Pulse/pkg
rcourtman 983a89326f Block in-app self-update on the Pro binary to prevent silent downgrade
The in-app updater and install.sh both fetch the public community build from
github.com/rcourtman/Pulse. On non-Docker Pro installs (systemd, proxmoxve,
source) the "Apply Update" button was live, so applying an update replaced the
separately compiled Pro binary with community and silently stripped Audit,
RBAC, Reporting, and SSO from a paying customer. Docker was already blocked;
nothing else was.

Add a dependency-free pkg/edition marker (defaults to community) that the Pro
binary flips via enterpriseruntime.Initialize, mirroring the existing
coreaudit.SetLogger / server.SetBusinessHooks registration seam. ApplyUpdate
now refuses when the edition is Pro, pointing at the Private Release Access
portal (https://pulserelay.pro/download.html) and the install.sh --archive
path. The gate keys off the compiled binary, not license state: a community
binary with an active license still self-updates as before.

The update banner hides the in-app apply affordance and shows portal
instructions for the Pro runtime, keyed off the existing runtime-identity
signal (runtime.build) rather than a new payload field, so nothing extra is
plumbed through the version API and the frontend reuses the canonical
"which binary am I" contract. The backend gate is the hard guarantee; the
banner is the UX layer.

Guard 2 of the Pro download/update experience spec.
2026-07-08 10:02:04 +01:00
..
agents Add typed NVIDIA GPU stats 2026-06-30 09:43:33 +01:00
aicontracts backend and governance: MCP contract, agent capabilities, API, and release-control 2026-06-23 17:26:15 +01:00
audit Fix legacy audit monotonic timestamps 2026-07-06 16:20:55 +01:00
auth Clear all errcheck and gofmt violations so make lint gates on real findings 2026-06-09 21:42:21 +01:00
cloudauth fix(hosted): preserve direct handoff membership continuity 2026-03-26 23:40:02 +00:00
db feat: Pulse v6 release 2026-03-18 16:06:30 +00:00
discovery Pin discovery HTTP probes to captured TLS peers 2026-03-29 19:32:56 +01:00
edition Block in-app self-update on the Pro binary to prevent silent downgrade 2026-07-08 10:02:04 +01:00
extensions Allow clearing SSO provider restriction fields from Settings 2026-07-07 22:04:46 +01:00
fsfilters Improve Machines disk summaries 2026-06-03 11:09:58 +01:00
licensing Clarify v5 migration recovery states 2026-07-07 21:46:07 +01:00
metrics Stabilize metrics rollup chunk proof 2026-07-03 21:57:14 +01:00
pbs Fix PBS job task history filters 2026-05-13 17:09:45 +01:00
pmg Harden outbound URLs and file-backed storage 2026-03-29 12:47:55 +01:00
proxmox Fix Proxmox tag color style propagation 2026-06-25 17:14:00 +01:00
pulsecli Dedupe internal/api handler families behind shared flows and generics 2026-06-10 10:52:05 +01:00
reporting fix(reporting): resolve report subjects through the canonical unified view and paginate the metric card grid 2026-06-10 22:02:48 +01:00
securityutil Allow local DNS agent HTTP URLs 2026-07-06 13:53:19 +01:00
server Fix patch-release follow-up regressions 2026-07-04 18:37:59 +01:00
tlsutil fix: route local-network API connections through subprocess to bypass Tailscale NECP 2026-06-26 22:13:22 +01:00