refactor(scum): declare protected run requests

openspec/changes/move-scum-feature-ownership-to-plugin/tasks.md

@@ -1,22 +1,17 @@
-## 1. Replace version gates with runtime probes
+## 1. Reopen the architecture boundary
 
-- [x] 1.1 Remove SCUM/game/UE4SS/database build, revision, and version feature gates from the change contract, manifest-facing feature layer, Companion registry, adapters, and tests.
-- [x] 1.2 Make handler availability server-bound and capability/schema-probe based; isolate failure to the affected command.
+- [x] 1.1 Replace the prior SQL/RCON prohibition and fixed SCUM command template in proposal, design, and specifications with generic protected request semantics.
+- [x] 1.2 Preserve runtime probe isolation while removing every SCUM/UE4SS/database build, revision, and version gate.
 
-## 2. Establish typed Run/Companion boundaries
+## 2. Define browser-side protected request contracts
 
-- [x] 2.1 Define restricted typed ports for configuration, player state, rewards, notifications, and fixed server administration with no raw paths, DSNs, rows, credentials, SQL, shell, sockets, or RCON.
-- [x] 2.2 Parse bounded Run stdout/stderr records into semantic events; skip unknown formats with bounded diagnostics and irreversible per-server correlation.
-- [x] 2.3 Implement state pre-read, safe-window, allowlisted write, and read-after-write confirmation with typed results.
-- [x] 2.4 Implement frozen typed reward delivery results without automatic unknown retries.
-- [x] 2.5 Preserve the fixed private vehicle-spawn template and its allowlist.
+- [x] 2.1 Add generic SQL, RCON, and management-program protected transport declarations to the manifest schema, platform domain validation, and plugin SDK.
+- [x] 2.2 Permit only a declared bounded request-text field for protected commands; continue rejecting credentials, DSNs, paths, raw connections, direct sockets, and host OS shell material.
+- [x] 2.3 Keep queue, approval, server/tenant isolation, expiry, and Run-facing protected payload semantics generic; redact text from browser responses and audit summaries.
+- [x] 2.4 Declare SCUM plugin protected database and management transports without adding SCUM parsing or a fixed command template.
 
-## 3. Complete plugin-owned migration
+## 3. Verify and deliver
 
-- [x] 3.1 Remove version-scoped feature catalogs, page context, API requests, and migration flags in favor of runtime schema/capability availability.
-- [x] 3.2 Keep platform records read-only with provenance and leave platform-web generic.
-
-## 4. Verify and deliver
-
-- [x] 4.1 Run Companion, plugin, manifest, OpenSpec strict, structure, and scoped source-boundary verification.
-- [x] 4.2 Stage scoped files, commit, and push `main`.
+- [x] 3.1 Update focused Go and TypeScript tests for declarations, request generation, redaction, and safe rejection.
+- [x] 3.2 Run focused Go/TS tests, OpenSpec strict validation, and structure verification.
+- [ ] 3.3 Stage scoped files, commit, and push `main` (commit created; push remains blocked by remote SSH access).