[anurag629]

The 1.0 release candidate: everything on dev since v0.8. Changesets is in rc mode (#471), so the version PR this opens publishes 1.0.0-rc.0 under the npm rc tag, and latest stays on 0.x.

Breaking (see Upgrading to 1.0):

• the APIs deprecated in 0.6 to 0.8 are removed, and each fails at startup with what to use (feat!: remove the APIs deprecated in 0.6 to 0.8, with an upgrade guide #441)
• session tokens are required by default, with allowAnonymous: true to opt out, and requireSession is removed (feat(server)!: require session tokens by default, with allowAnonymous to opt out #462)
• the noun:verb analytics aliases and leadsCapture are removed (feat!: remove the APIs deprecated in 0.6 to 0.8, with an upgrade guide #441, after feat(core,server): noun.verb analytics event names, with the old ones aliased until 1.0 #442 added the new names in 0.8)

Kept on purpose: the 0.5 stream format, through 1.x (#467).

Also in it:

• the widget's config types are exported (feat(widget,server): export the types a config is made of #438)
• the public API snapshot is checked in CI (ci: check each package's public API against a snapshot in api/ #437)
• accessibility checks of every widget state, plus screenshot tests (test(e2e): check every widget state with axe in light, dark and RTL #435, test(e2e): screenshot tests for the widget's states, with a workflow that makes the baselines #463 to test(e2e): wait for the reply to end before the S7 and S14 screenshots #466)
• a lighter widget build (perf(widget): rename more private members in the minified builds, checked by a test #453) and new size budgets (chore(widget): raise the panel budget to 18 kB and the single file to 20 kB #469)
• the site loads widget 0.7 (fix(website): load widget 0.7 on the site instead of 0.4 #459)
• docs for every option, the Node bridge and runTurn (docs: document the options the docs never mentioned, and a page for ChatCopsBot #440, docs: Node req/res bridge, runTurn options, and what the CLI's API is #470)
• contributor work: the pretty reporter (cli: fuller pretty eval reporter #444), tool-call and text assertions (feat(cli): add calls-tool and no-tool-call assertions (#412) #446, feat(cli): add icontains, regex and equals text assertions (#411) #430), translations (feat(widget): translate disclosure in 11 locales #449), and fixes fix(widget): fall back to the default welcome bubble delay for non-numeric values #450 and fix(server): reject a retention.conversationsDays that isn't above 0 #456

Live smoke on these commits passed on Claude, OpenAI and Gemini (details in #471).

Merging this also deploys the website from production, so the docs switch to 1.0 while npm's latest is still 0.8. The new setup steps (sessionSecrets, app.use) work on 0.8 too, and the removals are only on the upgrade page, so 0.8 users following the docs aren't broken.