Ship SCUM user SQL management page

platform/validator/observability.go

@@ -109,10 +109,14 @@ func validateRemoteAdapterInputs(field string, inputs map[string]string) []strin
 	}
 	var violations []string
 	for key, value := range inputs {
-		if !clientManagerIdentifierPattern.MatchString(key) || unsafeGameClientBridgePayloadKey(key) {
+		if !clientManagerIdentifierPattern.MatchString(key) || unsafeRemoteAdapterInputKey(key) {
 			violations = append(violations, field+" key is invalid or unsafe")
 		}
-		if len([]rune(value)) > 2048 {
+		limit := 2048
+		if remoteAdapterSQLInputKey(key) {
+			limit = 16 * 1024
+		}
+		if len([]rune(value)) > limit {
 			violations = append(violations, field+"."+key+" is too long")
 		}
 		for _, reason := range unsafePluginStringReasons(value) {
@@ -121,3 +125,20 @@ func validateRemoteAdapterInputs(field string, inputs map[string]string) []strin
 	}
 	return violations
 }
+
+func unsafeRemoteAdapterInputKey(key string) bool {
+	if remoteAdapterSQLInputKey(key) {
+		return false
+	}
+	return unsafeGameClientBridgePayloadKey(key)
+}
+
+func remoteAdapterSQLInputKey(key string) bool {
+	normalized := strings.ToLower(strings.NewReplacer(".", "", "_", "", "-", "", ":", "", "/", "").Replace(key))
+	switch normalized {
+	case "sql", "sqltext", "sqlstatement", "sqlquery", "rawsql", "rawquery", "statement":
+		return true
+	default:
+		return false
+	}
+}