## 1.0.0 (2026-08-18)

* ci: перевести пайплайн на quality bake и alpine ([f76b89c](http://192.168.100.56:3000/denozord/auth-portal/commit/f76b89c))
* ci: переключить registry на git.shx.one ([a59e173](http://192.168.100.56:3000/denozord/auth-portal/commit/a59e173))
* fix(auth): runtime allowlist return_to с private для LAN SSO ([9612425](http://192.168.100.56:3000/denozord/auth-portal/commit/9612425))
* fix(auth): SSO return_to без /me чтобы не бить rate limit ([4ff440f](http://192.168.100.56:3000/denozord/auth-portal/commit/4ff440f))
* fix(auth): не отдавать SSO с просроченным JWT и не бить /me ([c23eb5e](http://192.168.100.56:3000/denozord/auth-portal/commit/c23eb5e))
* fix(db): индексы audit source_app/event_id только после ALTER ([8b1203f](http://192.168.100.56:3000/denozord/auth-portal/commit/8b1203f))
* fix(ui): добавить монитор системы и выровнять chrome ([778c42b](http://192.168.100.56:3000/denozord/auth-portal/commit/778c42b))
* fix(web): добавить иконку fw в AppsMenu ([82fb47b](http://192.168.100.56:3000/denozord/auth-portal/commit/82fb47b))
* feat(admin): ingest аудита из apps и users 1:1 с Sheet журнала ([57e34ff](http://192.168.100.56:3000/denozord/auth-portal/commit/57e34ff))
* feat(admin): журнал аудита с ротацией и апгрейд таблицы пользователей ([26fc825](http://192.168.100.56:3000/denozord/auth-portal/commit/26fc825))
* feat(admin): журналы входов и изменений с IP/UA и сессиями ([cc38bf0](http://192.168.100.56:3000/denozord/auth-portal/commit/cc38bf0))
* feat(app-switcher): централизовать ссылки приложений в portal settings ([0fa4b7a](http://192.168.100.56:3000/denozord/auth-portal/commit/0fa4b7a))
* feat(auth): add user directory endpoint for listing active users ([143db3d](http://192.168.100.56:3000/denozord/auth-portal/commit/143db3d))
* feat(auth): allowlist private для LAN return_to ([1cc5897](http://192.168.100.56:3000/denozord/auth-portal/commit/1cc5897))
* feat(auth): enhance CreateUserSheet with improved layout and error handling ([83bfc03](http://192.168.100.56:3000/denozord/auth-portal/commit/83bfc03))
* feat(auth): enhance JWT claims and app switcher configuration ([bb17ad6](http://192.168.100.56:3000/denozord/auth-portal/commit/bb17ad6))
* feat(auth): integrate normalizePermissionKeys for consistent permission handling ([21d6603](http://192.168.100.56:3000/denozord/auth-portal/commit/21d6603))
* feat(auth): refactor authentication routes and enhance JWT handling ([09ed7f4](http://192.168.100.56:3000/denozord/auth-portal/commit/09ed7f4))
* feat(auth): добавить приложение fw для EvoFirewall ([9b4c7b8](http://192.168.100.56:3000/denozord/auth-portal/commit/9b4c7b8))
* feat(docs): добавить ссылку на интеграцию с Cloudflare Domain Manager в README ([2a6adf7](http://192.168.100.56:3000/denozord/auth-portal/commit/2a6adf7))
* feat(mcp): add ReUI server configuration to mcp.json ([ece2b1e](http://192.168.100.56:3000/denozord/auth-portal/commit/ece2b1e))
* feat(oidc): add CreateOidcClientSheet component and update imports ([36c4091](http://192.168.100.56:3000/denozord/auth-portal/commit/36c4091))
* feat(oidc): enhance SSO target app resolution and audit logging ([4ce05a6](http://192.168.100.56:3000/denozord/auth-portal/commit/4ce05a6))
* feat(reui): update ReUI components and documentation ([0b6fa65](http://192.168.100.56:3000/denozord/auth-portal/commit/0b6fa65))
* feat(sidebar): integrate NavUser component into SidebarFooter and clean up SiteHeader ([ed16995](http://192.168.100.56:3000/denozord/auth-portal/commit/ed16995))
* feat(vps): добавить permission vps:spaces:admin и docs Spaces ([e2c45cf](http://192.168.100.56:3000/denozord/auth-portal/commit/e2c45cf))
* feat(web): добавить ReUI PRO rules, KpiStatGrid и убрать ModeToggle ([779186f](http://192.168.100.56:3000/denozord/auth-portal/commit/779186f))
* chore(rules): правило kpi-hybrid — только hybrid KPI из kit ([e430abe](http://192.168.100.56:3000/denozord/auth-portal/commit/e430abe))
* chore(security): игнорировать локальные mcp.json ([4a4e3c7](http://192.168.100.56:3000/denozord/auth-portal/commit/4a4e3c7))
* docs: update deployment instructions for Auth Portal with Traefik in a single Docker Compose stack ([b5a50ac](http://192.168.100.56:3000/denozord/auth-portal/commit/b5a50ac))
* docs(README): добавлена ссылка на интеграцию с EvoBGP в документацию; обновлено описание приложения  ([cfbe1fc](http://192.168.100.56:3000/denozord/auth-portal/commit/cfbe1fc))
* docs(README): добавлены инструкции по локальному запуску и развертыванию с Traefik ([638df5d](http://192.168.100.56:3000/denozord/auth-portal/commit/638df5d))
* refactor(auth): streamline logout route and update route tree for logout integration ([a4ece3d](http://192.168.100.56:3000/denozord/auth-portal/commit/a4ece3d))
* First Commit ([bac95bd](http://192.168.100.56:3000/denozord/auth-portal/commit/bac95bd))