chore(main): release 1.0.0

[github-actions]

🤖 I have created a release beep boop

1.0.0 (2026-02-26)

⚠ BREAKING CHANGES

• implement redirect for hosting base domain

Features

• add alerting for usage abuse (#2413) (e9d0bdf)
• add is_private to apps (#2546) (aa04dfa)
• Add system info (Client + Server metrics) (#2311) (bbe6f9d)
• app icons in subdomain (#2461) (5129868)
• cleanup cache invalidation and pull out keys to be easily used in other places that need the same cache (#2515) (ec412ea)
• data-access: move puter.js read to app driver (2139551)
• data-access: move puter.js read to app driver (f3100ec)
• dynamo in oss (#2195) (a1689c4)
• give referrals (#2262) (d64bd21)
• gui: add keyboard shortcuts guide dialog (#2278) (340d932)
• implement redirect for hosting base domain (4d60168), closes #2214
• kv.remove feature to remove nested elements or list indices (#2258) (f88ca5d)
• method for updating users metering directly (#2252) (b1e7bc5)
• more extension controller decorators (#2272) (cdb4226)
• new kvstore operatios for more granular updates 🚀 (#2254) (23d7b75)
• paginated list (#2296) (f9888e6)
• puter.js: make home directory default cwd (c715057)
• remove file cache service (#2464) (afeac49)
• rename ai models to match norm (#2121) (9da8aa0)
• replace serializible caches with redis instead of kvjs 🚀 (#2381) (7a47047)
• single image ai endpoint (#2129) (161ca74)
• sonnet-4.6 support (#2506) (5df1ca8)
• start-menu: add "Add to Desktop" option for all apps (#2386) (5cd731d)
• subdomain error redirect (#2483) (354ac31)
• support extension divs headers and tags being inserted to puter homepage load (#2221) (6cc86ff)
• type extension cache update events (#2548) (2c1b21e)
• usage endpoints, allow appName (#2303) (3579753)

Bug Fixes

• "Popup Closed" message, + excess logs (142d745)
• add back test (#2317) (fbe8736)
• add catch all for minimum usage amounts (#2248) (2ef9aa3)
• add explicit handling for access token in ACL (e5750d8)
• add missing 'tel' runtime module (6d36c90)
• ai metering (#2393) (afbb76f)
• alerting for metering (#2399) (e2e4794)
• allow html property in UIComponentWindow (4d49f5d)
• allow b64 srings without mime type for app icons (#2502) (00befdc)
• app icon again (#2478) (8a6d07e)
• app icon origin (#2500) (44bb595)
• app icons saving (#2477) (bfd8a4e)
• app icons via subdomain on localhost (#2544) (7a1468d)
• app-icons protocol (#2480) (1292148)
• app-under-user access token ACL (35461a0)
• attempt coercion to fix vscode corruption (5e4dfbc)
• auto-collapse playground menu on mobile (#2430) (#2431) (06fe07e)
• axiosRequest log dumping b64 urls (#2448) (380e72c)
• backend: ESM/CJS interop is sad (cecb63b)
• backend: fix context dual-instance problem (b17486b)
• backend: handle ll_mkdir exists race condition (f125830)
• backend: invalidate app permission debounce (#2541) (6658a90)
• backend: race condition in hashing_stream (8e418a1)
• backend: singleton in helpers for testability (be8b5ef)
• backend: status code check and handle HLMkdir (21d02e7), closes #1603
• backend: undo part of 35461a0 (cbde123)
• backend: update protected app perm implicator (79fda7b)
• bad ai calls (#2144) (9e2ae1c)
• bad caching query crashing our db (#2172) (25221e5)
• bad copy with reference in UIItem (7ba40f8), closes #2514
• bad method name for together ai (#2128) (1a0e2d3)
• bad usageType (#2157) (f3e143e)
• batch app info referral (#2146) (aa225e3)
• batch fetch get apps for launch apps and recommended apps (#2315) (6e9e537)
• cache get_app result with expiry to lessen load on db (#2229) (174e613)
• cleanup some app es and app service validation (#2523) (9f87ccb)
• cost mapping for together ai from openai sdk (#2371) (4aa2039)
• data-access: add guard for app actors (1e3b704)
• data-access: read response regression (768a35e)
• decrease large error log from wrong model (#2456) (5e8ce3a)
• decrease log usage (#2449) (f9805df)
• dedup get_apps app requests (#2325) (d3a27be)
• default timeout on user caches of 15 min (#2530) (eda9f11)
• dev center emails (#2447) (7d84d7a)
• disable bad token checks? (#2326) (d42f9b0)
• disable requests from server in two services (de77b11)
• do not await for puter icon write in db (#2485) (4136cb1)
• don't await cache invalidation for grant app permission (#2551) (1887352)
• don't await for cache writes (#2519) (3b32b4a)
• don't cache nor fetch raw b64 url for app icons (#2230) (f3b5e1b)
• don't call stat on each file in dir (#2522) (3834571)
• don't load bench.js files (#2207) (91e12f6)
• don't stream back bytes for icons (#2486) (809d375)
• don't use ai aggregators if we have the model ourselves (#2424) (fbb2080)
• Enable godmode for dev-center to open worker files in editor (#2224) (677426c)
• ensure cache invalidation when verifying OTP (020a64d)
• expose getUserService in extension typings (#2385) (114fbff)
• false alarm from openrouter (#2470) (d7a3f61)
• fsNode.is() requiring unnecessary fetch (3fe6b8d)
• gemini via openrouter models (#2438) (de7e831)
• gui: defer login event until listener registered (#2547) (c4346df)
• header resend issue with catch-all handler (a8dc62e)
• husky (#2260) (13f7d7b)
• import issues on run form benchmarks (somehow) (c43f399)
• incorrect accessor reference in OIDCService (298f1cd)
• incorrect parameters in UIWindowChangeEmail (b5a3323)
• incorrect parameters in UIWindowChangePassword (2cdc211)
• issues creating shortcuts (a5bbc7e), closes #2200
• limit open router expensive models for now (#2407) (e938d51)
• log format (#2333) (2402e49)
• make cache calls async on boot (#2173) (6652a1d)
• make invalidations more robust (#2529) (4c863cc)
• map again (#2372) (5a8e906)
• match override properly (#2373) (de14bf7)
• metering alerts for missing costs (#2466) (0a594bd)
• missing redis changes (#2401) (07a3897)
• missing video gen ai services in ai module (#2180) (54dd60d)
• more reliable 404 responses for .api endpoint (e744333)
• more strict metering limits, disable ambigious openrouter one (#2249) (7f76bff)
• move readdir-subdomains to ESM (b8bdc16)
• normalize file object in /writeFile (f9a3e86)
• oidc: add code lost due to editing a .js (ef0a665)
• oidc: add error log for QR login flow (7858f5b)
• oidc: add missing awaits (2b80214)
• oidc: fix QR code login issues caused by OIDC (e2068e7)
• oidc: http-only cookie sync for switch user (42d3f9e)
• oidc: rate-limit identity for username (d0c2e9b)
• oidc: remove generated source file (ccecf0a)
• oidc: session token vs gui token issues (d532b3d)
• only rate limit login when failed (#2355) (cc5285f)
• openrouter costs always being 0 (#2250) (754e820)
• perms: fix revokePermission for "flat" impl (a85d2b7)
• prevent loop if failing ai models? (#2122) (8d52cef)
• puter.js: check for uuid before relative path (3da3181)
• range headers in file.js (5250671)
• rate limits for oidc too extreme (1be3eca)
• redis cache deletions (#2518) (2e77650)
• redis cache for user (#2409) (eead0fd)
• remove broadcast for cache updates (#2542) (66f1cd0)
• remove rate limit await on writes (#2368) (6daac66)
• resume-analyzer: add preprocessing for DOCX and TXT files (#2359) (fecd67a)
• shard app usages properly by user (#2279) (0b98638)
• skip CI tests when only docs are changed (#2335) (#2338) (7045452)
• stricter invalidation for 2fa and confirm email codes (#2528) (e60f55f)
• suggested apps breaking (#2343) (66a3af6)
• tests (ec412ea)
• together ai image prices (#2130) (04c8b06)
• ts extensions (#2247) (93afbe4)
• types and tests? (#2193) (a661752)
• usage limited error handling (#2423) (5fdfae6)
• wrong icon for workers (#2524) (3a89dea)

Performance Improvements

• [+] readdirstat_uuid optimized implementation (9bac2cb)
• batch readdir suggested apps into single big query (#2332) (2287704)
• batching get_apps cache look ups (#2521) (d418976)
• condition for re-fetch in fsNode.exists() (4b31204)
• dedup and cache get_apps in puter gui, also add more app batching in backend (#2319) (e9631b5)
• don't await on modifying 'accessed' (af9a2b8)
• don't fetch b64 icon for apps always, and lru suggestedApps (#2336) (8bb4dec)
• es: generate client-safe objects in parallel (7228e63)
• improve app open time (#2490) (32682e7)
• improve parallelization in SQLES (6edd7de)
• improve tel + decrease logs (#2309) (4e6d9c9)
• is()/is_above() determine when to fetch (6c0daf5)
• make app entries more scalable, avoid writing global entries since its just puter itself and isn't relevant (#2233) (aafdec9)
• more benchmarks (d3c1fc3)
• more benchmarks (2) (2c60faf)
• split implied user-app permissions (eea9d8b)

Reverts

• change to ai model names (#2123) (b40ca1d)
• single ai image entry point (#2131) (907d0db)

---

This PR was generated with Release Please. See documentation.