9 Commits

Include renames

Author	SHA1	Message	Date
mrhid6	5dda3b5c4a	feat: vulnerability scanning pipeline, matcher, scheduler and API ... Completes tasks 10-15 and fixes what was outstanding: - vulndb.Pull implemented with oras-go, streaming the ~50MB layer and staging both files before replacing either, so a failed pull leaves the previous database intact rather than a half-written one. - db.go: Vulnerability.Severity is a string, not trivy Severity, so the int conversion did not compile. Severity now resolves vendor (highest when vendors disagree) then NVD then unknown, and CVSS is read too. - findings.go: added sweepFixedFindings plus the fleet query, severity counts, rescan flag and accept/unaccept the API needs. - vulnrules.go: added rule CRUD and the digest builder. ResolveTargets returns []models.Server, not []string, so filterByServers was wrong. - api/vulnerabilities.go was an empty file while handlers.go registered twelve routes against it; written, grouped by CVE. - shared/mail: added the missing sender. The templates were orphaned and the HTML one was a copy of the text one, defining "subject" (which html/template would escape) and emitting no markup. render.go parses every template in init(), so a bad one panics server, admin and sitesvc at boot — go build never runs init(), which is why nothing complained. - notify: digests dispatch through their own path so SMTP gets the digest template rather than arriving dressed as a monitor alert.	2026-08-06 14:33:46 +01:00
mrhid6	1f08e90009	feat: Removed email alert settings	2026-08-03 14:40:15 +01:00
mrhid6	dabe6fe3aa	feat: Updated package path to match repo	2026-07-28 10:01:40 +01:00
mrhid6	a232c74990	feat: Move mail system to shared	2026-07-28 09:50:46 +01:00
mrhid6	4f041d2f4b	refactor(server): rename Org to Instance ... Adds migration 0004_org_to_instance, the ScopedCollections list, the AssertNoScopedCollectionMissed boot check, and moves EnsureAuthIndexes into its own file. Two ordering constraints the rename exposed, both now enforced and commented: - 0004 must run BEFORE EnsureAuthIndexes. The index builder creates instances.slug, which would create an empty instances collection and make 0004 refuse to rename orgs onto an existing target. - Migrations 0001 to 0003 run BEFORE 0004 and still read and write org_id, so they use a private legacyOrg struct rather than shared/models.	2026-07-24 13:58:41 +01:00
mrhid6	1a6cf03c03	feat: Removed comments	2026-07-24 09:51:30 +01:00
mrhid6	19b4aef95b	feat(server): dark-themed HTML email notification template	2026-07-21 15:14:57 +01:00
mrhid6	45178d455e	fix(server): SMTP dispatch dial timeout + implicit/STARTTLS handling	2026-07-21 14:46:15 +01:00
mrhid6	8f3a27100f	feat(server): multi-channel monitor notifications	2026-07-21 14:22:55 +01:00