refactor(scum): declare protected run requests

platform/domain/game_client_bridge.go

@@ -9,6 +9,7 @@ const (
 	GameClientBridgeCommandClaimed   GameClientBridgeCommandState = "claimed"
 	GameClientBridgeCommandSucceeded GameClientBridgeCommandState = "succeeded"
 	GameClientBridgeCommandFailed    GameClientBridgeCommandState = "failed"
+	GameClientBridgeCommandUnknown   GameClientBridgeCommandState = "unknown"
 	GameClientBridgeCommandCancelled GameClientBridgeCommandState = "cancelled"
 	GameClientBridgeCommandExpired   GameClientBridgeCommandState = "expired"
 )
@@ -39,6 +40,17 @@ type GameClientBridgeCommandDeclaration struct {
 	ResultSchemaRef  string
 	TimeoutSeconds   int
 	MaxPayloadBytes  int
+	ProtectedRequest *GameClientBridgeProtectedRequestDeclaration
+}
+
+// GameClientBridgeProtectedRequestDeclaration binds plugin-generated text to a
+// logical server transport. It never carries its resolved connection details.
+type GameClientBridgeProtectedRequestDeclaration struct {
+	Kind         string
+	TransportKey string
+	TargetKey    string
+	TextField    string
+	MaxTextBytes int
 }
 
 type GameClientBridgeSnapshotDeclaration struct {
@@ -108,6 +120,7 @@ type GameClientBridgeResultStatus string
 const (
 	GameClientBridgeResultSucceeded GameClientBridgeResultStatus = "succeeded"
 	GameClientBridgeResultFailed    GameClientBridgeResultStatus = "failed"
+	GameClientBridgeResultUnknown   GameClientBridgeResultStatus = "unknown"
 	GameClientBridgeResultCancelled GameClientBridgeResultStatus = "cancelled"
 )
 
@@ -384,6 +397,12 @@ func CopyGameClientBridgePayload(value map[string]any) map[string]any {
 
 func CopyGameClientBridgeManifest(value GameClientBridgeManifest) GameClientBridgeManifest {
 	value.Commands = append([]GameClientBridgeCommandDeclaration(nil), value.Commands...)
+	for index := range value.Commands {
+		if value.Commands[index].ProtectedRequest != nil {
+			copy := *value.Commands[index].ProtectedRequest
+			value.Commands[index].ProtectedRequest = &copy
+		}
+	}
 	value.Snapshots = append([]GameClientBridgeSnapshotDeclaration(nil), value.Snapshots...)
 	value.QueryTemplates = append([]GameClientBridgeQueryTemplateDeclaration(nil), value.QueryTemplates...)
 	value.Pages = append([]GameClientBridgePageContract(nil), value.Pages...)

platform/domain/resources.go

@@ -1045,6 +1045,9 @@ const (
 	JobCapabilityRemoteRunDBSQLiteQuery = "remote.run.db.sqlite.query"
 	JobCapabilityRemoteRunLogsTransfer  = "remote.run.logs.transfer"
 	JobCapabilityRemoteRunRCONCommand   = "remote.run.rcon.command"
+	JobCapabilityRemoteRunProtectedSQL  = "remote.run.protected.sql"
+	JobCapabilityRemoteRunProtectedRCON = "remote.run.protected.rcon"
+	JobCapabilityRemoteRunProgram       = "remote.run.program.command"
 	JobCapabilityRunSelfUpdate          = "run.self-update"
 	JobCapabilityDistributionBuild      = "distribution.build"
 	JobCapabilityDependenciesCheck      = "dependencies.check"