Route app network TLS policy through platform services

This commit is contained in:
2026-06-04 17:35:24 +02:00
parent 401ce33498
commit 883be98557
10 changed files with 73 additions and 22 deletions

View File

@@ -554,12 +554,14 @@ Known local toolchain state:
callbacks, recording cleanup, exported-image publishing, persistent storage
flushing, document browse roots, native UI/window state saving, live
asset/layout reload policy, diagnostic stacktrace/crash hooks,
prepared-file writable target selection, and prepared-file save/download
handoff; PPBR and MP4 export dialogs consume the same prepared-file policy
at runtime instead of spelling mobile/Web branches locally, and layer/frame
collection export dialogs consume the work-directory collection policy before
`pp_app_core` plans immediate collection export versus directory-picker stem
export;
prepared-file writable target selection, network TLS verification policy,
and prepared-file save/download handoff; PPBR and MP4 export dialogs consume
the same prepared-file policy at runtime instead of spelling mobile/Web
branches locally, layer/frame collection export dialogs consume the
work-directory collection policy before `pp_app_core` plans immediate
collection export versus directory-picker stem export, and app-owned curl
upload/download/license helpers consume the TLS policy instead of spelling
Android branches locally;
Windows
live app execution now uses injected
`WindowsPlatformServices` from
@@ -595,10 +597,12 @@ Known local toolchain state:
canvas project-open, layer UI, and action-history execution.
- `src/legacy_cloud_services.*` is the current app-shell bridge for cloud
upload, bulk upload, browse dialog, and download execution. It keeps those
live paths on the `pp_app_core` `CloudServices` contract while legacy
save-before-upload, progress/message UI, network upload/download helpers,
OpenGL context guarding, `NodeDialogCloud`, project open, layer refresh, and
action-history reset remain tracked by `DEBT-0038`.
live paths on the `pp_app_core` `CloudServices` contract while the app-owned
curl upload/download/license helpers now ask `PlatformServices` for TLS
verification policy. Legacy save-before-upload, progress/message UI, network
upload/download helper ownership, OpenGL context guarding, `NodeDialogCloud`,
project open, layer refresh, and action-history reset remain tracked by
`DEBT-0038`.
- `pano_cli simulate-app-session` exposes `pp_app_core` project-open,
app-close, save, save-as, save-version, and save-before-workflow decisions
as JSON and is covered for clean, dirty, already-prompting, missing-canvas,