{
  "schema": "openao-handler-transport-repro-v1",
  "variant": "patched",
  "checkedAt": "2026-09-09T22:13:36.940Z",
  "node": "v24.19.0",
  "upstreamCommit": "12b967c163f4eca01e80f758aeedc8b153bfc249",
  "sourceSha256": "d91ca45585daada4e3dc09a41ce4b8797eb3d7c460a56951265355cf0b2edb81",
  "baselineSha256": "5dd61e05dd89aeaddc84eb57638355ef64cc841d7c7622d87a0cd9ac96d0f2da",
  "total": 18,
  "passed": 18,
  "failed": 0,
  "expectedBaselineFailures": [
    "PUT: true override reaches upstream",
    "POST: true override reaches upstream",
    "DELETE: true override reaches upstream",
    "Parsed TRUE value reaches upstream without case normalization",
    "False, empty and unrecognized values reach the backend unchanged"
  ],
  "matchesExpectedOutcome": true,
  "isolation": {
    "executedSource": "Actual exported handler after native TypeScript type stripping",
    "stubs": [
      "next/server",
      "next/headers",
      "@/lib/api-base-url",
      "@/lib/auth-session",
      "fetch",
      "process.env"
    ],
    "requestAndHeaders": "Node native Request/Headers; no real Next server",
    "realNetworkCalls": 0,
    "databaseUsed": false,
    "realAccountsUsed": false,
    "boundary": "Transport only. No real backend authorization, cookie validation, database writes, audit attribution, or full Next/HTTP integration proven."
  },
  "results": [
    {
      "name": "PUT: true override reaches upstream",
      "passed": true,
      "expectedBaselineFailure": true
    },
    {
      "name": "POST: true override reaches upstream",
      "passed": true,
      "expectedBaselineFailure": true
    },
    {
      "name": "DELETE: true override reaches upstream",
      "passed": true,
      "expectedBaselineFailure": true
    },
    {
      "name": "Parsed TRUE value reaches upstream without case normalization",
      "passed": true,
      "expectedBaselineFailure": true
    },
    {
      "name": "Missing real session (absent) rejects forged incoming credentials",
      "passed": true,
      "expectedBaselineFailure": false
    },
    {
      "name": "Missing real session (blank) rejects forged incoming credentials",
      "passed": true,
      "expectedBaselineFailure": false
    },
    {
      "name": "Missing server proxy token (absent) rejects forged token",
      "passed": true,
      "expectedBaselineFailure": false
    },
    {
      "name": "Missing server proxy token (blank) rejects forged token",
      "passed": true,
      "expectedBaselineFailure": false
    },
    {
      "name": "Missing override stays absent on every exported mutation method",
      "passed": true,
      "expectedBaselineFailure": false
    },
    {
      "name": "False, empty and unrecognized values reach the backend unchanged",
      "passed": true,
      "expectedBaselineFailure": true
    },
    {
      "name": "GET ignores override and has no body",
      "passed": true,
      "expectedBaselineFailure": false
    },
    {
      "name": "Non-map mutation routes do not gain the override header",
      "passed": true,
      "expectedBaselineFailure": false
    },
    {
      "name": "Only session cookie and server config supply upstream credentials",
      "passed": true,
      "expectedBaselineFailure": false
    },
    {
      "name": "JSON body bytes and encoded/repeated query parameters are unchanged",
      "passed": true,
      "expectedBaselineFailure": false
    },
    {
      "name": "DELETE body retains arbitrary binary bytes",
      "passed": true,
      "expectedBaselineFailure": false
    },
    {
      "name": "Path segments remain encoded instead of becoming extra segments",
      "passed": true,
      "expectedBaselineFailure": false
    },
    {
      "name": "Empty route is rejected before any fetch",
      "passed": true,
      "expectedBaselineFailure": false
    },
    {
      "name": "Stub backend response status and JSON are returned unchanged",
      "passed": true,
      "expectedBaselineFailure": false
    }
  ]
}