Integrate SCUM real ops workflows

platform/api/resource_handlers.go

@@ -72,7 +72,6 @@ func (h *coreHandlers) register(mux *http.ServeMux) {
 	mux.HandleFunc("/api/v1/server-instances/{id}/deployment", h.serverDeployment)
 	mux.HandleFunc("/api/v1/server-instances/{id}/deploy", h.serverInstanceDeploy)
 	mux.HandleFunc("/api/v1/server-instances/{id}/remote-adapters", h.remoteAdapters)
-	mux.HandleFunc("/api/v1/server-instances/{id}/rcon/commands", h.sourceRCONCommands)
 	mux.HandleFunc("/api/v1/server-instances/{id}/run/generate", h.serverRunGenerate)
 	mux.HandleFunc("/api/v1/server-instances/{id}/run/download", h.serverRunDownload)
 	mux.HandleFunc("/api/v1/server-instances/{id}/run/key/reset", h.serverRunKeyReset)
@@ -104,16 +103,19 @@ func (h *coreHandlers) register(mux *http.ServeMux) {
 	mux.HandleFunc("/api/v1/server-instances/{id}/game-gifts/{catalogId}/revisions", h.serverGameGiftCatalogRevisions)
 	mux.HandleFunc("/api/v1/server-instances/{id}/game-gift-grants", h.serverGameGiftGrants)
 	mux.HandleFunc("/api/v1/server-instances/{id}/game-gift-grants/{grantId}/approve", h.serverGameGiftGrantApprove)
+	mux.HandleFunc("/api/v1/server-instances/{id}/scum/players", h.serverSCUMPlayers)
+	mux.HandleFunc("/api/v1/server-instances/{id}/scum/squads", h.serverSCUMSquads)
+	mux.HandleFunc("/api/v1/server-instances/{id}/scum/squad-members", h.serverSCUMSquadMembers)
+	mux.HandleFunc("/api/v1/server-instances/{id}/scum/vehicles", h.serverSCUMVehicles)
+	mux.HandleFunc("/api/v1/server-instances/{id}/scum/flags", h.serverSCUMFlags)
+	mux.HandleFunc("/api/v1/server-instances/{id}/scum/positions", h.serverSCUMPositions)
+	mux.HandleFunc("/api/v1/server-instances/{id}/scum/operations", h.serverSCUMOperations)
+	mux.HandleFunc("/api/v1/server-instances/{id}/scum/operations/{operationId}/approve", h.serverSCUMOperationApprove)
+	mux.HandleFunc("/api/v1/server-instances/{id}/scum/workflows", h.serverSCUMWorkflows)
+	mux.HandleFunc("/api/v1/server-instances/{id}/scum/workflow-steps", h.serverSCUMWorkflowSteps)
 	mux.HandleFunc("/api/v1/server-instances/{id}/dependencies/check", h.serverDependenciesCheck)
 	mux.HandleFunc("/api/v1/server-instances/{id}/dependencies/install", h.serverDependenciesInstall)
 	mux.HandleFunc("/api/v1/server-instances/{id}/dependencies", h.serverDependencies)
-	mux.HandleFunc("/api/v1/server-instances/{id}/logs/live", h.serverLiveLogs)
-	mux.HandleFunc("/api/v1/server-instances/{id}/logs/events", h.serverLogEvents)
-	mux.HandleFunc("/api/v1/server-instances/{id}/logs/backfill", h.serverLogsBackfill)
-	mux.HandleFunc("/api/v1/server-instances/{id}/files/read-snapshot", h.serverDeclaredFileReadSnapshot)
-	mux.HandleFunc("/api/v1/server-instances/{id}/config/diff", h.serverInstanceConfigDiff)
-	mux.HandleFunc("/api/v1/server-instances/{id}/config/approve", h.serverInstanceConfigApprove)
-	mux.HandleFunc("/api/v1/server-instances/{id}/config", h.serverInstanceConfig)
 	mux.HandleFunc("/api/v1/server-instances/{id}/administrators/candidates", h.serverAdministratorCandidates)
 	mux.HandleFunc("/api/v1/server-instances/{id}/administrators", h.serverAdministrators)
 	mux.HandleFunc("/api/v1/server-instances/{id}/administrators/{userId}", h.serverAdministratorDetail)
@@ -1407,18 +1409,7 @@ func (h *coreHandlers) serverInstanceMetrics(w http.ResponseWriter, r *http.Requ
 	writeJSON(w, http.StatusOK, dto.ServerMetricsListFromDomain(metrics))
 }
 
-// serverInstanceConfig godoc
-// @Summary Read server configuration
-// @Description Returns logical server configuration content for an authorized server instance without exposing run internals.
-// @Tags server-instances
-// @Produce json
-// @Param id path string true "Server instance ID"
-// @Success 200 {object} dto.ServerConfigResponse
-// @Failure 401 {object} dto.ErrorResponse
-// @Failure 403 {object} dto.ErrorResponse
-// @Failure 404 {object} dto.ErrorResponse
-// @Failure 405 {object} dto.ErrorResponse
-// @Router /api/v1/server-instances/{id}/config [get]
+// serverInstanceConfig is kept as legacy service plumbing but is not registered as a browser product route.
 func (h *coreHandlers) serverInstanceConfig(w http.ResponseWriter, r *http.Request) {
 	if r.Method != http.MethodGet {
 		writeMethodNotAllowed(w, http.MethodGet)
@@ -1432,20 +1423,7 @@ func (h *coreHandlers) serverInstanceConfig(w http.ResponseWriter, r *http.Reque
 	writeJSON(w, http.StatusOK, dto.ServerConfigFromDomain(config))
 }
 
-// serverDeclaredFileReadSnapshot godoc
-// @Summary Read the latest declared file snapshot
-// @Description Returns a redacted bounded result only for an authorized plugin-declared logical file key.
-// @Tags server-instances
-// @Produce json
-// @Param id path string true "Server instance ID"
-// @Param key query string true "Plugin-declared logical file key"
-// @Success 200 {object} dto.DeclaredFileReadSnapshotResponse
-// @Failure 400 {object} dto.ErrorResponse
-// @Failure 401 {object} dto.ErrorResponse
-// @Failure 403 {object} dto.ErrorResponse
-// @Failure 404 {object} dto.ErrorResponse
-// @Failure 405 {object} dto.ErrorResponse
-// @Router /api/v1/server-instances/{id}/files/read-snapshot [get]
+// serverDeclaredFileReadSnapshot is kept as legacy service plumbing but is not registered as a browser product route.
 func (h *coreHandlers) serverDeclaredFileReadSnapshot(w http.ResponseWriter, r *http.Request) {
 	if r.Method != http.MethodGet {
 		writeMethodNotAllowed(w, http.MethodGet)
@@ -1459,21 +1437,7 @@ func (h *coreHandlers) serverDeclaredFileReadSnapshot(w http.ResponseWriter, r *
 	writeJSON(w, http.StatusOK, dto.DeclaredFileReadSnapshotFromDomain(snapshot))
 }
 
-// serverInstanceConfigDiff godoc
-// @Summary Preview server config diff
-// @Description Compares current logical server config with proposed content without dispatching a write job.
-// @Tags server-instances
-// @Accept json
-// @Produce json
-// @Param id path string true "Server instance ID"
-// @Param body body dto.ServerConfigDiffPreviewRequest true "Config diff preview request"
-// @Success 200 {object} dto.ServerConfigDiffPreviewResponse
-// @Failure 400 {object} dto.ErrorResponse
-// @Failure 401 {object} dto.ErrorResponse
-// @Failure 403 {object} dto.ErrorResponse
-// @Failure 404 {object} dto.ErrorResponse
-// @Failure 405 {object} dto.ErrorResponse
-// @Router /api/v1/server-instances/{id}/config/diff [post]
+// serverInstanceConfigDiff is kept as legacy service plumbing but is not registered as a browser product route.
 func (h *coreHandlers) serverInstanceConfigDiff(w http.ResponseWriter, r *http.Request) {
 	if r.Method != http.MethodPost {
 		writeMethodNotAllowed(w, http.MethodPost)
@@ -1492,21 +1456,7 @@ func (h *coreHandlers) serverInstanceConfigDiff(w http.ResponseWriter, r *http.R
 	writeJSON(w, http.StatusOK, dto.ServerConfigDiffPreviewFromDomain(preview))
 }
 
-// serverInstanceConfigApprove godoc
-// @Summary Approve server config write
-// @Description Validates a reviewed config diff and queues a scoped config.write run job without exposing host paths or raw credentials.
-// @Tags server-instances
-// @Accept json
-// @Produce json
-// @Param id path string true "Server instance ID"
-// @Param body body dto.ServerConfigWriteApprovalRequest true "Config write approval request"
-// @Success 202 {object} dto.ServerConfigWriteDispatchResponse
-// @Failure 400 {object} dto.ErrorResponse
-// @Failure 401 {object} dto.ErrorResponse
-// @Failure 403 {object} dto.ErrorResponse
-// @Failure 404 {object} dto.ErrorResponse
-// @Failure 405 {object} dto.ErrorResponse
-// @Router /api/v1/server-instances/{id}/config/approve [post]
+// serverInstanceConfigApprove is kept as legacy service plumbing but is not registered as a browser product route.
 func (h *coreHandlers) serverInstanceConfigApprove(w http.ResponseWriter, r *http.Request) {
 	if r.Method != http.MethodPost {
 		writeMethodNotAllowed(w, http.MethodPost)