelemetry.io/contrib/propagators/b3 v1.31.0 h1:PQPXYscmwbCp76QDvO4hMngF2j8Bx/OTV86laEl8uqo=
+go.opentelemetry.io/contrib/propagators/b3 v1.31.0/go.mod h1:jbqfV8wDdqSDrAYxVpXQnpM0XFMq2FtDesblJ7blOwQ=
+go.opentelemetry.io/otel v1.31.0 h1:NsJcKPIW0D0H3NgzPDHmo0WW6SptzPdqg/L1zsIm2hY=
+go.opentelemetry.io/otel v1.31.0/go.mod h1:O0C14Yl9FgkjqcCZAsE053C13OaddMYr/hz6clDkEJE=
+go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc v0.7.0 h1:iNba3cIZTDPB2+IAbVY/3TUN+pCCLrNYo2GaGtsKBak=
+go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc v0.7.0/go.mod h1:l5BDPiZ9FbeejzWTAX6BowMzQOM/GeaUQ6lr3sOcSkc=
+go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp v0.7.0 h1:mMOmtYie9Fx6TSVzw4W+NTpvoaS1JWWga37oI1a/4qQ=
+go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp v0.7.0/go.mod h1:yy7nDsMMBUkD+jeekJ36ur5f3jJIrmCwUrY67VFhNpA=
+go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.31.0 h1:FZ6ei8GFW7kyPYdxJaV2rgI6M+4tvZzhYsQ2wgyVC08=
+go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.31.0/go.mod h1:MdEu/mC6j3D+tTEfvI15b5Ci2Fn7NneJ71YMoiS3tpI=
+go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.31.0 h1:ZsXq73BERAiNuuFXYqP4MR5hBrjXfMGSO+Cx7qoOZiM=
+go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.31.0/go.mod h1:hg1zaDMpyZJuUzjFxFsRYBoccE86tM9Uf4IqNMUxvrY=
+go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.31.0 h1:K0XaT3DwHAcV4nKLzcQvwAgSyisUghWoY20I7huthMk=
+go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.31.0/go.mod h1:B5Ki776z/MBnVha1Nzwp5arlzBbE3+1jk+pGmaP5HME=
+go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.31.0 h1:FFeLy03iVTXP6ffeN2iXrxfGsZGCjVx0/4KlizjyBwU=
+go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.31.0/go.mod h1:TMu73/k1CP8nBUpDLc71Wj/Kf7ZS9FK5b53VapRsP9o=
+go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.31.0 h1:lUsI2TYsQw2r1IASwoROaCnjdj2cvC2+Jbxvk6nHnWU=
+go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.31.0/go.mod h1:2HpZxxQurfGxJlJDblybejHB6RX6pmExPNe517hREw4=
+go.opentelemetry.io/otel/exporters/prometheus v0.53.0 h1:QXobPHrwiGLM4ufrY3EOmDPJpo2P90UuFau4CDPJA/I=
+go.opentelemetry.io/otel/exporters/prometheus v0.53.0/go.mod h1:WOAXGr3D00CfzmFxtTV1eR0GpoHuPEu+HJT8UWW2SIU=
+go.opentelemetry.io/otel/exporters/stdout/stdoutlog v0.7.0 h1:TwmL3O3fRR80m8EshBrd8YydEZMcUCsZXzOUlnFohwM=
+go.opentelemetry.io/otel/exporters/stdout/stdoutlog v0.7.0/go.mod h1:tH98dDv5KPmPThswbXA0fr0Lwfs+OhK8HgaCo7PjRrk=
+go.opentelemetry.io/otel/exporters/stdout/stdoutmetric v1.31.0 h1:HZgBIps9wH0RDrwjrmNa3DVbNRW60HEhdzqZFyAp3fI=
+go.opentelemetry.io/otel/exporters/stdout/stdoutmetric v1.31.0/go.mod h1:RDRhvt6TDG0eIXmonAx5bd9IcwpqCkziwkOClzWKwAQ=
+go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.31.0 h1:UGZ1QwZWY67Z6BmckTU+9Rxn04m2bD3gD6Mk0OIOCPk=
+go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.31.0/go.mod h1:fcwWuDuaObkkChiDlhEpSq9+X1C0omv+s5mBtToAQ64=
+go.opentelemetry.io/otel/log v0.7.0 h1:d1abJc0b1QQZADKvfe9JqqrfmPYQCz2tUSO+0XZmuV4=
+go.opentelemetry.io/otel/log v0.7.0/go.mod h1:2jf2z7uVfnzDNknKTO9G+ahcOAyWcp1fJmk/wJjULRo=
+go.opentelemetry.io/otel/metric v1.31.0 h1:FSErL0ATQAmYHUIzSezZibnyVlft1ybhy4ozRPcF2fE=
+go.opentelemetry.io/otel/metric v1.31.0/go.mod h1:C3dEloVbLuYoX41KpmAhOqNriGbA+qqH6PQ5E5mUfnY=
+go.opentelemetry.io/otel/sdk v1.31.0 h1:xLY3abVHYZ5HSfOg3l2E5LUj2Cwva5Y7yGxnSW9H5Gk=
+go.opentelemetry.io/otel/sdk v1.31.0/go.mod h1:TfRbMdhvxIIr/B2N2LQW2S5v9m3gOQ/08KsbbO5BPT0=
+go.opentelemetry.io/otel/sdk/log v0.7.0 h1:dXkeI2S0MLc5g0/AwxTZv6EUEjctiH8aG14Am56NTmQ=
+go.opentelemetry.io/otel/sdk/log v0.7.0/go.mod h1:oIRXpW+WD6M8BuGj5rtS0aRu/86cbDV/dAfNaZBIjYM=
+go.opentelemetry.io/otel/sdk/metric v1.31.0 h1:i9hxxLJF/9kkvfHppyLL55aW7iIJz4JjxTeYusH7zMc=
+go.opentelemetry.io/otel/sdk/metric v1.31.0/go.mod h1:CRInTMVvNhUKgSAMbKyTMxqOBC0zgyxzW55lZzX43Y8=
+go.opentelemetry.io/otel/trace v1.31.0 h1:ffjsj1aRouKewfr85U2aGagJ46+MvodynlQ1HYdmJys=
+go.opentelemetry.io/otel/trace v1.31.0/go.mod h1:TXZkRk7SM2ZQLtR6eoAWQFIHPvzQ06FJAsO1tJg480A=
+go.opentelemetry.io/proto/otlp v1.3.1 h1:TrMUixzpM0yuc/znrFTP9MMRh8trP93mkCiDVeXrui0=
+go.opentelemetry.io/proto/otlp v1.3.1/go.mod h1:0X1WI4de4ZsLrrJNLAQbFeLCm3T7yBkR0XqQ7niQU+8=
 go.uber.org/goleak v1.3.0 h1:2K3zAYmnTNqV73imy9J1T3WC+gmCePx2hEGkimedGto=
 go.uber.org/goleak v1.3.0/go.mod h1:CoHD4mav9JJNrW/WLlf7HGZPjdw8EucARQHekz1X6bE=
 golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.14.0/go.mod h1:MVFd36DqK4CsrnJYDkBA3VC4m2GkXAM0PvzMCn4JQf4=
-golang.org/x/crypto v0.31.0 h1:ihbySMvVjLAeSH1IbfcRTkD/iNscyz8rGzjF/E5hV6U=
-golang.org/x/crypto v0.31.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk=
+golang.org/x/crypto v0.29.0 h1:L5SG1JTTXupVV3n6sUqMTeWbjAyfPwoda2DLX8J8FrQ=
+golang.org/x/crypto v0.29.0/go.mod h1:+F4F4N5hv6v38hfeYwTdx20oUvLLc+QfrE9Ax9HtgRg=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/mod v0.8.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
 golang.org/x/mod v0.22.0 h1:D4nJWe9zXqHOmWqj4VMOJhvzj7bEZg4wEYa759z1pH4=
@@ -162,13 +162,13 @@ golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug
 golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
 golang.org/x/net v0.10.0/go.mod h1:0qNGK6F8kojg2nk9dLZ2mShWaEBan6FAoqfSigmmuDg=
 golang.org/x/net v0.17.0/go.mod h1:NxSsAGuq816PNPmqtQdLE42eU2Fs7NoRIZrHJAlaCOE=
-golang.org/x/net v0.33.0 h1:74SYHlV8BIgHIFC/LrYkOGIwL19eTYXQ5wc6TBuO36I=
-golang.org/x/net v0.33.0/go.mod h1:HXLR5J+9DxmrqMwG9qjGCxZ+zKXxBru04zlTvWlWuN4=
+golang.org/x/net v0.30.0 h1:AcW1SDZMkb8IpzCdQUaIq2sP4sZ4zw+55h6ynffypl4=
+golang.org/x/net v0.30.0/go.mod h1:2wGyMJ5iFasEhkwi13ChkO/t1ECNC4X4eBKkVFyYFlU=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.1.0/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.10.0 h1:3NQrjDixjgGwUOCaF8w2+VYHv0Ve/vGYSbdkTa98gmQ=
-golang.org/x/sync v0.10.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
+golang.org/x/sync v0.9.0 h1:fEo0HyrW1GIgZdpbhCRO0PkJajUS5H9IFUztCgEo2jQ=
+golang.org/x/sync v0.9.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210615035016-665e8c7367d1/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
@@ -179,8 +179,8 @@ golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.8.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.13.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.28.0 h1:Fksou7UEQUWlKvIdsqzJmUmCX3cZuD2+P3XyyzwMhlA=
-golang.org/x/sys v0.28.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
+golang.org/x/sys v0.27.0 h1:wBqf8DvsY9Y/2P8gAfPDEYNuS30J4lPHJxXSb/nJZ+s=
+golang.org/x/sys v0.27.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
@@ -193,8 +193,8 @@ golang.org/x/text v0.3.8/go.mod h1:E6s5w1FMmriuDzIBO73fBruAKo1PCIq6d2Q6DHfQ8WQ=
 golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
 golang.org/x/text v0.9.0/go.mod h1:e1OnstbJyHTd6l/uOt8jFFHp6TRDWZR/bV3emEE/zU8=
 golang.org/x/text v0.13.0/go.mod h1:TvPlkZtksWOMsz7fbANvkp4WM8x/WCo/om8BMLbz+aE=
-golang.org/x/text v0.21.0 h1:zyQAAkrwaneQ066sspRyJaG9VNi/YJ1NfzcGB3hZ/qo=
-golang.org/x/text v0.21.0/go.mod h1:4IBbMaMmOPCJ8SecivzSH54+73PCFmPWxNTLm+vZkEQ=
+golang.org/x/text v0.20.0 h1:gK/Kv2otX8gz+wn7Rmb3vT96ZwuoxnQlY+HlJVj7Qug=
+golang.org/x/text v0.20.0/go.mod h1:D4IsuqiFMhST5bX19pQ9ikHC2GsaKyk/oF+pn3ducp4=
 golang.org/x/time v0.8.0 h1:9i3RxcPv3PZnitoVGMPDKZSq1xW1gK1Xy3ArNOGZfEg=
 golang.org/x/time v0.8.0/go.mod h1:3BpzKBy/shNhVucY/MWOyx10tF3SFh9QdLuxbVysPQM=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
@@ -202,14 +202,14 @@ golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtn
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
 golang.org/x/tools v0.6.0/go.mod h1:Xwgl3UAJ/d3gWutnCtw505GrjyAbvKui8lOU390QaIU=
 golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
-google.golang.org/genproto/googleapis/api v0.0.0-20241223144023-3abc09e42ca8 h1:st3LcW/BPi75W4q1jJTEor/QWwbNlPlDG0JTn6XhZu0=
-google.golang.org/genproto/googleapis/api v0.0.0-20241223144023-3abc09e42ca8/go.mod h1:klhJGKFyG8Tn50enBn7gizg4nXGXJ+jqEREdCWaPcV4=
-google.golang.org/genproto/googleapis/rpc v0.0.0-20241223144023-3abc09e42ca8 h1:TqExAhdPaB60Ux47Cn0oLV07rGnxZzIsaRhQaqS666A=
-google.golang.org/genproto/googleapis/rpc v0.0.0-20241223144023-3abc09e42ca8/go.mod h1:lcTa1sDdWEIHMWlITnIczmw5w60CF9ffkb8Z+DVmmjA=
-google.golang.org/grpc v1.69.2 h1:U3S9QEtbXC0bYNvRtcoklF3xGtLViumSYxWykJS+7AU=
-google.golang.org/grpc v1.69.2/go.mod h1:vyjdE6jLBI76dgpDojsFGNaHlxdjXN9ghpnd2o7JGZ4=
-google.golang.org/protobuf v1.36.1 h1:yBPeRvTftaleIgM3PZ/WBIZ7XM/eEYAaEyCwvyjq/gk=
-google.golang.org/protobuf v1.36.1/go.mod h1:9fA7Ob0pmnwhb644+1+CVWFRbNajQ6iRojtC/QF5bRE=
+google.golang.org/genproto/googleapis/api v0.0.0-20241104194629-dd2ea8efbc28 h1:M0KvPgPmDZHPlbRbaNU1APr28TvwvvdUPlSv7PUvy8g=
+google.golang.org/genproto/googleapis/api v0.0.0-20241104194629-dd2ea8efbc28/go.mod h1:dguCy7UOdZhTvLzDyt15+rOrawrpM4q7DD9dQ1P11P4=
+google.golang.org/genproto/googleapis/rpc v0.0.0-20241104194629-dd2ea8efbc28 h1:XVhgTWWV3kGQlwJHR3upFWZeTsei6Oks1apkZSeonIE=
+google.golang.org/genproto/googleapis/rpc v0.0.0-20241104194629-dd2ea8efbc28/go.mod h1:GX3210XPVPUjJbTUbvwI8f2IpZDMZuPJWDzDuebbviI=
+google.golang.org/grpc v1.68.0 h1:aHQeeJbo8zAkAa3pRzrVjZlbz6uSfeOXlJNQM0RAbz0=
+google.golang.org/grpc v1.68.0/go.mod h1:fmSPC5AsjSBCK54MyHRx48kpOti1/jRfOlwEWywNjWA=
+google.golang.org/protobuf v1.35.1 h1:m3LfL6/Ca+fqnjnlqQXNpFPABW1UD7mjh8KO2mKFytA=
+google.golang.org/protobuf v1.35.1/go.mod h1:9fA7Ob0pmnwhb644+1+CVWFRbNajQ6iRojtC/QF5bRE=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
 gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=

health/health_server.go

@@ -1,9 +1,3 @@
-// Package health provides a standalone HTTP server for health checks.
-//
-// This package implements a simple health check server that can be used
-// to expose health status endpoints for monitoring and load balancing.
-// It supports custom health check handlers and provides structured logging
-// with graceful shutdown capabilities.
 package health
 
 import (
@@ -17,19 +11,11 @@ import (
 	"golang.org/x/sync/errgroup"
 )
 
-// Server is a standalone HTTP server dedicated to health checks.
-// It runs separately from the main application server to ensure health
-// checks remain available even if the main server is experiencing issues.
-//
-// The server includes built-in timeouts, graceful shutdown, and structured
-// logging for monitoring and debugging health check behavior.
 type Server struct {
 	log      *slog.Logger
 	healthFn http.HandlerFunc
 }
 
-// NewServer creates a new health check server with the specified health handler.
-// If healthFn is nil, a default handler that returns HTTP 200 "ok" is used.
 func NewServer(healthFn http.HandlerFunc) *Server {
 	if healthFn == nil {
 		healthFn = basicHealth
@@ -41,13 +27,10 @@ func NewServer(healthFn http.HandlerFunc) *Server {
 	return srv
 }
 
-// SetLogger replaces the default logger with a custom one.
 func (srv *Server) SetLogger(log *slog.Logger) {
 	srv.log = log
 }
 
-// Listen starts the health server on the specified port and blocks until ctx is cancelled.
-// The server exposes the health handler at "/__health" with graceful shutdown support.
 func (srv *Server) Listen(ctx context.Context, port int) error {
 	srv.log.Info("starting health listener", "port", port)
 
@@ -76,10 +59,11 @@ func (srv *Server) Listen(ctx context.Context, port int) error {
 
 	<-ctx.Done()
 
+	ctx, cancel := context.WithTimeout(ctx, 2*time.Second)
+	defer cancel()
+
 	g.Go(func() error {
-		shCtx, cancel := context.WithTimeout(context.Background(), 2*time.Second)
-		defer cancel()
-		if err := hsrv.Shutdown(shCtx); err != nil {
+		if err := hsrv.Shutdown(ctx); err != nil {
 			srv.log.Error("health check server shutdown failed", "err", err)
 			return err
 		}
@@ -89,7 +73,8 @@ func (srv *Server) Listen(ctx context.Context, port int) error {
 	return g.Wait()
 }
 
-// HealthCheckListener runs a simple HTTP server on the specified port for health check probes.
+// HealthCheckListener runs simple http server on the specified port for
+// health check probes
 func HealthCheckListener(ctx context.Context, port int, log *slog.Logger) error {
 	srv := NewServer(nil)
 	srv.SetLogger(log)

health/health_test.go

@@ -8,6 +8,7 @@ import (
 )
 
 func TestHealthHandler(t *testing.T) {
+
 	req := httptest.NewRequest(http.MethodGet, "/__health", nil)
 	w := httptest.NewRecorder()
 

kafka/kafka.go

@@ -42,9 +42,11 @@ type Kafka struct {
 	l *log.Logger
 
 	// wr *kafka.Writer
+
 }
 
 func (k *Kafka) tlsConfig() (*tls.Config, error) {
+
 	cm, err := certman.New(k.tls.Cert, k.tls.Key)
 	if err != nil {
 		return nil, err
@@ -187,6 +189,7 @@ func (k *Kafka) brokerAddrs() []string {
 }
 
 func (k *Kafka) NewWriter(topic string) (*kafka.Writer, error) {
+
 	// https://pkg.go.dev/github.com/segmentio/kafka-go#Writer
 	w := &kafka.Writer{
 		Addr:        kafka.TCP(k.brokerAddrs()...),

logger/logfmt.go

@@ -17,6 +17,7 @@ type logfmt struct {
 }
 
 func newLogFmtHandler(next slog.Handler) slog.Handler {
+
 	buf := bytes.NewBuffer([]byte{})
 
 	h := &logfmt{

logger/logfmt_test.go

@@ -9,6 +9,7 @@ import (
 )
 
 func TestLogFmt(t *testing.T) {
+
 	var buf bytes.Buffer
 	jsonh := slog.NewJSONHandler(&buf, nil)
 	h := newLogFmtHandler(jsonh)
@@ -38,4 +39,5 @@ func TestLogFmt(t *testing.T) {
 		t.Log("didn't find message in output")
 		t.Fail()
 	}
+
 }

logger/logger.go

@@ -15,21 +15,17 @@ import (
 
 var ConfigPrefix = ""
 
-var (
-	textLogger  *slog.Logger
-	otlpLogger  *slog.Logger
-	multiLogger *slog.Logger
-)
+var textLogger *slog.Logger
+var otlpLogger *slog.Logger
+var multiLogger *slog.Logger
 
-var (
-	setupText  sync.Once // this sets the default
-	setupOtlp  sync.Once // this never sets the default
-	setupMulti sync.Once // this sets the default, and will always run after the others
-	mu         sync.Mutex
-)
+var setupText sync.Once  // this sets the default
+var setupOtlp sync.Once  // this never sets the default
+var setupMulti sync.Once // this sets the default, and will always run after the others
+var mu sync.Mutex
 
 func setupStdErrHandler() slog.Handler {
-	programLevel := new(slog.LevelVar) // Info by default
+	var programLevel = new(slog.LevelVar) // Info by default
 
 	envVar := "DEBUG"
 	if len(ConfigPrefix) > 0 {

logger/stdlog.go

@@ -27,15 +27,15 @@ func NewStdLog(key string, debug bool, log *slog.Logger) *stdLoggerish {
 	return sl
 }
 
-func (l stdLoggerish) Println(msg ...any) {
+func (l stdLoggerish) Println(msg ...interface{}) {
 	l.f(l.key, "msg", msg)
 }
 
-func (l stdLoggerish) Printf(msg string, args ...any) {
+func (l stdLoggerish) Printf(msg string, args ...interface{}) {
 	l.f(l.key, "msg", fmt.Sprintf(msg, args...))
 }
 
-func (l stdLoggerish) Fatalf(msg string, args ...any) {
+func (l stdLoggerish) Fatalf(msg string, args ...interface{}) {
 	l.log.Error(l.key, "msg", fmt.Sprintf(msg, args...))
 	panic("fatal error") // todo: does this make sense at all?
 }

metricsserver/metrics.go

@@ -1,8 +1,3 @@
-// Package metricsserver provides a standalone HTTP server for exposing Prometheus metrics.
-//
-// This package implements a dedicated metrics server that exposes application metrics
-// via HTTP. It uses a custom Prometheus registry to avoid conflicts with other metric
-// collectors and provides graceful shutdown capabilities.
 package metricsserver
 
 import (
@@ -18,13 +13,10 @@ import (
 	"go.ntppool.org/common/logger"
 )
 
-// Metrics provides a custom Prometheus registry and HTTP handlers for metrics exposure.
-// It isolates application metrics from the default global registry.
 type Metrics struct {
 	r *prometheus.Registry
 }
 
-// New creates a new Metrics instance with a custom Prometheus registry.
 func New() *Metrics {
 	r := prometheus.NewRegistry()
 
@@ -35,14 +27,12 @@ func New() *Metrics {
 	return m
 }
 
-// Registry returns the custom Prometheus registry.
-// Use this to register your application's metrics collectors.
 func (m *Metrics) Registry() *prometheus.Registry {
 	return m.r
 }
 
-// Handler returns an HTTP handler for the /metrics endpoint with OpenMetrics support.
 func (m *Metrics) Handler() http.Handler {
+
 	log := logger.NewStdLog("prom http", false, nil)
 
 	return promhttp.HandlerFor(m.r, promhttp.HandlerOpts{
@@ -52,9 +42,11 @@ func (m *Metrics) Handler() http.Handler {
 	})
 }
 
-// ListenAndServe starts a metrics server on the specified port and blocks until ctx is done.
-// The server exposes the metrics handler and shuts down gracefully when the context is cancelled.
+// ListenAndServe starts a goroutine with a server running on
+// the specified port. The server will shutdown and return when
+// the provided context is done
 func (m *Metrics) ListenAndServe(ctx context.Context, port int) error {
+
 	log := logger.Setup()
 
 	srv := &http.Server{

metricsserver/metrics_test.go

@@ -1,242 +0,0 @@
-package metricsserver
-
-import (
-	"context"
-	"fmt"
-	"io"
-	"net/http"
-	"net/http/httptest"
-	"strings"
-	"testing"
-	"time"
-
-	"github.com/prometheus/client_golang/prometheus"
-)
-
-func TestNew(t *testing.T) {
-	metrics := New()
-	
-	if metrics == nil {
-		t.Fatal("New returned nil")
-	}
-	
-	if metrics.r == nil {
-		t.Error("metrics registry is nil")
-	}
-}
-
-func TestRegistry(t *testing.T) {
-	metrics := New()
-	registry := metrics.Registry()
-	
-	if registry == nil {
-		t.Fatal("Registry() returned nil")
-	}
-	
-	if registry != metrics.r {
-		t.Error("Registry() did not return the metrics registry")
-	}
-	
-	// Test that we can register a metric
-	counter := prometheus.NewCounter(prometheus.CounterOpts{
-		Name: "test_counter",
-		Help: "A test counter",
-	})
-	
-	err := registry.Register(counter)
-	if err != nil {
-		t.Errorf("failed to register metric: %v", err)
-	}
-	
-	// Test that the metric is registered
-	metricFamilies, err := registry.Gather()
-	if err != nil {
-		t.Errorf("failed to gather metrics: %v", err)
-	}
-	
-	found := false
-	for _, mf := range metricFamilies {
-		if mf.GetName() == "test_counter" {
-			found = true
-			break
-		}
-	}
-	
-	if !found {
-		t.Error("registered metric not found in registry")
-	}
-}
-
-func TestHandler(t *testing.T) {
-	metrics := New()
-	
-	// Register a test metric
-	counter := prometheus.NewCounterVec(
-		prometheus.CounterOpts{
-			Name: "test_requests_total",
-			Help: "Total number of test requests",
-		},
-		[]string{"method"},
-	)
-	metrics.Registry().MustRegister(counter)
-	counter.WithLabelValues("GET").Inc()
-	
-	// Test the handler
-	handler := metrics.Handler()
-	if handler == nil {
-		t.Fatal("Handler() returned nil")
-	}
-	
-	// Create a test request
-	req := httptest.NewRequest("GET", "/metrics", nil)
-	recorder := httptest.NewRecorder()
-	
-	// Call the handler
-	handler.ServeHTTP(recorder, req)
-	
-	// Check response
-	resp := recorder.Result()
-	defer resp.Body.Close()
-	
-	if resp.StatusCode != http.StatusOK {
-		t.Errorf("expected status 200, got %d", resp.StatusCode)
-	}
-	
-	body, err := io.ReadAll(resp.Body)
-	if err != nil {
-		t.Fatalf("failed to read response body: %v", err)
-	}
-	
-	bodyStr := string(body)
-	
-	// Check for our test metric
-	if !strings.Contains(bodyStr, "test_requests_total") {
-		t.Error("test metric not found in metrics output")
-	}
-	
-	// Check for OpenMetrics format indicators
-	if !strings.Contains(bodyStr, "# TYPE") {
-		t.Error("metrics output missing TYPE comments")
-	}
-}
-
-func TestListenAndServe(t *testing.T) {
-	metrics := New()
-	
-	// Register a test metric
-	counter := prometheus.NewCounterVec(
-		prometheus.CounterOpts{
-			Name: "test_requests_total",
-			Help: "Total number of test requests",
-		},
-		[]string{"method"},
-	)
-	metrics.Registry().MustRegister(counter)
-	counter.WithLabelValues("GET").Inc()
-	
-	ctx, cancel := context.WithCancel(context.Background())
-	defer cancel()
-	
-	// Start server in a goroutine
-	errCh := make(chan error, 1)
-	go func() {
-		// Use a high port number to avoid conflicts
-		errCh <- metrics.ListenAndServe(ctx, 9999)
-	}()
-	
-	// Give the server a moment to start
-	time.Sleep(100 * time.Millisecond)
-	
-	// Test metrics endpoint
-	resp, err := http.Get("http://localhost:9999/metrics")
-	if err != nil {
-		t.Fatalf("failed to GET /metrics: %v", err)
-	}
-	defer resp.Body.Close()
-	
-	if resp.StatusCode != http.StatusOK {
-		t.Errorf("expected status 200, got %d", resp.StatusCode)
-	}
-	
-	body, err := io.ReadAll(resp.Body)
-	if err != nil {
-		t.Fatalf("failed to read response body: %v", err)
-	}
-	
-	bodyStr := string(body)
-	
-	// Check for our test metric
-	if !strings.Contains(bodyStr, "test_requests_total") {
-		t.Error("test metric not found in metrics output")
-	}
-	
-	// Cancel context to stop server
-	cancel()
-	
-	// Wait for server to stop
-	select {
-	case err := <-errCh:
-		if err != nil {
-			t.Errorf("server returned error: %v", err)
-		}
-	case <-time.After(5 * time.Second):
-		t.Error("server did not stop within timeout")
-	}
-}
-
-func TestListenAndServeContextCancellation(t *testing.T) {
-	metrics := New()
-	
-	ctx, cancel := context.WithCancel(context.Background())
-	
-	// Start server
-	errCh := make(chan error, 1)
-	go func() {
-		errCh <- metrics.ListenAndServe(ctx, 9998)
-	}()
-	
-	// Give server time to start
-	time.Sleep(100 * time.Millisecond)
-	
-	// Cancel context
-	cancel()
-	
-	// Server should stop gracefully
-	select {
-	case err := <-errCh:
-		if err != nil {
-			t.Errorf("server returned error on graceful shutdown: %v", err)
-		}
-	case <-time.After(5 * time.Second):
-		t.Error("server did not stop within timeout after context cancellation")
-	}
-}
-
-// Benchmark the metrics handler response time
-func BenchmarkMetricsHandler(b *testing.B) {
-	metrics := New()
-	
-	// Register some test metrics
-	for i := 0; i < 10; i++ {
-		counter := prometheus.NewCounter(prometheus.CounterOpts{
-			Name: fmt.Sprintf("bench_counter_%d", i),
-			Help: "A benchmark counter",
-		})
-		metrics.Registry().MustRegister(counter)
-		counter.Add(float64(i * 100))
-	}
-	
-	handler := metrics.Handler()
-	
-	b.ResetTimer()
-	
-	for i := 0; i < b.N; i++ {
-		req := httptest.NewRequest("GET", "/metrics", nil)
-		recorder := httptest.NewRecorder()
-		handler.ServeHTTP(recorder, req)
-		
-		if recorder.Code != http.StatusOK {
-			b.Fatalf("unexpected status code: %d", recorder.Code)
-		}
-	}
-}

scripts/run-goreleaser

@@ -2,7 +2,7 @@
 
 set -euo pipefail
 
-go install github.com/goreleaser/goreleaser/v2@v2.8.2
+go install github.com/goreleaser/goreleaser@v1.26.2
 
 if [ ! -z "${harbor_username:-}" ]; then
   DOCKER_FILE=~/.docker/config.json

timeutil/duration.go

@@ -1,4 +1,3 @@
-// Package timeutil provides JSON-serializable time utilities.
 package timeutil
 
 import (
@@ -7,39 +6,16 @@ import (
 	"time"
 )
 
-// Duration is a wrapper around time.Duration that supports JSON marshaling/unmarshaling.
-//
-// When marshaling to JSON, it outputs the duration as a string using time.Duration.String().
-// When unmarshaling from JSON, it accepts both:
-//   - String values that can be parsed by time.ParseDuration (e.g., "30s", "5m", "1h30m")
-//   - Numeric values that represent nanoseconds as a float64
-//
-// This makes it compatible with configuration files and APIs that need to represent
-// durations in a human-readable format.
-//
-// Example usage:
-//
-//	type Config struct {
-//		Timeout timeutil.Duration `json:"timeout"`
-//	}
-//
-//	// JSON: {"timeout": "30s"}
-//	// or:   {"timeout": 30000000000}
 type Duration struct {
 	time.Duration
 }
 
-// MarshalJSON implements json.Marshaler.
-// It marshals the duration as a string using time.Duration.String().
 func (d Duration) MarshalJSON() ([]byte, error) {
 	return json.Marshal(time.Duration(d.Duration).String())
 }
 
-// UnmarshalJSON implements json.Unmarshaler.
-// It accepts both string values (parsed via time.ParseDuration) and
-// numeric values (interpreted as nanoseconds).
 func (d *Duration) UnmarshalJSON(b []byte) error {
-	var v any
+	var v interface{}
 	if err := json.Unmarshal(b, &v); err != nil {
 		return err
 	}

timeutil/duration_test.go

@@ -18,4 +18,5 @@ func TestDuration(t *testing.T) {
 	if foo.Foo.Seconds() != 30 {
 		t.Fatalf("parsed time.Duration wasn't 30 seconds: %s", foo.Foo)
 	}
+
 }

tracing/tracing.go

@@ -196,6 +196,7 @@ func SetupSDK(ctx context.Context, cfg *TracerConfig) (shutdown TpShutdownFunc,
 }
 
 func newOLTPExporter(ctx context.Context, cfg *TracerConfig) (sdktrace.SpanExporter, error) {
+
 	log := logger.Setup()
 
 	var tlsConfig *tls.Config
@@ -237,7 +238,7 @@ func newOLTPExporter(ctx context.Context, cfg *TracerConfig) (sdktrace.SpanExpor
 		}
 
 		client = otlptracegrpc.NewClient(opts...)
-	case "http/protobuf", "http/json":
+	case "http/protobuf":
 		opts := []otlptracehttp.Option{
 			otlptracehttp.WithCompression(otlptracehttp.GzipCompression),
 		}

tracing/tracing_test.go

@@ -7,6 +7,7 @@ import (
 )
 
 func TestInit(t *testing.T) {
+
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
 
@@ -17,4 +18,5 @@ func TestInit(t *testing.T) {
 		t.FailNow()
 	}
 	defer shutdownFn(ctx)
+
 }

types/log_scores.go

@@ -29,7 +29,7 @@ func (lsa *LogScoreAttributes) Value() (driver.Value, error) {
 	return json.Marshal(lsa)
 }
 
-func (lsa *LogScoreAttributes) Scan(value any) error {
+func (lsa *LogScoreAttributes) Scan(value interface{}) error {
 	var source []byte
 	_t := LogScoreAttributes{}
 

ulid/ulid.go

@@ -1,44 +1,48 @@
-// Package ulid provides thread-safe ULID (Universally Unique Lexicographically Sortable Identifier) generation.
-//
-// ULIDs are 128-bit identifiers that are lexicographically sortable and contain
-// a timestamp component. This package uses cryptographically secure random
-// generation optimized for simplicity and performance in concurrent environments.
 package ulid
 
 import (
 	cryptorand "crypto/rand"
+	"encoding/binary"
+	"io"
+	mathrand "math/rand"
+	"os"
+	"sync"
 	"time"
 
 	oklid "github.com/oklog/ulid/v2"
+	"go.ntppool.org/common/logger"
 )
 
-// MakeULID generates a new ULID with the specified timestamp using cryptographically secure randomness.
-// The function is thread-safe and optimized for high-concurrency environments.
-//
-// This implementation prioritizes simplicity and performance over strict monotonicity within
-// the same millisecond. Each ULID is guaranteed to be unique and lexicographically sortable
-// across different timestamps.
-//
-// Returns a pointer to the generated ULID or an error if generation fails.
-// Generation should only fail under extreme circumstances (entropy exhaustion).
+var monotonicPool = sync.Pool{
+	New: func() interface{} {
+
+		log := logger.Setup()
+
+		var seed int64
+		err := binary.Read(cryptorand.Reader, binary.BigEndian, &seed)
+		if err != nil {
+			log.Error("crypto/rand error", "err", err)
+			os.Exit(10)
+		}
+
+		rand := mathrand.New(mathrand.NewSource(seed))
+
+		inc := uint64(mathrand.Int63())
+
+		// log.Printf("seed: %d", seed)
+		// log.Printf("inc:  %d", inc)
+
+		// inc = inc & ^uint64(1<<63) // only want 63 bits
+		mono := oklid.Monotonic(rand, inc)
+		return mono
+	},
+}
+
 func MakeULID(t time.Time) (*oklid.ULID, error) {
-	id, err := oklid.New(oklid.Timestamp(t), cryptorand.Reader)
-	if err != nil {
-		return nil, err
-	}
-
-	return &id, nil
-}
-
-// Make generates a new ULID with the current timestamp using cryptographically secure randomness.
-// This is a convenience function equivalent to MakeULID(time.Now()).
-//
-// The function is thread-safe and optimized for high-concurrency environments.
-//
-// Returns a pointer to the generated ULID or an error if generation fails.
-// Generation should only fail under extreme circumstances (entropy exhaustion).
-func Make() (*oklid.ULID, error) {
-	id, err := oklid.New(oklid.Now(), cryptorand.Reader)
+
+	mono := monotonicPool.Get().(io.Reader)
+
+	id, err := oklid.New(oklid.Timestamp(t), mono)
 	if err != nil {
 		return nil, err
 	}

ulid/ulid_test.go

@@ -1,336 +1,25 @@
 package ulid
 
 import (
-	cryptorand "crypto/rand"
-	"sort"
-	"sync"
 	"testing"
 	"time"
-
-	oklid "github.com/oklog/ulid/v2"
 )
 
-func TestMakeULID(t *testing.T) {
+func TestULID(t *testing.T) {
 	tm := time.Now()
 	ul1, err := MakeULID(tm)
 	if err != nil {
-		t.Fatalf("MakeULID failed: %s", err)
+		t.Logf("makeULID failed: %s", err)
+		t.Fail()
 	}
 	ul2, err := MakeULID(tm)
 	if err != nil {
-		t.Fatalf("MakeULID failed: %s", err)
+		t.Logf("MakeULID failed: %s", err)
+		t.Fail()
 	}
-
-	if ul1 == nil || ul2 == nil {
-		t.Fatal("MakeULID returned nil ULID")
-	}
-
 	if ul1.String() == ul2.String() {
-		t.Errorf("ul1 and ul2 should be different: %s", ul1.String())
+		t.Logf("ul1 and ul2 got the same string: %s", ul1.String())
+		t.Fail()
 	}
-
-	// Verify they have the same timestamp
-	if ul1.Time() != ul2.Time() {
-		t.Errorf("ULIDs with same input time should have same timestamp: %d != %d", ul1.Time(), ul2.Time())
-	}
-
 	t.Logf("ulid string 1 and 2: %s | %s", ul1.String(), ul2.String())
 }
-
-func TestMake(t *testing.T) {
-	// Test Make() function (uses current time)
-	ul1, err := Make()
-	if err != nil {
-		t.Fatalf("Make failed: %s", err)
-	}
-
-	if ul1 == nil {
-		t.Fatal("Make returned nil ULID")
-	}
-
-	// Sleep a bit and generate another
-	time.Sleep(2 * time.Millisecond)
-
-	ul2, err := Make()
-	if err != nil {
-		t.Fatalf("Make failed: %s", err)
-	}
-
-	// Should be different ULIDs
-	if ul1.String() == ul2.String() {
-		t.Errorf("ULIDs from Make() should be different: %s", ul1.String())
-	}
-
-	// Second should be later (or at least not earlier)
-	if ul1.Time() > ul2.Time() {
-		t.Errorf("second ULID should not have earlier timestamp: %d > %d", ul1.Time(), ul2.Time())
-	}
-
-	t.Logf("Make() ULIDs: %s | %s", ul1.String(), ul2.String())
-}
-
-func TestMakeULIDUniqueness(t *testing.T) {
-	tm := time.Now()
-	seen := make(map[string]bool)
-
-	for i := 0; i < 1000; i++ {
-		ul, err := MakeULID(tm)
-		if err != nil {
-			t.Fatalf("MakeULID failed on iteration %d: %s", i, err)
-		}
-
-		str := ul.String()
-		if seen[str] {
-			t.Errorf("duplicate ULID generated: %s", str)
-		}
-		seen[str] = true
-	}
-}
-
-func TestMakeUniqueness(t *testing.T) {
-	seen := make(map[string]bool)
-
-	for i := 0; i < 1000; i++ {
-		ul, err := Make()
-		if err != nil {
-			t.Fatalf("Make failed on iteration %d: %s", i, err)
-		}
-
-		str := ul.String()
-		if seen[str] {
-			t.Errorf("duplicate ULID generated: %s", str)
-		}
-		seen[str] = true
-	}
-}
-
-func TestMakeULIDTimestampProgression(t *testing.T) {
-	t1 := time.Now()
-	ul1, err := MakeULID(t1)
-	if err != nil {
-		t.Fatalf("MakeULID failed: %s", err)
-	}
-
-	// Wait to ensure different timestamp
-	time.Sleep(2 * time.Millisecond)
-
-	t2 := time.Now()
-	ul2, err := MakeULID(t2)
-	if err != nil {
-		t.Fatalf("MakeULID failed: %s", err)
-	}
-
-	if ul1.Time() >= ul2.Time() {
-		t.Errorf("second ULID should have later timestamp: %d >= %d", ul1.Time(), ul2.Time())
-	}
-
-	if ul1.Compare(*ul2) >= 0 {
-		t.Errorf("second ULID should be greater: %s >= %s", ul1.String(), ul2.String())
-	}
-}
-
-func TestMakeULIDConcurrency(t *testing.T) {
-	const numGoroutines = 10
-	const numULIDsPerGoroutine = 100
-
-	var wg sync.WaitGroup
-	ulidChan := make(chan *oklid.ULID, numGoroutines*numULIDsPerGoroutine)
-	tm := time.Now()
-
-	// Start multiple goroutines generating ULIDs concurrently
-	for i := 0; i < numGoroutines; i++ {
-		wg.Add(1)
-		go func() {
-			defer wg.Done()
-			for j := 0; j < numULIDsPerGoroutine; j++ {
-				ul, err := MakeULID(tm)
-				if err != nil {
-					t.Errorf("MakeULID failed: %s", err)
-					return
-				}
-				ulidChan <- ul
-			}
-		}()
-	}
-
-	wg.Wait()
-	close(ulidChan)
-
-	// Collect all ULIDs and check uniqueness
-	seen := make(map[string]bool)
-	count := 0
-
-	for ul := range ulidChan {
-		str := ul.String()
-		if seen[str] {
-			t.Errorf("duplicate ULID generated in concurrent test: %s", str)
-		}
-		seen[str] = true
-		count++
-	}
-
-	if count != numGoroutines*numULIDsPerGoroutine {
-		t.Errorf("expected %d ULIDs, got %d", numGoroutines*numULIDsPerGoroutine, count)
-	}
-}
-
-func TestMakeConcurrency(t *testing.T) {
-	const numGoroutines = 10
-	const numULIDsPerGoroutine = 100
-
-	var wg sync.WaitGroup
-	ulidChan := make(chan *oklid.ULID, numGoroutines*numULIDsPerGoroutine)
-
-	// Start multiple goroutines generating ULIDs concurrently
-	for i := 0; i < numGoroutines; i++ {
-		wg.Add(1)
-		go func() {
-			defer wg.Done()
-			for j := 0; j < numULIDsPerGoroutine; j++ {
-				ul, err := Make()
-				if err != nil {
-					t.Errorf("Make failed: %s", err)
-					return
-				}
-				ulidChan <- ul
-			}
-		}()
-	}
-
-	wg.Wait()
-	close(ulidChan)
-
-	// Collect all ULIDs and check uniqueness
-	seen := make(map[string]bool)
-	count := 0
-
-	for ul := range ulidChan {
-		str := ul.String()
-		if seen[str] {
-			t.Errorf("duplicate ULID generated in concurrent test: %s", str)
-		}
-		seen[str] = true
-		count++
-	}
-
-	if count != numGoroutines*numULIDsPerGoroutine {
-		t.Errorf("expected %d ULIDs, got %d", numGoroutines*numULIDsPerGoroutine, count)
-	}
-}
-
-func TestMakeULIDErrorHandling(t *testing.T) {
-	// Test with various timestamps
-	timestamps := []time.Time{
-		time.Unix(0, 0),           // Unix epoch
-		time.Now(),                // Current time
-		time.Now().Add(time.Hour), // Future time
-	}
-
-	for i, tm := range timestamps {
-		ul, err := MakeULID(tm)
-		if err != nil {
-			t.Errorf("MakeULID failed with timestamp %d: %s", i, err)
-		}
-		if ul == nil {
-			t.Errorf("MakeULID returned nil ULID with timestamp %d", i)
-		}
-	}
-}
-
-func TestMakeULIDLexicographicOrdering(t *testing.T) {
-	var ulids []*oklid.ULID
-	var timestamps []time.Time
-
-	// Generate ULIDs with increasing timestamps
-	for i := 0; i < 10; i++ {
-		tm := time.Now().Add(time.Duration(i) * time.Millisecond)
-		timestamps = append(timestamps, tm)
-
-		ul, err := MakeULID(tm)
-		if err != nil {
-			t.Fatalf("MakeULID failed: %s", err)
-		}
-		ulids = append(ulids, ul)
-
-		// Small delay to ensure different timestamps
-		time.Sleep(time.Millisecond)
-	}
-
-	// Sort ULID strings lexicographically
-	ulidStrings := make([]string, len(ulids))
-	for i, ul := range ulids {
-		ulidStrings[i] = ul.String()
-	}
-
-	originalOrder := make([]string, len(ulidStrings))
-	copy(originalOrder, ulidStrings)
-
-	sort.Strings(ulidStrings)
-
-	// Verify lexicographic order matches chronological order
-	for i := 0; i < len(originalOrder); i++ {
-		if originalOrder[i] != ulidStrings[i] {
-			t.Errorf("lexicographic order doesn't match chronological order at index %d: %s != %s",
-				i, originalOrder[i], ulidStrings[i])
-		}
-	}
-}
-
-// Benchmark ULID generation performance
-func BenchmarkMakeULID(b *testing.B) {
-	tm := time.Now()
-
-	b.ResetTimer()
-	for i := 0; i < b.N; i++ {
-		_, err := MakeULID(tm)
-		if err != nil {
-			b.Fatalf("MakeULID failed: %s", err)
-		}
-	}
-}
-
-// Benchmark Make function
-func BenchmarkMake(b *testing.B) {
-	b.ResetTimer()
-	for i := 0; i < b.N; i++ {
-		_, err := Make()
-		if err != nil {
-			b.Fatalf("Make failed: %s", err)
-		}
-	}
-}
-
-// Benchmark concurrent ULID generation
-func BenchmarkMakeULIDConcurrent(b *testing.B) {
-	tm := time.Now()
-
-	b.RunParallel(func(pb *testing.PB) {
-		for pb.Next() {
-			_, err := MakeULID(tm)
-			if err != nil {
-				b.Fatalf("MakeULID failed: %s", err)
-			}
-		}
-	})
-}
-
-// Benchmark concurrent Make function
-func BenchmarkMakeConcurrent(b *testing.B) {
-	b.RunParallel(func(pb *testing.PB) {
-		for pb.Next() {
-			_, err := Make()
-			if err != nil {
-				b.Fatalf("Make failed: %s", err)
-			}
-		}
-	})
-}
-
-// Benchmark random number generation
-func BenchmarkCryptoRand(b *testing.B) {
-	buf := make([]byte, 10) // ULID entropy size
-	b.ResetTimer()
-	for i := 0; i < b.N; i++ {
-		cryptorand.Read(buf)
-	}
-}

version/version.go

@@ -1,17 +1,3 @@
-// Package version provides build metadata and version information management.
-//
-// This package manages application version information including semantic version,
-// Git revision, build time, and provides integration with CLI frameworks (Cobra, Kong)
-// and Prometheus metrics for operational visibility.
-//
-// Version information can be injected at build time using ldflags:
-//
-//	go build -ldflags "-X go.ntppool.org/common/version.VERSION=v1.0.0 \
-//	  -X go.ntppool.org/common/version.buildTime=2023-01-01T00:00:00Z \
-//	  -X go.ntppool.org/common/version.gitVersion=abc123"
-//
-// The package also automatically extracts build information from Go's debug.BuildInfo
-// when available, providing fallback values for VCS time and revision.
 package version
 
 import (
@@ -26,28 +12,23 @@ import (
 	"golang.org/x/mod/semver"
 )
 
-// VERSION contains the current software version (typically set during the build process via ldflags).
-// If not set, defaults to "dev-snapshot". The version should follow semantic versioning.
-var (
-	VERSION     string // Semantic version (e.g., "1.0.0" or "v1.0.0")
-	buildTime   string // Build timestamp (RFC3339 format)
-	gitVersion  string // Git commit hash
-	gitModified bool   // Whether the working tree was modified during build
-)
+// VERSION has the current software version (set in the build process)
+var VERSION string
+var buildTime string
+var gitVersion string
+var gitModified bool
 
-// info holds the consolidated version information extracted from build variables and debug.BuildInfo.
 var info Info
 
-// Info represents structured version and build information.
-// This struct is used for JSON serialization and programmatic access to build metadata.
 type Info struct {
-	Version     string `json:",omitempty"` // Semantic version with "v" prefix
-	GitRev      string `json:",omitempty"` // Full Git commit hash
-	GitRevShort string `json:",omitempty"` // Shortened Git commit hash (7 characters)
-	BuildTime   string `json:",omitempty"` // Build timestamp
+	Version     string `json:",omitempty"`
+	GitRev      string `json:",omitempty"`
+	GitRevShort string `json:",omitempty"`
+	BuildTime   string `json:",omitempty"`
 }
 
 func init() {
+
 	info.BuildTime = buildTime
 	info.GitRev = gitVersion
 
@@ -97,16 +78,10 @@ func init() {
 	Version()
 }
 
-// VersionCmd creates a Cobra command for displaying version information.
-// The name parameter is used as a prefix in the output (e.g., "myapp v1.0.0").
-// Returns a configured cobra.Command that can be added to any CLI application.
 func VersionCmd(name string) *cobra.Command {
 	versionCmd := &cobra.Command{
 		Use:   "version",
 		Short: "Print version and build information",
-		Long: `Print detailed version information including semantic version,
-Git revision, build time, and Go version. Build information is automatically
-extracted from Go's debug.BuildInfo when available.`,
 		Run: func(cmd *cobra.Command, args []string) {
 			ver := Version()
 			fmt.Printf("%s %s\n", name, ver)
@@ -115,23 +90,6 @@ extracted from Go's debug.BuildInfo when available.`,
 	return versionCmd
 }
 
-// KongVersionCmd provides a Kong CLI framework compatible version command.
-// The Name field should be set to the application name for proper output formatting.
-type KongVersionCmd struct {
-	Name string `kong:"-"` // Application name, excluded from Kong parsing
-}
-
-// Run executes the version command for Kong CLI framework.
-// Prints the application name and version information to stdout.
-func (cmd *KongVersionCmd) Run() error {
-	fmt.Printf("%s %s\n", cmd.Name, Version())
-	return nil
-}
-
-// RegisterMetric registers a Prometheus gauge metric with build information.
-// If name is provided, it creates a metric named "{name}_build_info", otherwise "build_info".
-// The metric includes labels for version, build time, Git time, and Git revision.
-// This is useful for exposing build information in monitoring systems.
 func RegisterMetric(name string, registry prometheus.Registerer) {
 	if len(name) > 0 {
 		name = strings.ReplaceAll(name, "-", "_")
@@ -142,13 +100,13 @@ func RegisterMetric(name string, registry prometheus.Registerer) {
 	buildInfo := prometheus.NewGaugeVec(
 		prometheus.GaugeOpts{
 			Name: name,
-			Help: "Build information including version, build time, and git revision",
+			Help: "Build information",
 		},
 		[]string{
-			"version",   // Combined version/git format (e.g., "v1.0.0/abc123")
-			"buildtime", // Build timestamp from ldflags
-			"gittime",   // Git commit timestamp from VCS info
-			"git",       // Full Git commit hash
+			"version",
+			"buildtime",
+			"gittime",
+			"git",
 		},
 	)
 	registry.MustRegister(buildInfo)
@@ -163,20 +121,12 @@ func RegisterMetric(name string, registry prometheus.Registerer) {
 	).Set(1)
 }
 
-// v caches the formatted version string to avoid repeated computation.
 var v string
 
-// VersionInfo returns the structured version information.
-// This provides programmatic access to version details for JSON serialization
-// or other structured uses.
 func VersionInfo() Info {
 	return info
 }
 
-// Version returns a human-readable version string suitable for display.
-// The format includes semantic version, Git revision, build time, and Go version.
-// Example: "v1.0.0/abc123f-M (2023-01-01T00:00:00Z, go1.21.0)"
-// The "-M" suffix indicates the working tree was modified during build.
 func Version() string {
 	if len(v) > 0 {
 		return v
@@ -204,23 +154,10 @@ func Version() string {
 	return v
 }
 
-// CheckVersion compares a version against a minimum required version.
-// Returns true if the version meets or exceeds the minimum requirement.
-//
-// Special handling:
-//   - "dev-snapshot" is always considered valid (returns true)
-//   - Git hash suffixes (e.g., "v1.0.0/abc123") are stripped before comparison
-//   - Uses semantic version comparison rules
-//
-// Both version and minimumVersion should follow semantic versioning with "v" prefix.
 func CheckVersion(version, minimumVersion string) bool {
 	if version == "dev-snapshot" {
 		return true
 	}
-	// Strip Git hash suffix if present (e.g., "v1.0.0/abc123" -> "v1.0.0")
-	if idx := strings.Index(version, "/"); idx >= 0 {
-		version = version[0:idx]
-	}
 	if semver.Compare(version, minimumVersion) < 0 {
 		// log.Debug("version too old", "v", cl.Version.Version)
 		return false

version/version_test.go

@@ -1,311 +0,0 @@
-package version
-
-import (
-	"runtime"
-	"strings"
-	"testing"
-
-	"github.com/prometheus/client_golang/prometheus"
-	dto "github.com/prometheus/client_model/go"
-)
-
-func TestCheckVersion(t *testing.T) {
-	tests := []struct {
-		In       string
-		Min      string
-		Expected bool
-	}{
-		// Basic version comparisons
-		{"v3.8.4", "v3.8.5", false},
-		{"v3.9.3", "v3.8.5", true},
-		{"v3.8.5", "v3.8.5", true},
-		// Dev snapshot should always pass
-		{"dev-snapshot", "v3.8.5", true},
-		{"dev-snapshot", "v99.99.99", true},
-		// Versions with Git hashes should be stripped
-		{"v3.8.5/abc123", "v3.8.5", true},
-		{"v3.8.4/abc123", "v3.8.5", false},
-		{"v3.9.0/def456", "v3.8.5", true},
-		// Pre-release versions
-		{"v3.8.5-alpha", "v3.8.5", false},
-		{"v3.8.5", "v3.8.5-alpha", true},
-		{"v3.8.5-beta", "v3.8.5-alpha", true},
-	}
-
-	for _, d := range tests {
-		r := CheckVersion(d.In, d.Min)
-		if r != d.Expected {
-			t.Errorf("CheckVersion(%q, %q) = %t, expected %t", d.In, d.Min, r, d.Expected)
-		}
-	}
-}
-
-func TestVersionInfo(t *testing.T) {
-	info := VersionInfo()
-
-	// Check that we get a valid Info struct
-	if info.Version == "" {
-		t.Error("VersionInfo().Version should not be empty")
-	}
-
-	// Version should start with "v" or be "dev-snapshot"
-	if !strings.HasPrefix(info.Version, "v") && info.Version != "dev-snapshot" {
-		t.Errorf("Version should start with 'v' or be 'dev-snapshot', got: %s", info.Version)
-	}
-
-	// GitRevShort should be <= 7 characters if set
-	if info.GitRevShort != "" && len(info.GitRevShort) > 7 {
-		t.Errorf("GitRevShort should be <= 7 characters, got: %s", info.GitRevShort)
-	}
-
-	// GitRevShort should be prefix of GitRev if both are set
-	if info.GitRev != "" && info.GitRevShort != "" {
-		if !strings.HasPrefix(info.GitRev, info.GitRevShort) {
-			t.Errorf("GitRevShort should be prefix of GitRev: %s not prefix of %s",
-				info.GitRevShort, info.GitRev)
-		}
-	}
-}
-
-func TestVersion(t *testing.T) {
-	version := Version()
-
-	if version == "" {
-		t.Error("Version() should not return empty string")
-	}
-
-	// Should contain Go version
-	if !strings.Contains(version, runtime.Version()) {
-		t.Errorf("Version should contain Go version %s, got: %s", runtime.Version(), version)
-	}
-
-	// Should contain the VERSION variable (or dev-snapshot)
-	info := VersionInfo()
-	if !strings.Contains(version, info.Version) {
-		t.Errorf("Version should contain %s, got: %s", info.Version, version)
-	}
-
-	// Should be in expected format: "version (extras)"
-	if !strings.Contains(version, "(") || !strings.Contains(version, ")") {
-		t.Errorf("Version should be in format 'version (extras)', got: %s", version)
-	}
-}
-
-func TestVersionCmd(t *testing.T) {
-	appName := "testapp"
-	cmd := VersionCmd(appName)
-
-	// Test basic command properties
-	if cmd.Use != "version" {
-		t.Errorf("Expected command use to be 'version', got: %s", cmd.Use)
-	}
-
-	if cmd.Short == "" {
-		t.Error("Command should have a short description")
-	}
-
-	if cmd.Long == "" {
-		t.Error("Command should have a long description")
-	}
-
-	if cmd.Run == nil {
-		t.Error("Command should have a Run function")
-	}
-
-	// Test that the command can be executed without error
-	cmd.SetArgs([]string{})
-	err := cmd.Execute()
-	if err != nil {
-		t.Errorf("VersionCmd execution should not return error, got: %s", err)
-	}
-}
-
-func TestKongVersionCmd(t *testing.T) {
-	cmd := &KongVersionCmd{Name: "testapp"}
-
-	// Test that Run() doesn't return an error
-	err := cmd.Run()
-	if err != nil {
-		t.Errorf("KongVersionCmd.Run() should not return error, got: %s", err)
-	}
-}
-
-func TestRegisterMetric(t *testing.T) {
-	// Create a test registry
-	registry := prometheus.NewRegistry()
-
-	// Test registering metric without name
-	RegisterMetric("", registry)
-
-	// Gather metrics
-	metricFamilies, err := registry.Gather()
-	if err != nil {
-		t.Fatalf("Failed to gather metrics: %s", err)
-	}
-
-	// Find the build_info metric
-	var buildInfoFamily *dto.MetricFamily
-	for _, family := range metricFamilies {
-		if family.GetName() == "build_info" {
-			buildInfoFamily = family
-			break
-		}
-	}
-
-	if buildInfoFamily == nil {
-		t.Fatal("build_info metric not found")
-	}
-
-	if buildInfoFamily.GetHelp() == "" {
-		t.Error("build_info metric should have help text")
-	}
-
-	metrics := buildInfoFamily.GetMetric()
-	if len(metrics) == 0 {
-		t.Fatal("build_info metric should have at least one sample")
-	}
-
-	// Check that the metric has the expected labels
-	metric := metrics[0]
-	labels := metric.GetLabel()
-
-	expectedLabels := []string{"version", "buildtime", "gittime", "git"}
-	labelMap := make(map[string]string)
-
-	for _, label := range labels {
-		labelMap[label.GetName()] = label.GetValue()
-	}
-
-	for _, expectedLabel := range expectedLabels {
-		if _, exists := labelMap[expectedLabel]; !exists {
-			t.Errorf("Expected label %s not found in metric", expectedLabel)
-		}
-	}
-
-	// Check that the metric value is 1
-	if metric.GetGauge().GetValue() != 1 {
-		t.Errorf("Expected build_info metric value to be 1, got %f", metric.GetGauge().GetValue())
-	}
-}
-
-func TestRegisterMetricWithName(t *testing.T) {
-	// Create a test registry
-	registry := prometheus.NewRegistry()
-
-	// Test registering metric with custom name
-	appName := "my-test-app"
-	RegisterMetric(appName, registry)
-
-	// Gather metrics
-	metricFamilies, err := registry.Gather()
-	if err != nil {
-		t.Fatalf("Failed to gather metrics: %s", err)
-	}
-
-	// Find the my_test_app_build_info metric
-	expectedName := "my_test_app_build_info"
-	var buildInfoFamily *dto.MetricFamily
-	for _, family := range metricFamilies {
-		if family.GetName() == expectedName {
-			buildInfoFamily = family
-			break
-		}
-	}
-
-	if buildInfoFamily == nil {
-		t.Fatalf("%s metric not found", expectedName)
-	}
-}
-
-func TestVersionConsistency(t *testing.T) {
-	// Call Version() multiple times and ensure it returns the same result
-	v1 := Version()
-	v2 := Version()
-
-	if v1 != v2 {
-		t.Errorf("Version() should return consistent results: %s != %s", v1, v2)
-	}
-}
-
-func TestVersionInfoConsistency(t *testing.T) {
-	// Ensure VersionInfo() is consistent with Version()
-	info := VersionInfo()
-	version := Version()
-
-	// Version string should contain the semantic version
-	if !strings.Contains(version, info.Version) {
-		t.Errorf("Version() should contain VersionInfo().Version: %s not in %s",
-			info.Version, version)
-	}
-
-	// If GitRevShort is set, version should contain it
-	if info.GitRevShort != "" {
-		if !strings.Contains(version, info.GitRevShort) {
-			t.Errorf("Version() should contain GitRevShort: %s not in %s",
-				info.GitRevShort, version)
-		}
-	}
-}
-
-// Test edge cases
-func TestCheckVersionEdgeCases(t *testing.T) {
-	// Test with empty strings
-	if CheckVersion("", "v1.0.0") {
-		t.Error("Empty version should not be >= v1.0.0")
-	}
-
-	// Test with malformed versions (should be handled gracefully)
-	// Note: semver.Compare might panic or return unexpected results for invalid versions
-	// but our function should handle the common cases
-	tests := []struct {
-		version string
-		minimum string
-		desc    string
-	}{
-		{"v1.0.0/", "v1.0.0", "version with trailing slash"},
-		{"v1.0.0/abc/def", "v1.0.0", "version with multiple slashes"},
-	}
-
-	for _, test := range tests {
-		// This should not panic
-		result := CheckVersion(test.version, test.minimum)
-		t.Logf("%s: CheckVersion(%q, %q) = %t", test.desc, test.version, test.minimum, result)
-	}
-}
-
-// Benchmark version operations
-func BenchmarkVersion(b *testing.B) {
-	// Reset the cached version to test actual computation
-	v = ""
-
-	b.ResetTimer()
-	for i := 0; i < b.N; i++ {
-		_ = Version()
-	}
-}
-
-func BenchmarkVersionInfo(b *testing.B) {
-	for i := 0; i < b.N; i++ {
-		_ = VersionInfo()
-	}
-}
-
-func BenchmarkCheckVersion(b *testing.B) {
-	version := "v1.2.3/abc123"
-	minimum := "v1.2.0"
-
-	b.ResetTimer()
-	for i := 0; i < b.N; i++ {
-		_ = CheckVersion(version, minimum)
-	}
-}
-
-func BenchmarkCheckVersionDevSnapshot(b *testing.B) {
-	version := "dev-snapshot"
-	minimum := "v1.2.0"
-
-	b.ResetTimer()
-	for i := 0; i < b.N; i++ {
-		_ = CheckVersion(version, minimum)
-	}
-}

xff/fastlyxff/xff_test.go

@@ -3,12 +3,14 @@ package fastlyxff
 import "testing"
 
 func TestFastlyIPRanges(t *testing.T) {
+
 	fastlyxff, err := New("fastly.json")
 	if err != nil {
 		t.Fatalf("could not load test data: %s", err)
 	}
 
 	data, err := fastlyxff.EchoTrustOption()
+
 	if err != nil {
 		t.Fatalf("could not parse test data: %s", err)
 	}
@@ -17,4 +19,5 @@ func TestFastlyIPRanges(t *testing.T) {
 		t.Logf("only got %d prefixes, expected more", len(data))
 		t.Fail()
 	}
+
 }