refactor(scum): declare protected run requests

2026-07-29 22:37:16 +08:00
parent d7465bfd32
commit 99be8f0f3a
28 changed files with 497 additions and 152 deletions
@@ -10,7 +10,8 @@ import (
 )

 // SafeAdapter is intentionally narrow: it receives typed values only and has
-// no raw RCON, SQL, host-path, credential, or shell access.
+// no direct transport, host-path, credential, or shell access. Protected SQL,
+// RCON, and management-program text is forwarded to Run by Platform, not here.
 type SafeAdapter interface {
 	ReadConfiguration(context.Context) (map[string]any, error)
 	PatchConfiguration(context.Context, map[string]any) (map[string]any, error)