Add health endpoints, production defaults, perf

Introduce built-in health endpoints and a production baseline preset, plus a synthetic in-process performance snapshot and CI wiring. Changes include: add HealthEndpointConfig, HealthResponse and health helper handlers; RustApi methods to enable health_endpoints(), with_health_check(), and production_defaults()/production_defaults_with_config(); automatically register /health, /ready and /live when configured; tests for health endpoints; a new perf_snapshot example and CI step to run and upload its output; README, CHANGELOG and RELEASES updates to document production defaults and benchmark guidance; new .env for local examples; API exports extended (oauth2/session/job/session stores and helpers); new session module and multiple cookbook/docs/recipes additions; and Cargo.lock updates for new dependencies. Overall this adds production probe ergonomics and a reproducible perf snapshot to the project.

Author: Tuntii

.env

@@ -0,0 +1,8 @@
+# Placeholder environment variables for local documentation/examples
+# Replace with real values before running database-backed samples.
+DATABASE_URL=postgres://postgres:postgres@localhost:5432/rustapi_dev
+REDIS_URL=redis://127.0.0.1:6379
+OAUTH_CLIENT_ID=replace-me
+OAUTH_CLIENT_SECRET=replace-me
+OAUTH_REDIRECT_URI=http://127.0.0.1:3000/auth/callback
+OIDC_ISSUER_URL=https://accounts.google.com

.github/workflows/benchmark.yml

@@ -28,8 +28,13 @@ jobs:
       - name: Run Benchmarks
         run: cargo bench --workspace | tee benchmark_results.txt
 
+      - name: Run Performance Snapshot
+        run: cargo run -p rustapi-core --example perf_snapshot --release | tee perf_snapshot.txt
+
       - name: Upload Benchmark Results
         uses: actions/upload-artifact@v4
         with:
           name: benchmark-results
-          path: benchmark_results.txt
+          path: |
+            benchmark_results.txt
+            perf_snapshot.txt

.gitignore

@@ -12,3 +12,9 @@ assets/b9c93c1cd427d8f50e68dbd11ed2b000.jpg
 
 docs/cookbook/book/
 build_rs_cov.profraw
+answer.md
+docs/PRODUCTION_BASELINE.md
+docs/PRODUCTION_CHECKLIST.md
+/.github/instructions
+/.github/prompts
+/.github/skills

CHANGELOG.md

@@ -140,6 +140,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 This release delivers a **12x performance improvement**, bringing RustAPI from ~8K req/s to **~92K req/s**.
 
+> Note: the numbers below are preserved as a **historical release snapshot**. Current benchmark methodology and canonical public performance claims are maintained in `docs/PERFORMANCE_BENCHMARKS.md`.
+
 #### Benchmark Results
 
 | Framework | Requests/sec | Latency (avg) |

Cargo.lock

@@ -57,6 +57,7 @@ RustAPI ships circuit breaker and retry middleware as first-class features, not
 - **Retry** with exponential backoff
 - **Rate Limiting** (IP-based, per-route)
 - **Body Limit** with configurable max size (default 1 MB)
+- **Health Probes** via `.health_endpoints()` for `/health`, `/ready`, and `/live`
 
 ### Environment-Aware Error Masking
 
@@ -121,7 +122,7 @@ Run HTTP/1.1 (TCP) and HTTP/3 (QUIC/UDP) simultaneously on the same server. Enab
 
 | Feature | RustAPI | Actix-web | Axum | FastAPI (Python) |
 |:--------|:-------:|:---------:|:----:|:----------------:|
-| Performance | ~92k req/s | ~105k | ~100k | ~12k |
+| Performance | See benchmark source | Workload-dependent | Workload-dependent | Workload-dependent |
 | Ergonomics | High | Low | Medium | High |
 | AI/LLM native format (TOON) | Yes | No | No | No |
 | Request replay / time-travel debug | Built-in | No | No | 3rd-party |
@@ -132,6 +133,8 @@ Run HTTP/1.1 (TCP) and HTTP/3 (QUIC/UDP) simultaneously on the same server. Enab
 | Background jobs | Built-in | 3rd-party | 3rd-party | 3rd-party |
 | API stability model | Facade + CI contract | Direct | Direct | Stable |
 
+Current benchmark methodology and canonical published performance claims live in [`docs/PERFORMANCE_BENCHMARKS.md`](docs/PERFORMANCE_BENCHMARKS.md). Historical point-in-time numbers in older release notes should not be treated as the current baseline unless they are linked from that document.
+
 ## Quick Start
 
 ```rust
@@ -146,13 +149,52 @@ async fn hello(Path(name): Path<String>) -> Json<Message> {
 }
 
 #[rustapi_rs::main]
-async fn main() {
-    RustApi::auto().run("127.0.0.1:8080").await
+async fn main() -> std::result::Result<(), Box<dyn std::error::Error + Send + Sync>> {
+  RustApi::auto().run("127.0.0.1:8080").await
 }
 ```
 
 `RustApi::auto()` collects all macro-annotated handlers, generates OpenAPI documentation (served at `/docs`), and starts a multi-threaded tokio runtime.
 
+For production deployments, you can enable standard probe endpoints without writing handlers manually:
+
+```rust
+use rustapi_rs::prelude::*;
+
+#[rustapi_rs::main]
+async fn main() -> std::result::Result<(), Box<dyn std::error::Error + Send + Sync>> {
+    let health = HealthCheckBuilder::new(true)
+        .add_check("database", || async { HealthStatus::healthy() })
+        .build();
+
+    RustApi::auto()
+        .with_health_check(health)
+        .run("127.0.0.1:8080")
+        .await
+}
+```
+
+This registers:
+- `/health` — aggregate dependency health
+- `/ready` — readiness probe (`503` when dependencies are unhealthy)
+- `/live` — lightweight liveness probe
+
+Or use a single production baseline preset:
+
+```rust
+use rustapi_rs::prelude::*;
+
+#[rustapi_rs::main]
+async fn main() -> std::result::Result<(), Box<dyn std::error::Error + Send + Sync>> {
+  RustApi::auto()
+    .production_defaults("users-api")
+    .run("127.0.0.1:8080")
+    .await
+}
+```
+
+`production_defaults()` enables request IDs, tracing spans, and standard probe endpoints in one call.
+
 You can shorten the macro prefix by renaming the crate:
 
 ```toml
@@ -202,6 +244,8 @@ Detailed architecture, recipes, and guides are in the [Cookbook](docs/cookbook/s
 - [System Architecture](docs/cookbook/src/architecture/system_overview.md)
 - [Performance Benchmarks](docs/cookbook/src/concepts/performance.md)
 - [gRPC Integration Guide](docs/cookbook/src/crates/rustapi_grpc.md)
+- [Recommended Production Baseline](docs/PRODUCTION_BASELINE.md)
+- [Production Checklist](docs/PRODUCTION_CHECKLIST.md)
 - [Examples](crates/rustapi-rs/examples/)
 
 ---

README.md

@@ -3,6 +3,8 @@
 **Release Date**: February 26, 2026
 **Full Changelog**: https://github.com/Tuntii/RustAPI/compare/v0.1.335...v0.1.397
 
+**Benchmark Source of Truth**: Current benchmark methodology and canonical performance claims live in `docs/PERFORMANCE_BENCHMARKS.md`. Historical release-specific benchmark notes should be treated as point-in-time snapshots unless they are linked from that document.
+
 ---
 
 ## 🎯 Highlights

RELEASES.md

@@ -17,6 +17,7 @@ pub use rustapi_rs::ConfigError
 pub use rustapi_rs::Cookies
 pub use rustapi_rs::CorsLayer
 pub use rustapi_rs::Created
+pub use rustapi_rs::CsrfState
 pub use rustapi_rs::Environment
 pub use rustapi_rs::Extension
 pub use rustapi_rs::ExtrasEnvironment
@@ -36,15 +37,27 @@ pub use rustapi_rs::JwtError
 pub use rustapi_rs::JwtLayer
 pub use rustapi_rs::JwtValidation
 pub use rustapi_rs::KeepAlive
+pub use rustapi_rs::MemorySessionStore
 pub use rustapi_rs::MethodRouter
 pub use rustapi_rs::Multipart
 pub use rustapi_rs::MultipartConfig
 pub use rustapi_rs::MultipartField
 pub use rustapi_rs::NoContent
+pub use rustapi_rs::OAuth2Client
+pub use rustapi_rs::OAuth2Config
+pub use rustapi_rs::Job
+pub use rustapi_rs::JobBackend
+pub use rustapi_rs::JobContext
+pub use rustapi_rs::JobError
+pub use rustapi_rs::JobQueue
+pub use rustapi_rs::JobRequest
+pub use rustapi_rs::PkceVerifier
 pub use rustapi_rs::Path
+pub use rustapi_rs::Provider
 pub use rustapi_rs::Query
 pub use rustapi_rs::RateLimitLayer
 pub use rustapi_rs::Redirect
+pub use rustapi_rs::RedisSessionStore
 pub use rustapi_rs::Request
 pub use rustapi_rs::RequestId
 pub use rustapi_rs::RequestIdLayer
@@ -57,6 +70,12 @@ pub use rustapi_rs::RouteMatch
 pub use rustapi_rs::Router
 pub use rustapi_rs::RustApi
 pub use rustapi_rs::RustApiConfig
+pub use rustapi_rs::Session
+pub use rustapi_rs::SessionConfig
+pub use rustapi_rs::SessionError
+pub use rustapi_rs::SessionLayer
+pub use rustapi_rs::SessionRecord
+pub use rustapi_rs::SessionStore
 pub use rustapi_rs::SqlxErrorExt
 pub use rustapi_rs::Sse
 pub use rustapi_rs::SseEvent
@@ -65,6 +84,10 @@ pub use rustapi_rs::StaticFile
 pub use rustapi_rs::StaticFileConfig
 pub use rustapi_rs::StatusCode
 pub use rustapi_rs::StreamBody
+pub use rustapi_rs::EnqueueOptions
+pub use rustapi_rs::InMemoryBackend
+pub use rustapi_rs::TokenError
+pub use rustapi_rs::TokenResponse
 pub use rustapi_rs::TracingLayer
 pub use rustapi_rs::Typed
 pub use rustapi_rs::TypedPath
@@ -73,6 +96,8 @@ pub use rustapi_rs::Validatable
 pub use rustapi_rs::ValidatedClaims
 pub use rustapi_rs::ValidatedJson
 pub use rustapi_rs::WithStatus
+pub use rustapi_rs::AuthorizationRequest
+pub use rustapi_rs::sse_from_iter
 pub use rustapi_rs::api_key
 pub use rustapi_rs::cache
 pub use rustapi_rs::circuit_breaker
@@ -95,6 +120,7 @@ pub use rustapi_rs::load_dotenv
 pub use rustapi_rs::load_dotenv_from
 pub use rustapi_rs::logging
 pub use rustapi_rs::otel
+pub use rustapi_rs::oauth2
 pub use rustapi_rs::patch
 pub use rustapi_rs::patch_route
 pub use rustapi_rs::post
@@ -109,6 +135,7 @@ pub use rustapi_rs::route
 pub use rustapi_rs::sanitization
 pub use rustapi_rs::security_headers
 pub use rustapi_rs::serve_dir
+pub use rustapi_rs::session
 pub use rustapi_rs::sse_response
 pub use rustapi_rs::structured_logging
 pub use rustapi_rs::timeout
@@ -228,6 +255,16 @@ pub mod rustapi_rs::extras::logging
 pub use rustapi_rs::extras::logging::logging
 pub mod rustapi_rs::extras::otel
 pub use rustapi_rs::extras::otel::otel
+pub mod rustapi_rs::extras::oauth2
+pub use rustapi_rs::extras::oauth2::AuthorizationRequest
+pub use rustapi_rs::extras::oauth2::CsrfState
+pub use rustapi_rs::extras::oauth2::OAuth2Client
+pub use rustapi_rs::extras::oauth2::OAuth2Config
+pub use rustapi_rs::extras::oauth2::PkceVerifier
+pub use rustapi_rs::extras::oauth2::Provider
+pub use rustapi_rs::extras::oauth2::TokenError
+pub use rustapi_rs::extras::oauth2::TokenResponse
+pub use rustapi_rs::extras::oauth2::oauth2
 pub mod rustapi_rs::extras::rate_limit
 pub use rustapi_rs::extras::rate_limit::RateLimitLayer
 pub use rustapi_rs::extras::rate_limit::rate_limit
@@ -239,6 +276,16 @@ pub mod rustapi_rs::extras::sanitization
 pub use rustapi_rs::extras::sanitization::sanitization
 pub mod rustapi_rs::extras::security_headers
 pub use rustapi_rs::extras::security_headers::security_headers
+pub mod rustapi_rs::extras::session
+pub use rustapi_rs::extras::session::MemorySessionStore
+pub use rustapi_rs::extras::session::RedisSessionStore
+pub use rustapi_rs::extras::session::Session
+pub use rustapi_rs::extras::session::SessionConfig
+pub use rustapi_rs::extras::session::SessionError
+pub use rustapi_rs::extras::session::SessionLayer
+pub use rustapi_rs::extras::session::SessionRecord
+pub use rustapi_rs::extras::session::SessionStore
+pub use rustapi_rs::extras::session::session
 pub mod rustapi_rs::extras::sqlx
 pub use rustapi_rs::extras::sqlx::SqlxErrorExt
 pub use rustapi_rs::extras::sqlx::convert_sqlx_error
@@ -269,6 +316,7 @@ pub use rustapi_rs::prelude::ContextBuilder
 pub use rustapi_rs::prelude::Cookies
 pub use rustapi_rs::prelude::CorsLayer
 pub use rustapi_rs::prelude::Created
+pub use rustapi_rs::prelude::CsrfState
 pub use rustapi_rs::prelude::Deserialize
 pub use rustapi_rs::prelude::Deserialize
 pub use rustapi_rs::prelude::Extension
@@ -283,17 +331,23 @@ pub use rustapi_rs::prelude::JwtLayer
 pub use rustapi_rs::prelude::JwtValidation
 pub use rustapi_rs::prelude::KeepAlive
 pub use rustapi_rs::prelude::LlmResponse
+pub use rustapi_rs::prelude::MemorySessionStore
 pub use rustapi_rs::prelude::Message
 pub use rustapi_rs::prelude::Multipart
 pub use rustapi_rs::prelude::MultipartConfig
 pub use rustapi_rs::prelude::MultipartField
 pub use rustapi_rs::prelude::Negotiate
 pub use rustapi_rs::prelude::NoContent
+pub use rustapi_rs::prelude::OAuth2Client
+pub use rustapi_rs::prelude::OAuth2Config
 pub use rustapi_rs::prelude::OutputFormat
 pub use rustapi_rs::prelude::Path
+pub use rustapi_rs::prelude::PkceVerifier
+pub use rustapi_rs::prelude::Provider
 pub use rustapi_rs::prelude::Query
 pub use rustapi_rs::prelude::RateLimitLayer
 pub use rustapi_rs::prelude::Redirect
+pub use rustapi_rs::prelude::RedisSessionStore
 pub use rustapi_rs::prelude::Request
 pub use rustapi_rs::prelude::RequestId
 pub use rustapi_rs::prelude::RequestIdLayer
@@ -304,6 +358,12 @@ pub use rustapi_rs::prelude::Router
 pub use rustapi_rs::prelude::RustApi
 pub use rustapi_rs::prelude::RustApiConfig
 pub use rustapi_rs::prelude::Schema
+pub use rustapi_rs::prelude::Session
+pub use rustapi_rs::prelude::SessionConfig
+pub use rustapi_rs::prelude::SessionError
+pub use rustapi_rs::prelude::SessionLayer
+pub use rustapi_rs::prelude::SessionRecord
+pub use rustapi_rs::prelude::SessionStore
 pub use rustapi_rs::prelude::Serialize
 pub use rustapi_rs::prelude::Serialize
 pub use rustapi_rs::prelude::SqlxErrorExt
@@ -332,6 +392,9 @@ pub use rustapi_rs::prelude::View
 pub use rustapi_rs::prelude::WebSocket
 pub use rustapi_rs::prelude::WebSocketStream
 pub use rustapi_rs::prelude::WithStatus
+pub use rustapi_rs::prelude::AuthorizationRequest
+pub use rustapi_rs::prelude::TokenError
+pub use rustapi_rs::prelude::TokenResponse
 pub use rustapi_rs::prelude::convert_sqlx_error
 pub use rustapi_rs::prelude::create_token
 pub use rustapi_rs::prelude::debug

api/public/rustapi-rs.all-features.txt

@@ -55,6 +55,7 @@ pub use rustapi_rs::UploadedFile
 pub use rustapi_rs::Validatable
 pub use rustapi_rs::ValidatedJson
 pub use rustapi_rs::WithStatus
+pub use rustapi_rs::sse_from_iter
 pub use rustapi_rs::collect_auto_routes
 pub use rustapi_rs::delete
 pub use rustapi_rs::delete_route