v0.1.0

Changelog

• 25dabb3 fix(ci): attest action — drop invalid predicate input (auto SLSA build provenance)
• 7866951 fix(ci): golangci-lint v2 schema — per-linter settings under linters.settings
• e1174a7 style: fix 39 golangci-lint issues (errcheck, staticcheck S1025, unused detail())
• fab7361 ci: add release automation (goreleaser + SBOM + attest), CodeQL, lint, dependency-review
• ab6e08b chore: add community-health files (MIT license, SECURITY, CONTRIBUTING, issue/PR templates, dependabot, editorconfig)
• 4cf3979 docs: refresh model catalog (12 -> 15 fallback models), drop gitignored-dev-doc links from public docs
• f6d9f8f ci: bump actions to checkout@v7, setup-go@v7 (Node 24, latest majors)
• 34bc0d1 chore(docs): keep guides/ public, ignore dev docs (delivery/product/research/security)
• 848d2bb chore(deps): bump brotli v1.2.2, compress v1.19.2, x/crypto v0.55.0
• b67fa8a fix(stealth): two live-found transport bugs — h2 ALPN + compressed bodies
• 9b869de chore: explicit LF rule for .ps1 scripts
• 418e3b9 chore: enforce LF line endings repo-wide (.gitattributes) — silence Windows autocrlf warnings
• 587ed33 feat(stealth): opt-in JA3 TLS fingerprint impersonation + browser headers
• 3a8cbb3 docs: §2g anti-block hardening survey — 16 newly cloned reference repos
• 20ccce5 fix(runs): CooldownBan must also set the shared cooldown deadline
• 5ab1624 feat(upstream): ban detection, explicit session statuses, tier diagnostics
• 65d788e docs: composer 3-projects/day limit (separate from API quota) + upstream intelligence from issues/PRs
• bb3de04 fix(testutil): mock RateLimit must write the 429 body verbatim (writeRaw)
• cdbd137 feat(quota): 429 rate-limit handling, quota-safe session maintenance, Retry-After surfacing
• 8c44a0a feat(observability): lifecycle debug logs, LOG_LEVEL tests, README + About
• 4e05ffb chore: untrack HANDOFF.md (agent handoff doc — local only) + gitignore it
• 0e5df3a wip: observability pass — config LOG_LEVEL, telemetry New/ParseLevel, server access logs
• 9a61c5c docs: restore Create button row in the 9router form table (dropped in the SSRF callout edit)
• 5f11856 docs: 9router Add API Key step — Default Model is REQUIRED for compatible providers
• 66e17ff fix(scripts): print both bridge and compose-network gateways for containerized 9router
• 4bd4702 feat(scripts): setup-proxy-docker.sh — one-shot Linux installer + auto 9router config print
• e56af87 docs: clarify 9router Base URL — default localhost vs LAN host vs VPS table
• 20a55dc docs: exact 9router 'Add OpenAI Compatible' form values, verified against source
• 316314c feat(scripts): get-freebuff-token.ps1/.sh — install CLI, login, extract token into .env
• 7a03540 docs: 9router integration guide — install + provider wiring + troubleshooting
• 4121fbb docs: live tier test — Indonesian VPS has FULL access (all models 200); shared session validated across 6 models
• 2128135 fix(upstream): recover from session_model_mismatch; docs: FreeBuff limitations research
• 3b9b15e fix(upstream): streaming response bodies were killed by do()'s deferred cancel
• 10cbcdf feat(config): auto-load ./.env (dotenv) — defaults < JSON < .env < env
• 2e66d3a docs: add 'Getting a token' section (reference-grounded: web freebuff.llm.pm + CLI credentials.json)
• a4cbef8 docs: docker smoke verified on vps-01 (image 26MB, healthcheck green, live registry)
• 1a91947 fix+docs: loopback default bind, pool inflight release, tasks/PRD status v1.2
• 89f62f7 docs+packaging: Dockerfile, compose, README, dockerignore (slice 5)
• 569d3e6 feat: telemetry package + main.go HTTP wiring (slice 4b)
• 96b0680 fix: race detector findings — session single-flight channel capture, mock test accessors
• 82b0360 ci: add GitHub Actions workflow (build, vet, test -race on Linux)
• e788a91 FreeBuff proxy bridge: protocol core + docs, validation fixes
• 005089c Initial commit