geenforce: HTTPS payload delivery (blob store + endpoint)

plugins/geenforce/serializer.py

@@ -73,6 +73,15 @@ def entry_to_dict(entry):
     for attr, key in _BOOL_FLAGS:
         if getattr(entry, attr):
             result[key] = True
+    # Payload transport for share-less (http/inline) delivery. Omitted for the
+    # default 'smb' source so existing share manifests round-trip unchanged; the
+    # client fetches GET /api/geenforce/payload/<PayloadSha256> for http/inline.
+    if entry.payloadsource and entry.payloadsource != 'smb':
+        result['PayloadSource'] = entry.payloadsource
+        if entry.payloadsha256:
+            result['PayloadSha256'] = entry.payloadsha256
+        if entry.payloadref:
+            result['PayloadRef'] = entry.payloadref
     # InUseCheck (nested object + Processes[]).
     if entry.inusecheck:
         procs = []