refactor(scum): declare protected run requests

plugins/manifests/game-plugin.manifest.schema.json

@@ -299,7 +299,20 @@
         "payloadSchemaRef": { "$ref": "#/$defs/relativeJsonRef" },
         "resultSchemaRef": { "$ref": "#/$defs/relativeJsonRef" },
         "timeoutSeconds": { "type": "integer", "minimum": 1, "maximum": 3600 },
-        "maxPayloadBytes": { "type": "integer", "minimum": 1, "maximum": 65536 }
+        "maxPayloadBytes": { "type": "integer", "minimum": 1, "maximum": 65536 },
+        "protectedRequest": { "$ref": "#/$defs/gameClientBridgeProtectedRequest" }
+      }
+    },
+    "gameClientBridgeProtectedRequest": {
+      "type": "object",
+      "required": ["kind", "transportKey", "targetKey", "textField", "maxTextBytes"],
+      "additionalProperties": false,
+      "properties": {
+        "kind": { "enum": ["sql", "rcon", "program"] },
+        "transportKey": { "$ref": "#/$defs/logicalKey" },
+        "targetKey": { "$ref": "#/$defs/logicalKey" },
+        "textField": { "type": "string", "pattern": "^[A-Za-z][A-Za-z0-9._-]{0,79}$" },
+        "maxTextBytes": { "type": "integer", "minimum": 1, "maximum": 16384 }
       }
     },
     "gameClientBridgeSnapshot": {
@@ -384,6 +397,9 @@
         "remote.run.db.sqlite.query",
         "remote.run.logs.transfer",
         "remote.run.rcon.command",
+        "remote.run.protected.sql",
+        "remote.run.protected.rcon",
+        "remote.run.program.command",
         "client-manager.deploy",
         "client-manager.control",
         "client-manager.update",
@@ -605,7 +621,7 @@
         "prerequisites": { "type": "array", "items": { "$ref": "#/$defs/runtimeServerPrerequisite" }, "maxItems": 16 },
         "configMappings": { "type": "array", "items": { "$ref": "#/$defs/runtimeServerConfigMapping" }, "minItems": 1, "maxItems": 32, "uniqueItems": true },
         "discoveryMarkers": { "type": "array", "items": { "$ref": "#/$defs/runtimeServerDiscoveryMarker" }, "minItems": 1, "maxItems": 32, "uniqueItems": true },
-        "verificationChecks": { "type": "array", "items": { "$ref": "#/$defs/runtimeServerVerificationCheck" }, "minItems": 5, "maxItems": 16, "uniqueItems": true }
+        "verificationChecks": { "type": "array", "items": { "$ref": "#/$defs/runtimeServerVerificationCheck" }, "minItems": 4, "maxItems": 16, "uniqueItems": true }
       }
     },
     "runtimeServerPrerequisite": {
@@ -651,7 +667,7 @@
       "additionalProperties": false,
       "properties": {
         "key": { "$ref": "#/$defs/logicalKey" },
-        "kind": { "enum": ["file", "ftp", "rsync", "mysql", "sqlite", "rcon"] },
+        "kind": { "enum": ["file", "ftp", "rsync", "mysql", "sqlite", "rcon", "program"] },
         "targetKey": { "$ref": "#/$defs/logicalKey" },
         "capabilities": { "type": "array", "items": { "$ref": "#/$defs/runCapability" }, "uniqueItems": true, "minItems": 1 }
       }
@@ -789,7 +805,7 @@
       "allOf": [
         {
           "if": { "required": ["deployment"] },
-          "then": { "required": ["version", "lifecycle", "health", "compatibility", "updatePolicy"] }
+          "then": { "required": ["version", "lifecycle", "health", "updatePolicy"] }
         }
       ]
     },