#!/usr/bin/env bash
# The matched pair: same spec, header, auth, and crash criteria; only the coverage agent differs.
set -euo pipefail
args=(--header admin-header.yaml --authentication auth-wfc.yaml)
for c in OperationNotInSpec Status5xxNotSpecified OtherStatusNotSpecified ResponseReferenceBroken \
         ResponseObjectIncorrect ResponseEnumIncorrect ResponseMalformedJSON MediaTypeContainsNoSchema \
         SchemaIsAny PossibleInjectionSignature; do   # everything except UnexpectedContent
  args+=(--crash-criteria "$c")
done
SPEC=openapi-fixed.yaml          ./run.sh blackbox2 60 "${args[@]}"
SPEC=openapi-fixed.yaml AGENT=1  ./run.sh greybox   60 "${args[@]}" --coverage-format lcov --coverage-host wf-target:3001 --source-dir /app