feat: Phase 6 — proxy polish, TLS, admin UI, replay CLI
## TLS (#11)
- Self-signed cert generated at startup via rcgen (covers localhost, 127.0.0.1,
fut.ea.com, utas.mob.v4.fut.ea.com); activated with TLS_ENABLED=true
- Custom accept loop: tokio-rustls acceptor → hyper-util auto Builder → axum
Router (no axum-server dependency — uses hyper 1.x natively)
## Replay CLI (#12)
- New binary: openfut-bridge-replay <file.json|dir> [bridge-url]
- Replays single capture or entire directory against Bridge
- Accepts self-signed certs automatically
## Capture quality (#13, #14)
- DELETE /_bridge/captures — wipe all capture files from disk
- Deduplication: same method+path within 1 s is skipped (configurable constant)
## Admin UI (#21, #22, #23)
- GET /_bridge/admin — embedded HTML dashboard; auto-refresh every 10 s
Shows: live stats, SSE log of incoming traffic, endpoint status table,
recent captures list with delete button
- GET /_bridge/status — per-endpoint mapped/known/unknown status
- GET /_bridge/captures/stream — SSE stream; event: capture on each request
Uses tokio::sync::broadcast channel (capacity 256) in ProxyState
## Tests (#24, #25)
- 9 new tests: placeholder format, full HTTP integration (health, placeholder,
captures list, delete captures, status), TLS cert generation + acceptor build
- Total bridge tests: 13/13 passing
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
funman300
3b7a4928c9