Updates kotskinds dependency to include LicenseWrapper support for handling
both v1beta1 and v1beta2 License CRDs. This enables version-agnostic license
parsing required for supporting multiple license API versions.

Also includes transitive dependency updates to controller-runtime v0.22.3
and protobuf v1.36.8.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

Updates test fixtures to use simpler entitlement structure that matches the
format used in actual KOTS licenses, making tests more realistic and easier
to maintain.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

Adds comprehensive test coverage for ParseLicense() and ParseLicenseFromBytes()
with both v1beta1 and v1beta2 license formats. Tests verify:
- Version detection (IsV1/IsV2)
- Common field access through LicenseWrapper
- Error handling for invalid versions and malformed YAML
- File-based and byte-based parsing

These tests drive the implementation changes in the next commit (TDD red phase).

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

…support

Updates ParseLicense() to return licensewrapper.LicenseWrapper instead of
*kotsv1beta1.License, enabling version-agnostic handling of both v1beta1 and
v1beta2 licenses.

Changes:
- ParseLicense() now returns LicenseWrapper with version detection
- New ParseLicenseFromBytes() for parsing from byte arrays
- Leverages kotskinds licensewrapper.LoadLicenseFromBytes() for automatic
  version detection and unified access patterns

This completes Phase 1 of the v1beta2 license migration (TDD green phase).
All tests pass.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

…bstraction

Updates the metrics reporter to use the LicenseWrapper type instead of direct
*kotsv1beta1.License pointers. This change supports the multi-version license
abstraction layer, allowing the metrics system to work with both v1beta1 and
v1beta2 licenses through a unified interface.

Changes:
- LicenseID() now accepts LicenseWrapper and uses GetLicenseID() method
- License() now returns LicenseWrapper instead of *kotsv1beta1.License
- Removed nil checks as empty wrapper is safer than nil pointer

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

…n license support

Migrates the installer CLI commands to use LicenseWrapper instead of direct
*kotsv1beta1.License pointers. This enables the installer to work with both
v1beta1 and v1beta2 license formats through a unified abstraction layer.

Changes to install.go:
- installConfig.license field now uses LicenseWrapper type
- getLicenseFromFilepath() returns LicenseWrapper
- All license field accesses updated to use wrapper methods (GetLicenseID,
  GetAppSlug, GetChannelID, GetChannelName, etc.)
- checkChannelExistence() accepts LicenseWrapper parameter
- maybePromptForAppUpdate() uses wrapper methods for license checks
- printSuccessMessage() updated to work with LicenseWrapper

Changes to release.go:
- getCurrentAppChannelRelease() accepts LicenseWrapper parameter
- License ID access updated to use GetLicenseID() method

Note: This commit still has 2 compilation errors remaining that require Phase 4
changes to addons.InstallOptions and kubeutils.RecordInstallationOptions structs.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

…e abstraction

Updates core package types to use licensewrapper.LicenseWrapper instead of
*kotsv1beta1.License to support multiple license API versions (v1beta1 and v1beta2).

Changes:
- pkg/addons: Updates InstallOptions and KubernetesInstallOptions License field
- pkg/kubeutils: Updates RecordInstallationOptions License field and calls to
  wrapper methods (IsDisasterRecoverySupported(), IsEmbeddedClusterMultiNodeEnabled())

This enables transparent handling of both v1beta1 and v1beta2 licenses throughout
the addon installation and Kubernetes utility layers.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

…lti-version support

Completes the migration to licensewrapper.LicenseWrapper in infrastructure managers,
enabling support for both v1beta1 and v1beta2 license API versions.

Changes:
- api/internal/managers/kubernetes/infra: Updates all internal functions to accept
  LicenseWrapper, switches to helpers.ParseLicenseFromBytes() for parsing, updates
  field accesses to use wrapper methods
- api/internal/managers/linux/infra: Updates all internal functions to accept
  LicenseWrapper, switches to helpers.ParseLicenseFromBytes() for parsing, updates
  field accesses to use wrapper methods

Result: Project now compiles successfully with full LicenseWrapper support across
all major components (CLI, metrics, packages, and managers).

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

…ion support

This commit refactors the template engine and related components to use
LicenseWrapper, enabling support for both v1beta1 and v1beta2 license
formats:

- Template engine now accepts LicenseWrapper instead of concrete v1beta1
  License type
- All license field access goes through wrapper methods (GetAppSlug,
  GetLicenseID, IsSnapshotSupported, etc.)
- App config and release managers updated to accept LicenseWrapper
  parameters
- Install controller now uses helpers.ParseLicenseFromBytes for license
  parsing
- Added comprehensive tests with wrapper helpers for both v1beta1 and
  v1beta2
- Tests verify backward compatibility with v1beta1 while supporting
  v1beta2

This change maintains backward compatibility while enabling the system to
work with both license versions through the abstraction layer.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

…e support

Updates installer CLI test files to work with the LicenseWrapper abstraction
introduced in previous refactoring commits. Changes include:

- Wraps v1beta1 license objects in LicenseWrapper before passing to updated
  functions (maybePromptForAppUpdate, getCurrentAppChannelRelease)
- Adds required apiVersion and kind headers to all test license YAML strings
  to satisfy licensewrapper.LoadLicenseFromPath validation requirements
- Imports licensewrapper package in both test files

These changes ensure all CLI tests pass with the new multi-version license
support while maintaining existing test coverage and behavior.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

…er compatibility

After code review, several test files needed updates to provide proper
Kubernetes resource format (with apiVersion and kind) for license test data,
as licensewrapper.LoadLicenseFromBytes() requires these fields.

Changes:
- api/internal/managers/app/install/install_test.go: Use proper YAML format
- pkg/kubeutils/installation_test.go: Wrap licenses in LicenseWrapper with proper closing braces
- Other test files: Minor formatting improvements

All tests now pass successfully.

Integration tests were creating inline license fixtures without proper
Kubernetes resource headers. licensewrapper.LoadLicenseFromBytes() requires
apiVersion and kind fields for version detection.

Fixed both linux and kubernetes install test fixtures to include:
- apiVersion: kots.io/v1beta1
- kind: License

This ensures integration tests work with the new LicenseWrapper abstraction.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

Removes the unused sigs.k8s.io/yaml import that is no longer needed after
migrating to LicenseWrapper. The kyaml package was previously used for
unmarshaling license data, but this is now handled by the
licensewrapper.LoadLicenseFromBytes() function.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

Updates the install and upgrade infrastructure managers to use LicenseWrapper
methods instead of directly accessing license Spec fields. Key changes:

- install.go: Fixes IsDisasterRecoverySupported() method call (was missing
  parentheses, treating it as a field instead of a method)
- upgrade.go: Migrates from kyaml.Unmarshal to LoadLicenseFromBytes() for
  license parsing, and updates all license field access to use wrapper
  methods (GetLicenseID(), IsDisasterRecoverySupported(),
  IsEmbeddedClusterMultiNodeEnabled())

This ensures the infrastructure layer works correctly with both v1beta1 and
v1beta2 license formats through the unified wrapper interface.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

… access

Updates the template engine to work correctly with LicenseWrapper:

- Changes nil checks from checking the wrapper directly to using
  GetLicenseID() == "" to determine if license data is present
- Updates channel access to use GetChannels() and GetChannelName() wrapper
  methods instead of direct Spec.Channels access
- Removes unnecessary error returns from licenseFieldValue() for consistency
  with string return type
- Adds missing closing brace in license_test.go
- Wraps test licenses in ChannelName tests to match production usage

These changes ensure templates work with both v1beta1 and v1beta2 licenses
through the unified wrapper interface.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

…ntly

Updates the install and upgrade CLI commands to use LicenseWrapper getter
methods and properly handle entitlement values:

install.go:
- Fixes metrics reporter to use GetLicenseID() and GetAppSlug() instead of
  accessing Spec fields directly
- Fixes addon install options to use installCfg.license instead of
  flags.license for consistency
- Fixes expires_at entitlement parsing to properly extract string value
  using type assertion on Value() interface{} result instead of accessing
  StrVal field directly

upgrade.go:
- Updates license field type from *kotsv1beta1.License to
  licensewrapper.LicenseWrapper
- Updates metrics reporter to use GetLicenseID() and GetAppSlug() wrapper
  methods

These changes complete the CLI migration to LicenseWrapper, enabling support
for both v1beta1 and v1beta2 license formats.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

… calls

When Engine has no license, e.license is a zero-value LicenseWrapper{V1: nil, V2: nil}.
Calling GetLicenseID() on this would panic with nil pointer dereference.
Changed to check e.license.V1 == nil && e.license.V2 == nil directly before accessing.

LicenseFieldValue now returns empty string instead of error when license
or release data is missing. This is more consistent with template behavior
where missing data results in empty strings rather than template errors.

Updated test expectations:
- TestEngine_LicenseFieldValueWithoutLicense: expect empty string
- TestEngine_LicenseFieldValue_EndpointWithoutReleaseData: expect empty string

Fix the expires_at entitlement access to properly use the LicenseWrapper
API. The EntitlementField.GetValue() returns an EntitlementValue by value,
and we need to call Value() on it to get the underlying interface{} value.

Changes:
- Get EntitlementValue from EntitlementField using GetValue()
- Call Value() method to extract the underlying value
- Properly type assert to string before parsing the expiration date

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

…ts-license-v1beta2

Updates TestSetupInfra to use complete Kubernetes object format for
license data. The licensewrapper.LoadLicenseFromBytes() function
requires a proper Kubernetes object with apiVersion and kind fields.

This fixes all 9 TestSetupInfra test cases that were failing with:
"Object 'Kind' is missing in spec: licenseID: test-license"

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

Complete conversion of `licensewrapper.LicenseWrapper` from value-based
to pointer-based passing across CLI, template engine, managers, and utilities.

Phase 3: CLI Commands
- Updated `installConfig` and `upgradeConfig` structs to use pointer license
- Converted `verifyLicense`, `checkChannelExistence`, `maybePromptForAppUpdate`,
  and `printSuccessMessage` functions to use pointers
- Updated `newReplicatedAPIClient`, `syncLicense`, and `getCurrentAppChannelRelease`
- Added nil checks before accessing license methods
- All function signatures now consistently use `*licensewrapper.LicenseWrapper`

Phase 4: Template Engine
- Updated `Engine` struct license field to pointer type
- Converted `WithLicense` option function to accept pointer
- Added nil checks in all license accessor methods:
  - `LicenseAppSlug`, `LicenseID`, `LicenseIsEmbeddedClusterDownloadEnabled`
  - `licenseFieldValue`, `licenseDockerCfg`, `channelName`
- Ensures template rendering handles nil licenses gracefully

Phase 5: Infrastructure Managers
- Updated `recordInstallation`, `installAddOns`, and `initInstallComponentsList`
  in both Kubernetes and Linux infra managers
- Converted function signatures to use pointer types
- Maintains compatibility with updated option structs

Phase 6: App Managers
- Updated `appConfigManager` and `appReleaseManager` structs
- Converted `WithLicense` option functions in both managers to use pointers
- Ensures compatibility with template engine pointer types

Phase 7: Kubernetes Utilities
- Updated `RecordInstallationOptions`, `InstallOptions`, and
  `KubernetesInstallOptions` structs
- Changed `License` fields to pointer types
- Maintains consistency across all option passing patterns

All builds successful. Core tests passing. Ready for comprehensive validation.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

Completes Phase 8 of the LicenseWrapper pointer conversion by fixing
test files to use pointer-based LicenseWrapper instead of value-based.

Changes:
- Updated test helper functions to return *licensewrapper.LicenseWrapper
  - wrapLicense() in api/pkg/template/license_test.go
  - wrapLicenseForExecuteTests() in api/pkg/template/execute_test.go

- Fixed struct literals to use pointer syntax:
  - Changed `licensewrapper.LicenseWrapper{...}` to `&licensewrapper.LicenseWrapper{...}`
  - Updated in: install_test.go, release_test.go, install_test.go (linux), installation_test.go

- Fixed function calls where LoadLicenseFromBytes() returns value type:
  - Changed `WithLicense(wrapper)` to `WithLicense(&wrapper)` in license_test.go:643

All core package tests now pass:
- pkg/helpers/
- pkg/metrics/
- pkg-new/replicatedapi/
- api/pkg/template/
- pkg/addons/

Build verification completed successfully for installer and local-artifact-mirror.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

Fixes two issues in cmd/installer/cli/install_test.go:
- Line 559: Change variable declaration from value type to pointer type
  (var license licensewrapper.LicenseWrapper -> var license *licensewrapper.LicenseWrapper)
- Line 984: Update test assertion to check for nil instead of calling method on nil pointer
  (assert.Empty(license.GetLicenseID()) -> assert.Nil(license))

These fixes resolve compilation errors and nil pointer dereference panics
in test cases where no license is provided, completing the LicenseWrapper
pointer conversion refactor.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

Adds X-Replicated-License-Version header to reporting info to distinguish
between v1beta1 and v1beta2 licenses when syncing with the Replicated API.

Changes:
- reporting.go: Add license version header (v1beta1 or v1beta2) based on
  the license wrapper's version
- client_test.go: Add comprehensive test coverage for license version
  reporting with both v1beta1 and v1beta2 licenses

This enables the Replicated API to track which license version is being
used by embedded clusters for better analytics and support.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

Replaces direct Spec field access with the GetAppSlug() getter method
in the error message on line 831. This prevents panic when handling v2
licenses or malformed license structures where Spec may be nil.

The comparison on line 829 already correctly uses GetAppSlug(), so this
change ensures consistency and safety throughout the verifyLicense function.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

Adds defensive nil checks at 7 locations where LicenseWrapper pointers
are dereferenced to prevent potential nil pointer panics. These checks
follow defense-in-depth security principles by validating the license
pointer before use, even in code paths where the license should already
be validated.

Changes:
- cmd/installer/cli/install.go: Added nil check before addon install
  options configuration (line 680-683) and in KOTS installer closure
  (line 706-709)
- cmd/installer/cli/upgrade.go: Added nil check before metrics reporter
  initialization (line 127-130) and in license sync condition (line 263)
- api/internal/managers/linux/infra/install.go: Added nil checks in
  initInstallComponentsList (line 76-78) and getAddonInstallOpts
  (line 299-301)
- pkg/kubeutils/installation.go: Added nil check in RecordInstallation
  (line 136-139)

These defensive checks provide additional safety against nil pointer
dereferences in the license handling code paths, complementing the
earlier changes to use getter methods instead of direct field access.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

Updates test assertions to use GetLicenseID() and GetAppSlug() getter
methods instead of directly accessing license.Spec fields. This aligns
test code with production patterns and ensures tests work correctly with
both v1beta1 and v1beta2 license formats.

Changes:
- Line 649: license.Spec.LicenseID -> license.GetLicenseID()
- Line 650: license.Spec.AppSlug -> license.GetAppSlug()

This completes Phase 3 of the license v1beta2 support work, ensuring
test code follows the same defensive patterns as production code.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

…tion

Adds defensive nil check for license before creating the metrics reporter
in the install command. The verifyAndPrompt function can return successfully
with a nil license in certain scenarios (no release and no license), but the
subsequent metricsReporter initialization at line 147 attempts to call
GetLicenseID() and GetAppSlug() on the potentially nil license pointer.

This nil check ensures the license is present before attempting to access
its methods, preventing a panic in the no-license-no-release edge case.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

Removes the duplicate Test_buildInstallConfig_License test from
install_test.go which was causing a vet error for function redeclaration.
The canonical version of this test remains in install_config_test.go
(line 538) and has been properly updated to use GetLicenseID() and
GetAppSlug() getter methods instead of direct Spec field access.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

…ts-license-v1beta2

Updates type signatures to use licensewrapper.LicenseWrapper instead of
kotsv1beta1.License after merge from main. This ensures consistency with
the v1beta2 license support implementation.

Changes:
- Update ClientFactory type to accept *licensewrapper.LicenseWrapper
- Update dryrun.ReplicatedAPIClient to use *licensewrapper.LicenseWrapper
- Use licensewrapper.LoadLicenseFromBytes for parsing license data

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>