Subscription/model and web-console fixes plus GLM and API-collection support
since 4.3.0:
- force subscription CLI login (strip stray ANTHROPIC/OPENAI keys); add
claude-opus-4-6
- scope: don't treat an endpoint's HTTP method as its host (findings no longer
wrongly quarantined; no bogus graph HOST nodes)
- web: resolve run-id to live job, collapse the pinned-leads header, parse live
findings/agent progress from decorated REPL output
- GLM 5.1/5.2/5.3 via API and via the Claude Code CLI (Z.ai devpack)
- import a Postman/OpenAPI/HAR collection as test surface (CLI/REPL/web)
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Web console
- LLM API keys: Save now verifies the key with a cheap authenticated call per
provider (anthropic/openai/xai/gemini/deepseek/mistral/groq/together/openrouter/
moonshot/qwen/nvidia) and shows ✓ valid / ✗ rejected / • saved; new
POST /api/keys/verify. Keys still save when a provider isn't auto-verifiable.
- Leads: a single "category" dropdown filters the board to one category.
- Provider/Model row alignment fixed (stacked-group top margin no longer applies
inside a field-row).
- "own interceptor" renamed to "NeuroSploit Interceptor" in the proxy picker.
Installers
- setup.sh: v4.3.0; detects a package manager (apt/brew/dnf/pacman/apk) and
installs missing deps (curl, git, nmap, node; rustscan + typst via cargo);
optional launch at the end (NEUROSPLOIT_RUN=1 or a prompt). Skip with
NEUROSPLOIT_NO_DEPS=1.
- install.ps1: v4.3.0; installs deps via winget (Node, Nmap, Git; typst via
cargo); optional launch at the end.
- setup.bat (new): Windows CMD entry point that bootstraps install.ps1 (local or
from GitHub).
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
