[Iamsdt]

Summary

Fourth 1.0 release candidate. Everything the API shares between workers now lives in
one BaseCacheStore, configured by one cache_store object in 10xgraph.json. Fixes the
rc3 bug where a leftover REDIS_URL stopped an in-memory server from booting in
production. Requires 10xgraph>=1.0.0rc4.

Breaking

• Removed (no aliases, release candidates): ConcurrencyLimiter, TokenRevocationBackend
  and its variants, BaseRateLimitBackend, MemoryRateLimitBackend, RedisRateLimitBackend.
• New cache_store object: {"type": "memory"|"redis"|"custom", "url", "path", "rate_limit", "token_revocation"}. No cache_store means the in-memory store.
• Top-level redis, rate_limit and token_revocation keys are config errors that say
  where each setting goes.
• REDIS_URL no longer selects the cache store; Settings.REDIS_URL is gone.
  "type": "redis" with no url reads REDIS_URL.
• type: "redis" without the redis package refuses to boot (no silent per-process fallback).
• /health/ready: checks.redis renamed checks.cache. Readiness and the startup check
  only call aping() on the checkpointer, store and cache store.
• Rate-limit Redis keys moved to 10xgraph:ratelimit2, so counters reset once at deploy.
  Lock key layout unchanged, so old and new pods share locks during a rolling deploy.
• 10xgraph init asks only name, template and provider. Production writes jwt auth,
  ownership authorization, uuid ids and a Redis cache store with rate limit and token
  revocation. Flags override parts of it for scripts.
• thread_name_generator: random (default, now saved), first_message, none or
  module:attr. GraphConfig.thread_name_generator_path replaced by thread_name_generator.

Added

• BaseCacheStore, RedisCacheStore (also Valkey, Dragonfly, KeyDB), InMemoryCacheStore,
  exported from tenxgraph_api; optional describe() names the endpoint in logs and errors.
• Contract suite for custom stores: tenxgraph_api.testing.cache_store_contract.
• id_generator key: uuid, hex, short, int, bigint, timestamp, snowflake or module:attr.
• thread_name_generator: "first_message".
• 10xgraph config: token revocation section and a Cache store page.

Changed

• The cache store is fatal at boot only for fail-closed features (token revocation with
  auth, or rate limiting with fail_open: false); otherwise one WARNING and the server starts.
• Locks, caps, idempotency and the ownership cache fail open; revocation fails closed (503);
  rate limiting follows fail_open.
• 10xgraph revoke writes to the selected cache store and refuses on the in-memory store.
• Shutdown closes the cache store once, after the graph and pending lease releases.
• In-memory store uses the monotonic clock for expiries; revoke_user rounds the cutoff up.

Fixed

• A leftover REDIS_URL no longer blocks boot when nothing configured needs Redis.
• A rate-limit denial stays 429 when reading the store clock for Retry-After fails.

Before merge

• Core floor bumped to 10xgraph>=1.0.0rc4 and uv lock refreshed (after core rc4 is on PyPI).

Tests

• Contract suite against InMemoryCacheStore; startup check, readiness, init and revoke tests.
• Not yet run: contract suite against a real Redis (TEST_REDIS_URL).

[codecov]

Codecov Report

❌ Patch coverage is 95.24740% with 73 lines in your changes missing coverage. Please review.

Files with missing lines	Patch %	Lines
tenxgraph_api/src/app/core/leases.py	92.11%	8 Missing and 8 partials ⚠️
...graph_api/src/app/core/cache_store/memory_store.py	95.14%	6 Missing and 6 partials ⚠️
...xgraph_api/src/app/core/cache_store/redis_store.py	92.19%	8 Missing and 3 partials ⚠️
..._api/src/app/core/middleware/rate_limit/limiter.py	88.70%	5 Missing and 2 partials ⚠️
tenxgraph_api/src/app/loader.py	94.40%	4 Missing and 3 partials ⚠️
tenxgraph_api/testing/cache_store_contract.py	96.37%	5 Missing and 2 partials ⚠️
...nxgraph_api/src/app/routers/ping/startup_checks.py	92.15%	3 Missing and 1 partial ⚠️
tenxgraph_api/cli/config_editor/validation.py	93.87%	1 Missing and 2 partials ⚠️
tenxgraph_api/src/app/core/cache_store/loader.py	95.55%	2 Missing ⚠️
tenxgraph_api/src/app/main.py	86.66%	2 Missing ⚠️
... and 2 more

📢 Thoughts on this report? Let us know!