4 Commits

Author	SHA1	Message	Date
Jakub Zych	ee0004fb65	feat(14-01): record vendor calls with summer parity:upstream and replay them offline ... - WriteUpstream masks vars, hashes long base64 JSON strings and refuses unmasked Authorization/X-Api-Key - multipart requests recorded as ordered parts; the fake compares parts and hashed payloads - loopback CONNECT recording proxy with a local ECDSA parity CA, script and forward modes - parity:upstream command, README and parity docs	2026-10-03 19:55:42 +02:00
Jakub Zych	57e7b56983	test(10.2-01): retarget moved package fixtures ... - Resolve CLI and module-local fixtures from modules/ paths - Keep root admin assets reachable from nested package tests	2026-09-28 12:56:15 +02:00
Jakub Zych	5e50b166ef	refactor(10.2-01): nest framework packages under modules ... - Move remaining beach packages and embedded admin assets\n- Rewrite framework, example, build, and gate paths	2026-09-28 02:21:02 +02:00
Jakub Zych	5ed920b7b1	test(02-05): cover proxy, scrub and CLI security boundaries ... - Reject non-loopback bind/upstream, cap bodies, isolate concurrent sessions and refuse traversal - Scrub JWT, inv_ tokens, cookies, client secrets and OAuth codes out of fixtures - CLI discovery and replay errors exit nonzero without printing secrets Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-17 14:06:40 +02:00