refactor(10.2-01): nest framework packages under modules

- Move remaining beach packages and embedded admin assets\n- Rewrite framework, example, build, and gate paths

modules/tide/rules_test.go

@@ -0,0 +1,60 @@
+package tide
+
+import (
+	"os"
+	"path/filepath"
+	"strings"
+	"testing"
+)
+
+func TestRulesLoadAndMatch(t *testing.T) {
+	dir := t.TempDir()
+	path := filepath.Join(dir, "rules.yaml")
+	raw := "" +
+		"client: nuxt\n" +
+		"keep_request_headers:\n" +
+		"  - Cookie\n" +
+		"keep_response_headers:\n" +
+		"  - Location\n" +
+		"routes:\n" +
+		"  - method: GET\n" +
+		"    path: /sample\n" +
+		"    capture:\n" +
+		"      - from: response.json\n" +
+		"        path: $.token\n" +
+		"        as: jwt:alice\n" +
+		"        category: jwt\n" +
+		"  - method: POST\n" +
+		"    path: /items/*\n"
+	if err := os.WriteFile(path, []byte(raw), 0o644); err != nil {
+		t.Fatal(err)
+	}
+	rules, err := LoadRules(path)
+	if err != nil {
+		t.Fatal(err)
+	}
+	if rules.Client != ClientNuxt {
+		t.Fatalf("client: %s", rules.Client)
+	}
+	if got := rules.Match("GET", "/sample"); got == nil || len(got.Capture) != 1 || got.Capture[0].As != "jwt:alice" {
+		t.Fatalf("GET /sample match: %+v", got)
+	}
+	if got := rules.Match("POST", "/items/9"); got == nil {
+		t.Fatal("POST /items/9 should match wildcard")
+	}
+	if got := rules.Match("GET", "/other"); got != nil {
+		t.Fatalf("unexpected match: %+v", got)
+	}
+}
+
+func TestRulesRejectUnknownAndInvalid(t *testing.T) {
+	if _, err := ParseRules([]byte("client: nuxt\nextra: true\n")); err == nil {
+		t.Fatal("unknown field must fail")
+	}
+	if _, err := ParseRules([]byte("client: browser\n")); err == nil || !strings.Contains(err.Error(), "client") {
+		t.Fatalf("invalid client: %v", err)
+	}
+	if _, err := ParseRules([]byte("client: mcp\nroutes:\n  - method: GET\n    path: /x\n    capture:\n      - path: $.a\n")); err == nil || !strings.Contains(err.Error(), "as") {
+		t.Fatalf("capture missing as: %v", err)
+	}
+}