10xgraph-api 0.7.0__tar.gz → 0.8.0__tar.gz

{10xgraph_api-0.7.0 → 10xgraph_api-0.8.0}/10xgraph_api.egg-info/PKG-INFO

@@ -1,10 +1,10 @@
 Metadata-Version: 2.4
 Name: 10xgraph-api
-Version: 0.7.0
+Version: 0.8.0
 Summary: Production server for 10xGraph agents (formerly 10xscale-agentflow-cli). Serves a compiled graph over REST, SSE, WebSocket, realtime audio and AG-UI with JWT or custom auth, scoped authorization on every endpoint, owner-only threads and rate limiting, and generates Docker Compose and Kubernetes files. Includes the 10xgraph CLI. MIT licensed, self-hosted.
 Author-email: Shudipto Trafder <shudiptotrafder@gmail.com>
 Maintainer-email: Shudipto Trafder <shudiptotrafder@gmail.com>, 10xScale <contact@10xscale.ai>
-License: MIT
+License-Expression: MIT
 Project-URL: Homepage, https://10xgraph.com
 Project-URL: Repository, https://github.com/10xGraph/10xgraph-api
 Project-URL: Issues, https://github.com/10xGraph/10xgraph-api/issues
@@ -13,7 +13,6 @@ Project-URL: Changelog, https://github.com/10xGraph/10xgraph-api/blob/main/CHANG
 Keywords: 10xgraph,10xscale,agentflow,agents,ai-agents,multi-agent,agent-server,agent-deployment,llm,fastapi,api-server,rest-api,sse,websocket,realtime-audio,ag-ui,jwt,authentication,authorization,rbac,multi-tenant,rate-limiting,self-hosted,production,docker,kubernetes,cli
 Classifier: Development Status :: 4 - Beta
 Classifier: Intended Audience :: Developers
-Classifier: License :: OSI Approved :: MIT License
 Classifier: Operating System :: OS Independent
 Classifier: Programming Language :: Python :: 3
 Classifier: Programming Language :: Python :: 3.12
@@ -25,13 +24,10 @@ Description-Content-Type: text/markdown
 License-File: LICENSE
 Requires-Dist: 10xgraph<2.0,>=0.10.0
 Requires-Dist: fastapi<1.0,>=0.116
-Requires-Dist: gunicorn<24,>=23.0
-Requires-Dist: orjson<4,>=3.11
-Requires-Dist: platformdirs<5,>=4.0
 Requires-Dist: python-multipart<0.1,>=0.0.19
 Requires-Dist: pydantic<3,>=2.13
 Requires-Dist: pydantic-settings<3,>=2.3
-Requires-Dist: uvicorn<1.0,>=0.30
+Requires-Dist: uvicorn<1.0,>=0.36
 Requires-Dist: typer<1.0,>=0.17
 Requires-Dist: python-dotenv<2,>=1.0
 Requires-Dist: questionary<3,>=2.0
@@ -93,7 +89,7 @@ Not built in: automatic per-tool permissions (user A may call `refund`, user B m
 |---|---|---|
 | [`10xgraph`](https://github.com/10xGraph/10xGraph) | Core engine: graph, state, replay-safe tools, checkpointing, memory | `pip install 10xgraph` (pulled in by this package) |
 | `10xgraph-api` (this repository) | Production server and the `10xgraph` command | `pip install 10xgraph-api` |
-| [`10xgraph-client`](https://github.com/10xGraph/10xgraph-client) | Typed TypeScript client for every endpoint | `npm install 10xgraph-client` (until it is published, `@10xscale/agentflow-client`) |
+| [`10xgraph-client`](https://github.com/10xGraph/10xgraph-client) | Typed TypeScript client for every endpoint | `npm install 10xgraph-client` |
 
 Docs: [10xgraph.com](https://10xgraph.com).
 
@@ -577,7 +573,7 @@ sdist + wheel, checks the distribution metadata, and creates a GitHub Release wi
 notes and the artifacts attached. PyPI publishing is manual (`make publish`).
 
 ```bash
-git tag v0.7.0 && git push origin v0.7.0
+git tag v0.8.0 && git push origin v0.8.0
 ```
 
 ---
@@ -601,9 +597,33 @@ git tag v0.7.0 && git push origin v0.7.0
 
 ## Contributing
 
-Contributions are welcome. Fork the repo, create a feature branch, run tests and linting, and open a
-Pull Request. See the [repository](https://github.com/10xGraph/10xgraph-api) for issue reporting and
-guidelines.
+**Your avatar belongs on this wall.**
+
+<a href="https://github.com/10xGraph/10xgraph-api/graphs/contributors">
+  <img src="https://contrib.rocks/image?repo=10xGraph/10xgraph-api" alt="People who have contributed to 10xgraph-api" />
+</a>
+
+Every person above shipped code that serves real agents in production. Merge one pull request and you join them, here and on the contributor page at [10xgraph.com/maintainers](https://10xgraph.com/maintainers).
+
+Your first pull request can be small. These are real, self-contained, and useful today:
+
+- **Type one module.** `pyproject.toml` lists the modules `mypy` still skips, each with its error count. Start with a one-error module, fix it, delete its line.
+- **Add a test for an edge case you hit.** A request that should be rejected, a config that should fail at startup, a header that should be set.
+- **Write the deployment recipe you needed.** Behind a reverse proxy, on a specific cloud, with your auth provider. Recipes go on [10xgraph.com](https://10xgraph.com), where every page has an "Edit this page" link.
+- **Turn a bug into a failing test.** Open it as a draft pull request; the fix can come later.
+
+From clone to a passing check:
+
+```bash
+git clone https://github.com/10xGraph/10xgraph-api.git
+cd 10xgraph-api
+uv sync --dev
+uv run pytest
+uv run pre-commit run --all-files   # ruff, bandit and hygiene checks, as in CI
+uv run mypy
+```
+
+Draft pull requests are welcome, so open early and ask questions in the PR. For bigger changes, start a thread in the core repository's [Discussions](https://github.com/10xGraph/10xGraph/discussions) first so the work does not overlap.
 
 ---
 

{10xgraph_api-0.7.0 → 10xgraph_api-0.8.0}/10xgraph_api.egg-info/SOURCES.txt

@@ -126,14 +126,17 @@ tenxgraph_api/src/app/loader.py
 tenxgraph_api/src/app/main.py
 tenxgraph_api/src/app/worker.py
 tenxgraph_api/src/app/core/__init__.py
+tenxgraph_api/src/app/core/concurrency.py
 tenxgraph_api/src/app/core/auth/__init__.py
 tenxgraph_api/src/app/core/auth/auth_backend.py
 tenxgraph_api/src/app/core/auth/authorization.py
 tenxgraph_api/src/app/core/auth/base_auth.py
+tenxgraph_api/src/app/core/auth/identity_cache.py
 tenxgraph_api/src/app/core/auth/jwt_auth.py
 tenxgraph_api/src/app/core/auth/ownership_resolver.py
 tenxgraph_api/src/app/core/auth/permissions.py
 tenxgraph_api/src/app/core/auth/request_config.py
+tenxgraph_api/src/app/core/auth/revocation.py
 tenxgraph_api/src/app/core/auth/route_guard.py
 tenxgraph_api/src/app/core/config/__init__.py
 tenxgraph_api/src/app/core/config/graph_config.py
@@ -159,6 +162,7 @@ tenxgraph_api/src/app/core/middleware/rate_limit/memory.py
 tenxgraph_api/src/app/core/middleware/rate_limit/middleware.py
 tenxgraph_api/src/app/core/middleware/rate_limit/redis.py
 tenxgraph_api/src/app/core/utils/__init__.py
+tenxgraph_api/src/app/core/utils/container.py
 tenxgraph_api/src/app/core/utils/log_sanitizer.py
 tenxgraph_api/src/app/routers/__init__.py
 tenxgraph_api/src/app/routers/setup_router.py
@@ -180,6 +184,7 @@ tenxgraph_api/src/app/routers/evals/services/eval_report_service.py
 tenxgraph_api/src/app/routers/graph/__init__.py
 tenxgraph_api/src/app/routers/graph/realtime_guard.py
 tenxgraph_api/src/app/routers/graph/router.py
+tenxgraph_api/src/app/routers/graph/run_limits.py
 tenxgraph_api/src/app/routers/graph/schemas/__init__.py
 tenxgraph_api/src/app/routers/graph/schemas/graph_schemas.py
 tenxgraph_api/src/app/routers/graph/services/__init__.py
@@ -189,6 +194,7 @@ tenxgraph_api/src/app/routers/media/__init__.py
 tenxgraph_api/src/app/routers/media/router.py
 tenxgraph_api/src/app/routers/media/schemas.py
 tenxgraph_api/src/app/routers/ping/__init__.py
+tenxgraph_api/src/app/routers/ping/readiness.py
 tenxgraph_api/src/app/routers/ping/router.py
 tenxgraph_api/src/app/routers/store/__init__.py
 tenxgraph_api/src/app/routers/store/router.py

{10xgraph_api-0.7.0 → 10xgraph_api-0.8.0}/10xgraph_api.egg-info/requires.txt

@@ -1,12 +1,9 @@
 10xgraph<2.0,>=0.10.0
 fastapi<1.0,>=0.116
-gunicorn<24,>=23.0
-orjson<4,>=3.11
-platformdirs<5,>=4.0
 python-multipart<0.1,>=0.0.19
 pydantic<3,>=2.13
 pydantic-settings<3,>=2.3
-uvicorn<1.0,>=0.30
+uvicorn<1.0,>=0.36
 typer<1.0,>=0.17
 python-dotenv<2,>=1.0
 questionary<3,>=2.0

{10xgraph_api-0.7.0 → 10xgraph_api-0.8.0}/CHANGELOG.md

@@ -20,6 +20,110 @@ project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ---
 
+## [Unreleased]
+
+## [0.8.0] - 2026-10-16
+
+Security and scalability pass over the API, following an external review. Every item below
+has tests; see the review notes for the full list. This release has breaking changes: read
+the **Breaking** list before upgrading.
+
+### Breaking
+
+- **Ownership checks fail closed.** With auth on, an ownership or `rbac` authorization
+  backend now refuses to start on a checkpointer that cannot resolve thread owners
+  (`aget_thread_owner` not implemented), and denies thread requests if none is available at
+  runtime. Implement `aget_thread_owner`, or set `"authorization": "allow_all"` or a custom
+  backend.
+- **An unowned thread only allows actions that create it** (`graph:invoke`, `graph:stream`,
+  `checkpointer:write`). Reading, deleting, stopping or fixing a thread that does not exist
+  (or has no owner) now answers 403 instead of an empty result.
+- **Authorization defaults to `ownership` whenever auth is configured**, in every mode. It
+  used to be `allow_all` unless `MODE=production`. Set `"authorization": "allow_all"` to keep
+  the old development behaviour.
+- **Realtime init frames can no longer replace the system prompt by default.** Add
+  `"system_prompt"` to `websocket.realtime_client_overrides` to allow it.
+- **`trusted_proxy_headers: true` without `trusted_proxies` trusts only loopback and private
+  networks**, not every peer. List your proxy networks (or `0.0.0.0/0` and `::/0`).
+- **Production defaults:** `MEDIA_REQUIRE_OWNER` is on, `graph_introspection` is `scoped`
+  (graph structure, tools and state schema need the `graph:read` scope), and `IS_DEBUG` is
+  forced off.
+- **`/v1/graph/invoke` no longer returns `meta.thread_name`**; the name is generated in the
+  background and appears on the thread (`GET /v1/threads`).
+- **Production 4xx responses keep their message**; only 5xx are made generic. A 422 built
+  from an unexpected `ValueError` is still made generic.
+- **`gunicorn` is no longer a dependency.** The generated Dockerfile installs it, so
+  `10xgraph build` images are unaffected. If you run `gunicorn` yourself outside that image,
+  install it alongside the API: `pip install gunicorn uvicorn-worker`.
+- **Gunicorn's worker class is now `uvicorn_worker.UvicornWorker`** (from the `uvicorn-worker`
+  package). `uvicorn.workers.UvicornWorker` is deprecated in uvicorn. Regenerate the
+  Dockerfile and compose file with `10xgraph build --force`, or change `-k` in your own
+  command.
+- **`POST /v1/graph/fix` returns `state` as a JSON object.** It used to be a JSON-encoded
+  string. Drop any `JSON.parse` / `json.loads` on that field; the TS client already types it
+  as an object.
+- **Generated Dockerfiles install only the dependencies you list.** The `pyproject.toml` path
+  no longer adds `10xgraph-api` on top of your list. `10xgraph build` warns when the requirements file or `pyproject.toml` does not list
+  `10xgraph-api`.
+
+### Added
+
+- `runs` key in `10xgraph.json`: `thread_ids` (`client` | `server`), `config_keys` and
+  `state_keys` allow-lists, `max_concurrent_per_user` (default 10) and `timeout`.
+- `token_revocation` key (`redis`, `memory` or `module:attr`) and the
+  `TokenRevocationBackend` hook: revoked tokens are refused before they expire, on HTTP and
+  on every WebSocket run.
+- `graph_introspection` key (`open` | `scoped`).
+- `websocket.realtime_client_overrides` allow-list.
+- `STRICT_PRODUCTION_CHECKS=true`: production refuses to start on wildcard `ALLOWED_HOST` or
+  `ORIGINS`, or enabled API docs.
+- `GET /health/ready` readiness probe (checkpointer, Redis, store); the k8s manifest uses it.
+- Run and WebSocket connection caps are shared across workers through Redis when it is
+  configured.
+
+### Changed
+
+- `10xgraph play` and `10xgraph dev` open the hosted playground at its new address,
+  `https://play.10xgraph.com`. The previous address, `playground-463bd.web.app`, still
+  serves the same app for older releases.
+- Thread delete leaves a short tombstone so a deleted id cannot be handed to another user
+  while other workers still cache the old owner.
+- Every thread the API saves records its owner, which fixes owner lookups on the in-memory
+  and SQLite checkpointers.
+- WebSocket JSON frames over `MAX_REQUEST_SIZE` are refused (close 1009); `10xgraph api`
+  passes the same limit to uvicorn as `ws_max_size`.
+- Request ID, security headers and rate limiting are pure ASGI middleware; CORS is now the
+  outermost layer, so 429, 413 and Host rejections are readable by browsers.
+- Route-set security headers (such as the download sandbox CSP) are no longer overwritten.
+- The JWT is verified once per request when rate limiting by user.
+- Local-store downloads stream from disk; uploads are read into memory once.
+- JSON responses are serialized by pydantic-core (`model_dump_json`) instead of orjson.
+  FastAPI deprecated `ORJSONResponse` in 0.131; the FastAPI floor stays at 0.116.
+- Dependencies: dropped `orjson` and the unused `platformdirs`; the `uvicorn` floor is now
+  0.36 (required by `uvicorn-worker`).
+- Generated Dockerfiles build in two stages: dependencies go into a virtualenv in a builder
+  stage, and only that virtualenv and your code reach the runtime image. The runtime image
+  has no compiler or curl, copies code with `COPY --chown` instead of a second `chown -R`
+  layer, and its healthcheck uses the Python standard library.
+- A requirements file in a subfolder (for example `requirements/base.txt`) keeps its path in
+  the generated Dockerfile.
+- Packaging: `license` is an SPDX expression (`MIT`), so builds no longer warn about the
+  deprecated table form; the build needs setuptools 77 or later.
+
+### Security
+
+- **Log injection.** Values a client controls (user and thread ids, file ids, rate-limit
+  keys, request paths, run config and messages) are written to logs through `log_safe()`,
+  which escapes CR and LF, so a request cannot forge extra log lines. This covers the graph,
+  checkpointer and media services, the rate-limit middleware, the WebSocket guard and the
+  run limits.
+- **ReDoS in the log sanitizer.** The JWT detection pattern backtracked polynomially on
+  crafted input (about 585 ms for a 16,000-character string). It now matches in linear time.
+- **Security examples.** `examples/security/` no longer prints any part of an API key or of
+  the JWT secret. The API key example hashes keys with HMAC-SHA-256 and a server-side
+  `API_KEY_PEPPER`; hashes made with the previous example's plain SHA-256 must be
+  regenerated.
+
 ## [0.7.0] - 2026-10-10
 
 **First release as `10xgraph-api`.** 10xScale Agentflow is now 10xGraph. This package
@@ -351,6 +455,8 @@ can be pinned.
 Initial entry in this changelog. Releases before `0.5.0` were not tracked here; see the
 GitHub release history for their notes.
 
+[Unreleased]: https://github.com/10xGraph/10xgraph-api/compare/v0.8.0...HEAD
+[0.8.0]: https://github.com/10xGraph/10xgraph-api/compare/v0.7.0...v0.8.0
 [0.7.0]: https://github.com/10xGraph/10xgraph-api/compare/v0.6.0...v0.7.0
 [0.6.0]: https://github.com/10xHub/agentflow-cli/compare/v0.5.1...v0.6.0
 [0.5.1]: https://github.com/10xHub/agentflow-cli/compare/v0.5.0...v0.5.1

{10xgraph_api-0.7.0 → 10xgraph_api-0.8.0}/PKG-INFO

@@ -1,10 +1,10 @@
 Metadata-Version: 2.4
 Name: 10xgraph-api
-Version: 0.7.0
+Version: 0.8.0
 Summary: Production server for 10xGraph agents (formerly 10xscale-agentflow-cli). Serves a compiled graph over REST, SSE, WebSocket, realtime audio and AG-UI with JWT or custom auth, scoped authorization on every endpoint, owner-only threads and rate limiting, and generates Docker Compose and Kubernetes files. Includes the 10xgraph CLI. MIT licensed, self-hosted.
 Author-email: Shudipto Trafder <shudiptotrafder@gmail.com>
 Maintainer-email: Shudipto Trafder <shudiptotrafder@gmail.com>, 10xScale <contact@10xscale.ai>
-License: MIT
+License-Expression: MIT
 Project-URL: Homepage, https://10xgraph.com
 Project-URL: Repository, https://github.com/10xGraph/10xgraph-api
 Project-URL: Issues, https://github.com/10xGraph/10xgraph-api/issues
@@ -13,7 +13,6 @@ Project-URL: Changelog, https://github.com/10xGraph/10xgraph-api/blob/main/CHANG
 Keywords: 10xgraph,10xscale,agentflow,agents,ai-agents,multi-agent,agent-server,agent-deployment,llm,fastapi,api-server,rest-api,sse,websocket,realtime-audio,ag-ui,jwt,authentication,authorization,rbac,multi-tenant,rate-limiting,self-hosted,production,docker,kubernetes,cli
 Classifier: Development Status :: 4 - Beta
 Classifier: Intended Audience :: Developers
-Classifier: License :: OSI Approved :: MIT License
 Classifier: Operating System :: OS Independent
 Classifier: Programming Language :: Python :: 3
 Classifier: Programming Language :: Python :: 3.12
@@ -25,13 +24,10 @@ Description-Content-Type: text/markdown
 License-File: LICENSE
 Requires-Dist: 10xgraph<2.0,>=0.10.0
 Requires-Dist: fastapi<1.0,>=0.116
-Requires-Dist: gunicorn<24,>=23.0
-Requires-Dist: orjson<4,>=3.11
-Requires-Dist: platformdirs<5,>=4.0
 Requires-Dist: python-multipart<0.1,>=0.0.19
 Requires-Dist: pydantic<3,>=2.13
 Requires-Dist: pydantic-settings<3,>=2.3
-Requires-Dist: uvicorn<1.0,>=0.30
+Requires-Dist: uvicorn<1.0,>=0.36
 Requires-Dist: typer<1.0,>=0.17
 Requires-Dist: python-dotenv<2,>=1.0
 Requires-Dist: questionary<3,>=2.0
@@ -93,7 +89,7 @@ Not built in: automatic per-tool permissions (user A may call `refund`, user B m
 |---|---|---|
 | [`10xgraph`](https://github.com/10xGraph/10xGraph) | Core engine: graph, state, replay-safe tools, checkpointing, memory | `pip install 10xgraph` (pulled in by this package) |
 | `10xgraph-api` (this repository) | Production server and the `10xgraph` command | `pip install 10xgraph-api` |
-| [`10xgraph-client`](https://github.com/10xGraph/10xgraph-client) | Typed TypeScript client for every endpoint | `npm install 10xgraph-client` (until it is published, `@10xscale/agentflow-client`) |
+| [`10xgraph-client`](https://github.com/10xGraph/10xgraph-client) | Typed TypeScript client for every endpoint | `npm install 10xgraph-client` |
 
 Docs: [10xgraph.com](https://10xgraph.com).
 
@@ -577,7 +573,7 @@ sdist + wheel, checks the distribution metadata, and creates a GitHub Release wi
 notes and the artifacts attached. PyPI publishing is manual (`make publish`).
 
 ```bash
-git tag v0.7.0 && git push origin v0.7.0
+git tag v0.8.0 && git push origin v0.8.0
 ```
 
 ---
@@ -601,9 +597,33 @@ git tag v0.7.0 && git push origin v0.7.0
 
 ## Contributing
 
-Contributions are welcome. Fork the repo, create a feature branch, run tests and linting, and open a
-Pull Request. See the [repository](https://github.com/10xGraph/10xgraph-api) for issue reporting and
-guidelines.
+**Your avatar belongs on this wall.**
+
+<a href="https://github.com/10xGraph/10xgraph-api/graphs/contributors">
+  <img src="https://contrib.rocks/image?repo=10xGraph/10xgraph-api" alt="People who have contributed to 10xgraph-api" />
+</a>
+
+Every person above shipped code that serves real agents in production. Merge one pull request and you join them, here and on the contributor page at [10xgraph.com/maintainers](https://10xgraph.com/maintainers).
+
+Your first pull request can be small. These are real, self-contained, and useful today:
+
+- **Type one module.** `pyproject.toml` lists the modules `mypy` still skips, each with its error count. Start with a one-error module, fix it, delete its line.
+- **Add a test for an edge case you hit.** A request that should be rejected, a config that should fail at startup, a header that should be set.
+- **Write the deployment recipe you needed.** Behind a reverse proxy, on a specific cloud, with your auth provider. Recipes go on [10xgraph.com](https://10xgraph.com), where every page has an "Edit this page" link.
+- **Turn a bug into a failing test.** Open it as a draft pull request; the fix can come later.
+
+From clone to a passing check:
+
+```bash
+git clone https://github.com/10xGraph/10xgraph-api.git
+cd 10xgraph-api
+uv sync --dev
+uv run pytest
+uv run pre-commit run --all-files   # ruff, bandit and hygiene checks, as in CI
+uv run mypy
+```
+
+Draft pull requests are welcome, so open early and ask questions in the PR. For bigger changes, start a thread in the core repository's [Discussions](https://github.com/10xGraph/10xGraph/discussions) first so the work does not overlap.
 
 ---
 

{10xgraph_api-0.7.0 → 10xgraph_api-0.8.0}/README.md

@@ -31,7 +31,7 @@ Not built in: automatic per-tool permissions (user A may call `refund`, user B m
 |---|---|---|
 | [`10xgraph`](https://github.com/10xGraph/10xGraph) | Core engine: graph, state, replay-safe tools, checkpointing, memory | `pip install 10xgraph` (pulled in by this package) |
 | `10xgraph-api` (this repository) | Production server and the `10xgraph` command | `pip install 10xgraph-api` |
-| [`10xgraph-client`](https://github.com/10xGraph/10xgraph-client) | Typed TypeScript client for every endpoint | `npm install 10xgraph-client` (until it is published, `@10xscale/agentflow-client`) |
+| [`10xgraph-client`](https://github.com/10xGraph/10xgraph-client) | Typed TypeScript client for every endpoint | `npm install 10xgraph-client` |
 
 Docs: [10xgraph.com](https://10xgraph.com).
 
@@ -515,7 +515,7 @@ sdist + wheel, checks the distribution metadata, and creates a GitHub Release wi
 notes and the artifacts attached. PyPI publishing is manual (`make publish`).
 
 ```bash
-git tag v0.7.0 && git push origin v0.7.0
+git tag v0.8.0 && git push origin v0.8.0
 ```
 
 ---
@@ -539,9 +539,33 @@ git tag v0.7.0 && git push origin v0.7.0
 
 ## Contributing
 
-Contributions are welcome. Fork the repo, create a feature branch, run tests and linting, and open a
-Pull Request. See the [repository](https://github.com/10xGraph/10xgraph-api) for issue reporting and
-guidelines.
+**Your avatar belongs on this wall.**
+
+<a href="https://github.com/10xGraph/10xgraph-api/graphs/contributors">
+  <img src="https://contrib.rocks/image?repo=10xGraph/10xgraph-api" alt="People who have contributed to 10xgraph-api" />
+</a>
+
+Every person above shipped code that serves real agents in production. Merge one pull request and you join them, here and on the contributor page at [10xgraph.com/maintainers](https://10xgraph.com/maintainers).
+
+Your first pull request can be small. These are real, self-contained, and useful today:
+
+- **Type one module.** `pyproject.toml` lists the modules `mypy` still skips, each with its error count. Start with a one-error module, fix it, delete its line.
+- **Add a test for an edge case you hit.** A request that should be rejected, a config that should fail at startup, a header that should be set.
+- **Write the deployment recipe you needed.** Behind a reverse proxy, on a specific cloud, with your auth provider. Recipes go on [10xgraph.com](https://10xgraph.com), where every page has an "Edit this page" link.
+- **Turn a bug into a failing test.** Open it as a draft pull request; the fix can come later.
+
+From clone to a passing check:
+
+```bash
+git clone https://github.com/10xGraph/10xgraph-api.git
+cd 10xgraph-api
+uv sync --dev
+uv run pytest
+uv run pre-commit run --all-files   # ruff, bandit and hygiene checks, as in CI
+uv run mypy
+```
+
+Draft pull requests are welcome, so open early and ask questions in the PR. For bigger changes, start a thread in the core repository's [Discussions](https://github.com/10xGraph/10xGraph/discussions) first so the work does not overlap.
 
 ---
 

10xgraph_api-0.8.0/RELEASE_NOTES.md

@@ -0,0 +1,63 @@
+# 10xgraph-api 0.8.0
+
+A security and scalability pass over the API, following an external review. Authorization now
+fails closed, defaults are stricter, and run and connection caps are shared across workers when
+Redis is configured.
+
+This release has **breaking changes**. Read "Before you upgrade" first.
+
+```bash
+pip install -U "10xgraph-api==0.8.0"
+```
+
+## Before you upgrade
+
+- **Authorization defaults to `ownership` whenever auth is on**, in every mode.
+  - Before, it was `allow_all` unless `MODE=production`.
+  - To keep the old development behaviour, set `"authorization": "allow_all"`.
+- **Ownership checks fail closed.**
+  - With auth on, the server refuses to start if your checkpointer cannot resolve thread owners (`aget_thread_owner` not implemented).
+  - Implement it, or choose `allow_all` or a custom backend.
+- **Unowned threads only allow creating actions.**
+  - Reading, deleting, stopping or fixing a thread that doesn't exist now answers 403.
+  - Before, these returned an empty result.
+- **`gunicorn` is no longer a dependency.**
+  - Images built with `10xgraph build` install it themselves.
+  - If you run gunicorn yourself, install it alongside the API: `pip install gunicorn uvicorn-worker`.
+  - The worker class is now `uvicorn_worker.UvicornWorker`. Regenerate with `10xgraph build --force`, or update `-k`.
+- **`POST /v1/graph/fix` returns `state` as a JSON object**, not a JSON-encoded string. Drop any `JSON.parse`/`json.loads` on that field.
+- **`/v1/graph/invoke` no longer returns `meta.thread_name`.** The name is generated in the background and appears on the thread (`GET /v1/threads`).
+- **Realtime init frames can no longer replace the system prompt** unless you add `"system_prompt"` to `websocket.realtime_client_overrides`.
+- **`trusted_proxy_headers: true` now trusts only loopback and private networks.** List your proxies in `trusted_proxies`.
+- **Production defaults are stricter:**
+  - `MEDIA_REQUIRE_OWNER` is on.
+  - `graph_introspection` is `scoped`, so the graph structure, tools and state schema need the `graph:read` scope.
+  - `IS_DEBUG` is forced off.
+- **Production 4xx responses keep their message**; only 5xx responses are made generic.
+- **Generated Dockerfiles install only the dependencies you list.** `10xgraph build` warns if your requirements file or `pyproject.toml` does not list `10xgraph-api`.
+
+## Security
+
+- **Log injection:** values a client controls (ids, paths, rate-limit keys, run config, messages) are logged through `log_safe()`, so a request can't forge log lines.
+- **ReDoS fix:** the JWT detection pattern in the log sanitizer now runs in linear time on crafted input.
+- **Token revocation:** the new `token_revocation` key refuses revoked tokens before they expire, on HTTP and on every WebSocket run.
+- **Size limit for WebSocket frames:** JSON frames over `MAX_REQUEST_SIZE` are refused.
+- **Strict production checks:** `STRICT_PRODUCTION_CHECKS=true` refuses to start on wildcard `ALLOWED_HOST`/`ORIGINS` or enabled API docs.
+- **Example fixes:** `examples/security/` no longer prints key or secret fragments, and API keys are hashed with HMAC-SHA-256 and `API_KEY_PEPPER`.
+
+## New
+
+- **`runs` key:**
+  - `thread_ids` (`client` | `server`).
+  - `config_keys` and `state_keys` allow-lists.
+  - `max_concurrent_per_user`, default 10.
+  - `timeout`.
+- **Readiness probe:** `GET /health/ready` checks the checkpointer, Redis and the store. The k8s manifest uses it.
+- **Shared caps:** run and WebSocket connection caps are shared across workers through Redis when it is configured.
+- **Lighter images:** Dockerfiles are built in two stages, so the runtime image ships only your code and a virtualenv: no compiler, no curl.
+- **Dependency changes:**
+  - JSON responses are serialized by pydantic-core.
+  - `orjson` and `platformdirs` are dropped.
+  - The `uvicorn` floor is 0.36.
+
+See `CHANGELOG.md` for the full list.

{10xgraph_api-0.7.0 → 10xgraph_api-0.8.0}/SECURITY.md

@@ -71,5 +71,37 @@ CORS combined with credentials in production. For anything else, in production s
 - `MODE=production` and `IS_DEBUG=false`
 - `ORIGINS` to an explicit comma-separated list, never `*`
 - `JWT_SECRET_KEY` to a random value of 32 characters or more
-- An `authorization` backend (production defaults to `ownership`; do not weaken it to
-  `allow_all`)
+- An `authorization` backend (it defaults to `ownership` whenever auth is on; do not weaken
+  it to `allow_all`)
+- `STRICT_PRODUCTION_CHECKS=true` to refuse to start on wildcard `ALLOWED_HOST` or `ORIGINS`
+  or enabled API docs
+- `runs.thread_ids: "server"` if thread ids could be guessed, so nobody can claim an id
+  before the user it was meant for
+- `runs.config_keys` / `runs.state_keys` if a tool or node trusts a value such as `role` or
+  `plan` from request config or state; without them a client can send any non-reserved key
+- `runs.timeout` and `runs.max_concurrent_per_user` to bound what one account can hold open
+- `token_revocation` if you need logout or stolen-token revocation before a JWT expires
+- `rate_limit.trusted_proxies` to your proxy's networks when `trusted_proxy_headers` is on
+- Keep `graph_introspection: "scoped"` (the production default) unless every user may see
+  the graph's structure and tool schemas
+
+### Running more than one worker
+
+Some protections keep state per process. With more than one worker or instance:
+
+- **Thread ownership cache.** Each worker caches thread owners for 30 seconds. Configure
+  Redis (the `redis` key in `10xgraph.json` or `REDIS_URL`) so the cache, and the
+  tombstone a thread delete leaves behind, are shared. The tombstone stops a deleted thread
+  id from being given to a new owner while another worker may still cache the old one.
+  Without Redis the tombstone only exists on the worker that handled the delete, so for up
+  to 30 seconds another worker can still let the old owner into a thread recreated under
+  the same id.
+- **Run and WebSocket caps** (`runs.max_concurrent_per_user`, `websocket.max_connections`,
+  `websocket.max_connections_per_user`). With Redis configured they are shared through
+  expiring leases, so the cap holds across workers and a crashed worker's slots free up on
+  their own within a minute. Without Redis each process counts its own, so the real cap is
+  the limit times the number of workers.
+- **Rate limiting.** Use `"backend": "redis"` in `rate_limit`; the memory backend counts per
+  process.
+- **Media extraction cache.** Extracted document text is cached per process. This only costs
+  repeated extraction work, not correctness.

{10xgraph_api-0.7.0 → 10xgraph_api-0.8.0}/pyproject.toml

@@ -1,13 +1,13 @@
 [build-system]
-requires = ["setuptools>=61.0", "wheel"]
+requires = ["setuptools>=77.0", "wheel"]
 build-backend = "setuptools.build_meta"
 
 [project]
 name = "10xgraph-api"
-version = "0.7.0"
+version = "0.8.0"
 description = "Production server for 10xGraph agents (formerly 10xscale-agentflow-cli). Serves a compiled graph over REST, SSE, WebSocket, realtime audio and AG-UI with JWT or custom auth, scoped authorization on every endpoint, owner-only threads and rate limiting, and generates Docker Compose and Kubernetes files. Includes the 10xgraph CLI. MIT licensed, self-hosted."
 readme = "README.md"
-license = {text = "MIT"}
+license = "MIT"
 requires-python = ">=3.12"
 authors = [
     {name = "Shudipto Trafder", email = "shudiptotrafder@gmail.com"},
@@ -48,7 +48,6 @@ keywords = [
 classifiers = [
     "Development Status :: 4 - Beta",
     "Intended Audience :: Developers",
-    "License :: OSI Approved :: MIT License",
     "Operating System :: OS Independent",
     "Programming Language :: Python :: 3",
     "Programming Language :: Python :: 3.12",
@@ -64,13 +63,10 @@ dependencies = [
     # Pre-1.0 and major-version-risky deps are capped; floors are the versions
     # the suite is verified against.
     "fastapi>=0.116,<1.0",
-    "gunicorn>=23.0,<24",
-    "orjson>=3.11,<4",
-    "platformdirs>=4.0,<5",
     "python-multipart>=0.0.19,<0.1",
     "pydantic>=2.13,<3",
     "pydantic-settings>=2.3,<3",
-    "uvicorn>=0.30,<1.0",
+    "uvicorn>=0.36,<1.0",
     "typer>=0.17,<1.0",
     "python-dotenv>=1.0,<2",
     "questionary>=2.0,<3",

{10xgraph_api-0.7.0 → 10xgraph_api-0.8.0}/tenxgraph_api/cli/commands/api.py

@@ -27,6 +27,19 @@ from tenxgraph_api.cli.core.validation import validate_cli_options
 from tenxgraph_api.cli.exceptions import ConfigurationError, ServerError
 
 
+# Mirrors Settings.MAX_REQUEST_SIZE; read from the environment the command just loaded.
+DEFAULT_MAX_REQUEST_SIZE = 10 * 1024 * 1024
+
+
+def _max_request_size() -> int:
+    raw = os.environ.get("MAX_REQUEST_SIZE")
+    try:
+        value = int(raw) if raw else DEFAULT_MAX_REQUEST_SIZE
+    except ValueError:
+        return DEFAULT_MAX_REQUEST_SIZE
+    return value if value > 0 else DEFAULT_MAX_REQUEST_SIZE
+
+
 class APICommand(BaseCommand):
     """Command to start the 10xGraph API server."""
 
@@ -155,6 +168,9 @@ class APICommand(BaseCommand):
                 port=validated_options["port"],
                 reload=reload,
                 workers=1,
+                # Refuse WebSocket frames over the HTTP body cap before buffering them
+                # (uvicorn's own default is 16 MiB).
+                ws_max_size=_max_request_size(),
             )
 
             return 0