geenforce: HTTPS payload delivery (blob store + endpoint)

plugins/geenforce/plugin.py

@@ -21,8 +21,8 @@ from .api import geenforce_bp
 from .models import (
     ManifestScope, ManifestEntry, ManifestEntryPcType, ManifestEntryHostname,
     ManifestEntryMachineNumber, ManifestInUseCheck, ManifestInUseCheckProcess,
-    ManifestPublishedVersion, ManifestPayload, ManifestEnforcementReport,
-    ManifestEnforcementResult, PcTypeAlias,
+    ManifestPublishedVersion, ManifestPayload, ManifestBlob,
+    ManifestEnforcementReport, ManifestEnforcementResult, PcTypeAlias,
 )
 from .filters import ALIAS_GROUPS
 
@@ -62,7 +62,7 @@ class GeEnforcePlugin(BasePlugin):
             ManifestScope, ManifestEntry, ManifestEntryPcType,
             ManifestEntryHostname, ManifestEntryMachineNumber,
             ManifestInUseCheck, ManifestInUseCheckProcess,
-            ManifestPublishedVersion, ManifestPayload,
+            ManifestPublishedVersion, ManifestPayload, ManifestBlob,
             ManifestEnforcementReport, ManifestEnforcementResult, PcTypeAlias,
         ]
 
@@ -191,4 +191,24 @@ class GeEnforcePlugin(BasePlugin):
                 path = export_scope_to_share(scopename, phase, shareroot)
                 click.echo(f"Exported to {path}.")
 
+        @geenforce_cli.command('add-payload')
+        @click.argument('filepath')
+        @click.option('--contenttype', default=None)
+        def add_payload_cmd(filepath, contenttype):
+            """Store a file in the content-addressed payload store for HTTPS
+            delivery, and print its sha256. Set an entry's PayloadSource=http +
+            PayloadSha256 to serve it from GET /api/geenforce/payload/<sha>."""
+            import os as _os
+            from flask import current_app
+            from .service import store_blob
+
+            with current_app.app_context():
+                with open(filepath, 'rb') as handle:
+                    raw = handle.read()
+                sha = store_blob(raw, _os.path.basename(filepath), contenttype)
+                db.session.commit()
+                click.echo(f"stored {len(raw)} bytes")
+                click.echo(f"PayloadSha256: {sha}")
+                click.echo(f"URL: /api/geenforce/payload/{sha}")
+
         return [geenforce_cli]