CyberSecurityUPandClaude Opus 4.8 7a0b2cb244 feat(collection): import a Postman/OpenAPI/HAR collection as test surface ...

Operators often already have the API mapped. Add a collection importer so a
Postman collection, an OpenAPI 3/Swagger 2 spec, or a HAR capture (JSON) is
parsed into a flat endpoint list and injected into every agent as known
in-scope surface — tested directly, alongside what recon finds, so documented
and auth-gated routes recon might miss are still covered.

- new harness module `collection` (format auto-detected by shape; de-duped;
  render capped so a huge collection can't blow the prompt budget) + 6 tests
- RunConfig.api_collection; injected in operator_directives
- CLI: global `--collection <file>` on run/greybox/aitest, validated at launch
- REPL: `/collection <file>` (and `/import-api`), persisted in the session,
  shown in /status, added to help + completion

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-10-15 20:27:56 -03:00

..

harness

feat(collection): import a Postman/OpenAPI/HAR collection as test surface

2026-10-15 20:27:56 -03:00