Centralize legacy network TLS policy

This commit is contained in:
2026-06-04 17:53:49 +02:00
parent c698de1482
commit 148aceb705
12 changed files with 73 additions and 26 deletions

View File

@@ -664,6 +664,11 @@ App-owned curl helpers for download, upload, and license checks now ask
local Android branches from those helpers while preserving Android's existing
TLS-verification bypass in the legacy adapter until a network/platform service
owns cloud transport.
The remaining legacy curl sites in `Asset::open_url`, `LogRemote::net_init`,
and `NodeDialogCloud::load_thumbs_thread` now consume the shared
`pp_platform_api` default TLS policy helper instead of spelling local Android
branches; this keeps the current Android behavior aligned with
`PlatformServices` while a dedicated network service is still pending.
The Tools menu SonarPen entry now asks `PlatformServices` whether SonarPen is
available and dispatches startup through the same service, preserving the
current iOS Objective-C bridge in the legacy adapter while removing iOS branches
@@ -780,8 +785,10 @@ the `CloudServices` app-core boundary and `src/legacy_cloud_services.*`, keeping
planning adapters while legacy save, progress UI, network, dialog, canvas-open,
layer-refresh, and action-history work remains tracked under `DEBT-0038`.
The app-owned curl upload/download/license helpers now consume the platform TLS
verification policy through `PlatformServices`; retained cloud/network
execution remains tracked under `DEBT-0038`.
verification policy through `PlatformServices`, and the retained Asset,
LogRemote, and cloud browse-dialog curl sites consume the same default platform
policy helper; retained cloud/network execution remains tracked under
`DEBT-0038`.
`pano_cli parse-layout` exercises the XML layout path. Continue expanding
document behavior toward legacy Canvas parity and then port OpenGL classes
behind the renderer boundary.
@@ -1728,7 +1735,7 @@ Results:
native UI/window state save dispatch, prepared-file writable target dispatch,
prepared-file export-dialog policy dispatch, work-directory document export
collection policy dispatch, network TLS verification policy dispatch,
SonarPen availability/startup dispatch,
default network TLS policy coverage, SonarPen availability/startup dispatch,
live asset/layout reload policy dispatch,
diagnostic hook dispatch, per-frame platform hook dispatch, picker callback
dispatch, and prepared-file save/download callback dispatch. The live Windows