## 1. Contracts, models, and persistence

- [x] 1.1 Add version-scoped SCUM state catalog, player-state snapshot/patch domain types, audit model/repositories/migration/store implementations, and field/safety validation.
- [x] 1.2 Add service state machine for request, platform-admin approval, bridge-result reconciliation, and confirmation-read semantics with immutable audit evidence.
- [x] 1.3 Add focused backend tests for unknown version, invalid field/range, server ownership, stale version, unsafe window, approval permission, execution failure/unknown, audit, and confirmation.

## 2. API and SCUM bridge contract

- [x] 2.1 Add named DTOs and authorized player-state/patch API routes and tests.
- [x] 2.2 Declare `game-state.patch` and player-state schemas in the SCUM manifest, extend companion bridge validation fixtures/tests, and preserve the typed bounded command channel.

## 3. SCUM console

- [x] 3.1 Add frontend API/types and Chinese player-detail patch controls using shared console/theme primitives.
- [x] 3.2 Render readable diff, reason, approval, execution, and confirmation histories; disable unsupported or unsafe writes.
- [x] 3.3 Add frontend tests for field labels, diff/audit readability, and disabled safety states.

## 4. Verification

- [x] 4.1 Run strict OpenSpec validation, focused backend/plugin/frontend tests, and `scripts/check-structure.sh`.
- [x] 4.2 Stage only this task's files, commit on `main`, and push the configured remote.