chore: prepare 1.0.0 release

.github/workflows/release.yml

@@ -6,7 +6,7 @@ on:
       version:
         description: Version to publish
         required: true
-        default: 0.9.0
+        default: 1.0.0
         type: string
 
 permissions:

apps/web/package.json

@@ -18,7 +18,7 @@
     "@astrojs/sitemap": "^3.7.3",
     "@santi020k/lumen-astro": "^1.4.0",
     "@santi020k/og": "workspace:*",
-    "astro": "^7.2.5"
+    "astro": "^7.2.6"
   },
   "devDependencies": {
     "@astrojs/check": "^0.9.10",

apps/web/src/pages/docs/index.astro

@@ -259,7 +259,7 @@ const jsonResultExample = `{
   "cleaned": [],
   "stale": [],
   "total": 2,
-  "version": "0.9.0",
+  "version": "1.0.0",
   "elapsedMilliseconds": 184
 }`
 
@@ -271,7 +271,7 @@ pnpm exec santi-og inspect http://localhost:4321 --open
 pnpm exec santi-og audit --site dist --site-url https://example.com --sarif
 pnpm exec santi-og audit --site dist --site-url https://example.com --standards
 pnpm exec santi-og migrate --report --json
-pnpm exec santi-og upgrade --to 0.9.0`
+pnpm exec santi-og upgrade --to 1.0.0`
 ---
 
 <BaseLayout title="Documentation" description={description}>
@@ -288,7 +288,7 @@ pnpm exec santi-og upgrade --to 0.9.0`
         <p>{description} Start with a useful visual default and customize only what your project needs.</p>
       </div>
       <div class="docs-meta">
-        <span><b>v0.9.0</b> Current docs</span>
+        <span><b>v1.0.0</b> Current docs</span>
         <span><b>Node.js 22.18+</b> Runtime</span>
         <span><b>4 presets</b> Included</span>
       </div>

packages/og/CHANGELOG.md

@@ -2,8 +2,14 @@
 
 ## Unreleased
 
+## 1.0.0 - 2026-08-24
+
+- Establish the documented package subpaths, runtime exports, configuration shapes, CLI commands,
+  and machine-readable results as the stable public contract.
 - Add a transparent 0–100 score to hosted, CLI, visual, and JSON inspection results while keeping
   the underlying pass, warning, and error evidence visible.
+- Support the hosted checker during local Astro development while preserving production Turnstile
+  verification requirements.
 
 ## 0.9.0 - 2026-08-24
 

packages/og/README.md

@@ -525,7 +525,7 @@ output. It fails when a card exceeds the accepted difference and always fails fo
 or dimension changes, which cannot be expressed as a pixel ratio. Add `--json` for automation.
 
 `santi-og migrate --report` inventories logical cards, physical outputs, local renderer modules,
-and remaining custom-renderer responsibilities. `santi-og upgrade --to 0.9.0` updates regular
+and remaining custom-renderer responsibilities. `santi-og upgrade --to 1.0.0` updates regular
 dependencies in the root and every declared workspace package, plus pnpm catalogs and release-age
 exclusions; run your package manager install command after reviewing the changes. `generate`,
 `check`, `compare`, `inspect`, `migrate`, and `upgrade` support machine-readable JSON summaries.

packages/og/STABILITY.md

@@ -1,8 +1,7 @@
 # Stability and compatibility
 
-`@santi020k/og` 0.9 is the final acceptance release before 1.0. The 0.8 cycle made the compatibility
-boundary explicit; 0.9 verifies that boundary from packed and registry-installed artifacts in real
-framework builds before the first stable major.
+`@santi020k/og` 1.0 establishes the stable public contract after the 0.8 compatibility review and
+the 0.9 acceptance cycle verified packed and registry-installed artifacts in real framework builds.
 
 ## Supported runtime
 
@@ -66,14 +65,13 @@ The stable package subpaths are:
 - Product copy, brand policy, locale topology, redirects, severity choices, and remote image digests
   remain consumer-owned configuration.
 
-## Before 1.0
+## 1.0 acceptance
 
-The 0.9 cycle keeps the export surface frozen, runs the complete suite on Node.js 22 and 24, and
-builds plain Node.js, Astro, and Next.js consumers from both the packed candidate and the published
-registry artifact. The hosted checker is protected by application URL policy, same-origin request
-validation, server-validated single-use Turnstile tokens, and the Workers public-network egress
-boundary.
+The stable export surface is locked by public contract tests. The complete suite runs on Node.js 22
+and 24, and plain Node.js, Astro, and Next.js consumers build from both the packed candidate and the
+published registry artifact. The hosted checker is protected by application URL policy,
+same-origin request validation, server-validated single-use Turnstile tokens, and the Workers
+public-network egress boundary.
 
 The executable acceptance criteria live in [the release checklist](./docs/release-acceptance.md).
-Any required breaking correction discovered during this cycle should ship before 1.0 instead of
-being carried into the stable contract.
+Future changes follow the compatibility and deprecation policy above.

packages/og/docs/migrating-existing-projects.md

@@ -173,5 +173,5 @@ Start with `santi-og migrate --report --json` to inventory the remaining work. R
 `santi-og compare --threshold 0.01` when visual parity is required; it renders in a temporary
 directory and can fail CI when decoded pixel differences exceed the chosen ratio. Missing outputs
 and dimension changes always fail because they have no comparable pixel ratio. Use
-`santi-og upgrade --to 0.9.0` to update root and declared workspace package manifests or pnpm
+`santi-og upgrade --to 1.0.0` to update root and declared workspace package manifests or pnpm
 catalogs, then run the package manager install command yourself.

packages/og/docs/release-acceptance.md

@@ -1,7 +1,7 @@
 # Release acceptance
 
-Version 0.9 is the final validation release before the public contract becomes stable in 1.0. A
-release is accepted only when every required item below has evidence from the release commit.
+Version 1.0 establishes the stable public contract after the 0.9 validation cycle. The release is
+accepted only when every required item below has evidence from the release commit.
 
 ## Repository state
 

packages/og/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@santi020k/og",
-  "version": "0.9.0",
+  "version": "1.0.0",
   "description": "Generate deterministic Open Graph images with reusable presets or project-owned renderers.",
   "type": "module",
   "sideEffects": false,
@@ -120,8 +120,8 @@
     "@types/fontkit": "^2.0.9",
     "@types/node": "^22.20.1",
     "@types/react": "^19.2.18",
-    "@typescript-eslint/eslint-plugin": "^8.67.0",
-    "@typescript-eslint/parser": "^8.67.0",
+    "@typescript-eslint/eslint-plugin": "^8.68.0",
+    "@typescript-eslint/parser": "^8.68.0",
     "@vitest/coverage-v8": "^4.1.11",
     "astro-eslint-parser": "^3.1.0",
     "cspell": "^10.1.0",

packages/og/src/version.ts

@@ -1,2 +1,2 @@
-export const GENERATOR_VERSION = '0.9.0'
+export const GENERATOR_VERSION = '1.0.0'
 export const PRESET_VERSION = '2'

packages/og/tests/cli.test.mjs

@@ -168,7 +168,7 @@ test('prints machine-readable generation and migration reports', async () => {
     const generation = JSON.parse(generated.stdout)
     const report = JSON.parse(migrated.stdout)
 
-    assert.equal(generation.version, '0.9.0')
+    assert.equal(generation.version, '1.0.0')
 
     assert.equal(generation.total, 2)
 

packages/og/tests/generate.test.ts

@@ -136,7 +136,7 @@ describe('generate', () => {
       .resolves.toBe('png:Hello')
 
     await expect(readFile(path.join(root, '.og-cache.json'), 'utf8'))
-      .resolves.toContain('"generatorVersion": "0.9.0"')
+      .resolves.toContain('"generatorVersion": "1.0.0"')
   })
 
   it('writes cards and skips unchanged outputs using content fingerprints', async () => {