rcourtman 93bccaff18 Update the Pro binary in-app from the license server download broker ... The in-app updater and the unattended timer both target the public rcourtman/Pulse community assets, so a Pro install that used them was silently downgraded to community. Guard 2 (983a89326) blocked in-app apply on the Pro edition, which stopped the downgrade but left Pro installs with no update path except manual portal downloads. That friction is a plausible driver of the runtime split: as of 2026-07-08 only 10 of 66 active paid licenses have any Pro-runtime install. Root fix: the compiled Pro binary now checks and applies updates through the license server download broker (GET /v1/downloads/pulse-pro with the installation token and instance fingerprint). The check compares against the broker's pinned private release instead of GitHub, respecting the stable/rc channel guard. Apply re-resolves fresh signed R2 URLs at apply time, verifies the archive against the same pinned pulse-installer SSHSIG key plus the broker manifest sha256, and refuses GitHub-shaped download URLs outright. An unactivated Pro binary still refuses with the portal fallback. The community edition path is unchanged. The update banner restores in-app apply for auto-updatable Pro deployments and keeps the portal instructions for deployments the updater cannot drive (Docker). scripts/pulse-auto-update.sh now skips when the installed binary reports Pulse Pro so the unattended timer can never reinstall community over Pro. Note: internal/updates/pro_update.go and manager_pro_update_test.go for this change landed one commit early inside 313552deb via a parallel session committing a shared staged index; this commit completes the wiring they belong to.		2026-07-08 23:39:37 +01:00
..
backfill_release_assets_test.go	Add historical release asset backfill workflow	2026-04-22 17:25:58 +01:00
build_release_assets_test.go	Pin the OAuth Tailscale path in the update-demo workflow test	2026-07-08 23:23:20 +01:00
docker_entrypoint_test.go	Avoid tenant runtime image copy-up	2026-04-24 09:21:42 +01:00
install_docker_sh_test.go	Prepare v6.0.5 RC4 release packet	2026-07-08 13:10:06 +01:00
install_ps1_test.go	Prepare v6.0.0 release candidate	2026-06-04 14:07:14 +01:00
install_sh_test.go	Surface agent auth failures and staleness instead of a silent 401 loop	2026-07-08 08:35:46 +01:00
provider_msp_deploy_test.go	Build control-plane image with embedded frontend assets	2026-07-04 14:46:53 +01:00
pulse_auto_update_test.go	Update the Pro binary in-app from the license server download broker	2026-07-08 23:39:37 +01:00
release_ldflags_test.go	Require signed unified agent release assets	2026-04-22 02:00:29 +01:00
root_install_sh_test.go	Add Proxmox token smoke diagnostics	2026-07-07 10:10:16 +01:00
uninstall_sensor_proxy_test.go	Prepare v6.0.0 release candidate	2026-06-04 14:07:14 +01:00