Function handler

packaging/tools/agent-events/server.go:259–405

--- HTTP Handler ---

(w http.ResponseWriter, r *http.Request)

// --- HTTP Handler ---
func handler(w http.ResponseWriter, r *http.Request) {
	requestStartTime := time.Now()
	ctx := r.Context()

	defer func() {
		requestDuration.Record(ctx, time.Since(requestStartTime).Seconds())
	}()

	// Method Check
	if r.Method != http.MethodPost {
		http.Error(w, "Method Not Allowed", http.StatusMethodNotAllowed)
		slog.Info("request discarded", "reason", "method_not_allowed", "method", r.Method, "remote_addr", r.RemoteAddr)
		requestsCounter.Add(ctx, 1, metric.WithAttributes(attribute.String("status", "method_not_allowed")))
		return
	}

	// Read Body & Size Check
	r.Body = http.MaxBytesReader(w, r.Body, maxRequestBodySize)
	body, err := io.ReadAll(r.Body)
	if err != nil {
		var maxBytesErr *http.MaxBytesError
		if errors.As(err, &maxBytesErr) {
			http.Error(w, fmt.Sprintf("Request body exceeds limit (%d bytes)", maxRequestBodySize), http.StatusRequestEntityTooLarge)
			slog.Info("request discarded", "reason", "body_too_large", "limit", maxRequestBodySize, "remote_addr", r.RemoteAddr)
			requestsCounter.Add(ctx, 1, metric.WithAttributes(attribute.String("status", "body_too_large")))
		} else {
			http.Error(w, "Error reading request", http.StatusInternalServerError)
			slog.Error("request discarded", "reason", "error_reading_body", "error", err)
			requestsCounter.Add(ctx, 1, metric.WithAttributes(attribute.String("status", "failed_to_read")))
		}
		return
	}

	// JSON Validation - Attempt to unmarshal directly to map (requires object)
	var fullData map[string]interface{}
	if err := json.Unmarshal(body, &fullData); err != nil {
		http.Error(w, "Invalid JSON", http.StatusBadRequest)
		bodyDetail := ""
		if slog.Default().Enabled(context.Background(), slog.LevelDebug) {
			bodyDetail = fmt.Sprintf(", Body: %s", string(body))
		} else {
			bodyDetail = fmt.Sprintf(", Body snippet: %s", limitString(string(body), 100))
		}
		slog.Warn("request discarded", "reason", "invalid_json", "error", err.Error(), "body_detail", bodyDetail)
		bytesReceived.Add(ctx, int64(len(body)), metric.WithAttributes(attribute.String("status", "invalid_json")))
		requestsCounter.Add(ctx, 1, metric.WithAttributes(attribute.String("status", "invalid_json")))
		return
	}

	bytesReceived.Add(ctx, int64(len(body)), metric.WithAttributes(attribute.String("status", "success")))

	// Add Cloudflare Headers to all requests, excluding IP addresses for GDPR compliance
	cfHeaders := make(map[string]string)
	cfHeaderPrefixes := []string{"CF-IPCountry", "CF-Ray", "CF-IPCity", "CF-IPContinent", "CF-IPRegion", "CF-IPTimeZone", "CF-IPCOLO"}
	// Explicitly excluding IP-related headers: CF-Connecting-IP, CF-IPLatitude, CF-IPLongitude, CF-Visitor
	for _, name := range cfHeaderPrefixes {
		if value := r.Header.Get(name); value != "" {
			key := strings.TrimPrefix(name, "CF-")