feat: URL path mapping for cross-environment replay (#10)

[tsemachh]

Summary

Closes #10

Adds URL path prefix mapping to the replay flow, enabling the primary use case: record on a central/staging environment, replay locally when the API paths differ.

Example:

• Recorded: /microservice1/api/users
• Replay locally: /api/users
• Mapping: /microservice1/api -> /api

Changes

src/shared/recording.ts

• Added UrlMapping interface { from: string; to: string }
• Added urlMappings?: UrlMapping[] to ReplayOptions

src/background/replayer.ts

• Added applyUrlMappings(pathname, mappings) — applies the first matching prefix rewrite before path matching
• Reads urlMappings from replayOptions in session storage before each match
• Fallback matching also uses the rewritten pathname

src/popup/services/storage.ts

• updateReplayOptions now accepts and persists urlMappings

src/popup.html

• Added URL Mappings textarea (one mapping per line: /from -> /to)

src/popup/main.ts

• Parses textarea on replay start → passes to updateReplayOptions
• loadReplayOptionsIntoUI() restores saved mappings when a recording is selected

README.md

• Expanded workflow A with step-by-step URL mapping instructions and multi-mapping notes

Behaviour notes

• Mapping is replay-only — recordings are stored as-is
• First matching prefix wins
• Leading slashes are normalised automatically
• Mappings are persisted with the recording's replayOptions and restored on selection

Verification

• npm run typecheck ✅
• npm run test ✅ (18/18 tests pass)

[philjoseph]

Checkmarx One – Scan Summary & Details – 9aa84c0e-2104-4369-a79c-219999c250ff

---

New Issues (3)

Checkmarx found the following issues in this Pull Request

#	Severity	Issue	Source File / Package	Checkmarx Insight
1		Reflected_XSS	src/popup/components/ResponseEditor.ts: 25	Attack Vector
2		Reflected_XSS	src/popup/components/ApiPreview.ts: 30	Attack Vector
3		Reflected_XSS	src/popup/components/ResponseEditor.ts: 22	Attack Vector

---

Communicate with Checkmarx by submitting a PR comment with @Checkmarx followed by one of the supported commands. Learn about the supported commands here.