v1.0.0

Changelog

• 9b4c375 Merge remote-tracking branch 'origin/main' into release-1.0-sync
• e836d26 chore(release): 1.0.0
• 8bc4faf chore(release): 1.0.0 (#88)
• 40cf332 ci(buf): fail the BSR push without BUF_TOKEN instead of skipping it (#100)
• 83cf342 ci(helm): publish the chart as OCI on release tags; kind install test (#93)
• 2b336ba ci: usage.proto parity check with light-tokenmeter (#91)
• 1b56daa docs(proto): keep the cache-price and key-policy comments to three lines (#97)
• 39da9c0 docs(readme): the web console section lists every ktms-admin sign-in method
• 8ec32a7 feat(install-node): take over llm-proxy-node installs; refuse a foreign Ollama port (#98)
• 19c72f4 feat(keys): per-key policy: allowed models, RPM and TPM over all models (#95)
• 309237c feat(pricing): price prompt-cache reads and writes at their own rates (#94)
• 86c74af feat(usage): USAGE_COLLECTOR_TOKEN for an authenticated usage sink (#90)
• 2a680ee feat: GetSpend for keys, users and teams; prompt_cache for Anthropic (#96)
• 56c6129 test(upgrade): wait until the old release serves the seeded model (#101)

Known issue

• The Helm chart oci://ghcr.io/ai-process/charts/ktms 1.0.0 is published but not signed: the release job stopped after pushing it. Binaries (checksums.txt) and images are signed. Chart signatures start with 1.0.1.