1.3 KiB
1.3 KiB
1. Reopen the architecture boundary
- 1.1 Replace the prior SQL/RCON prohibition and fixed SCUM command template in proposal, design, and specifications with generic protected request semantics.
- 1.2 Preserve runtime probe isolation while removing every SCUM/UE4SS/database build, revision, and version gate.
2. Define browser-side protected request contracts
- 2.1 Add generic SQL, RCON, and management-program protected transport declarations to the manifest schema, platform domain validation, and plugin SDK.
- 2.2 Permit only a declared bounded request-text field for protected commands; continue rejecting credentials, DSNs, paths, raw connections, direct sockets, and host OS shell material.
- 2.3 Keep queue, approval, server/tenant isolation, expiry, and Run-facing protected payload semantics generic; redact text from browser responses and audit summaries.
- 2.4 Declare SCUM plugin protected database and management transports without adding SCUM parsing or a fixed command template.
3. Verify and deliver
- 3.1 Update focused Go and TypeScript tests for declarations, request generation, redaction, and safe rejection.
- 3.2 Run focused Go/TS tests, OpenSpec strict validation, and structure verification.
- 3.3 Stage scoped files, commit, and push
main(commit created; push remains blocked by remote SSH access).