burp-search-command

# Burp search command ## Contract | Field | Bound contract | |---|---| | Trigger | A human explicitly invokes the Burp search command with a required .burp file and optional parser operation. | | Authority | Read-only. No file, VCS, credential, paid, published, deployed, or remote mutation. The command only reads the specified .burp project file through the Burp Suite parser. | | Side effect | Local read of the command-selected .burp project through the Burp parser wrapper. No project file is modified; output is written to stdout only. | | Done | A valid project path and optional operation are passed to the full bounded Burp parser workflow and its JSON result is returned. | ## Inputs 1. **Burp project file** (required): Path to a `.burp` project file. Must exist on the local filesystem. 2. **Operation** (optional, at least one expected for useful output): One of: - `auditItems`: extract all security audit findings. - `proxyHistory`: dump all proxy history entries. - `siteMap`: dump all site map entries. - `responseHeader='regex'`: search response headers with a regex. - `responseBody='regex'`: search response bodies with a regex. - Sub-component filters appended with dots: `proxyHistory.request.headers`, `proxyHistory.request.body`, `proxyHistory.response.headers`, `proxyHistory.response.body`, and the same patterns for `siteMap.*`. Environment variables (optional overrides): - `BURP_JAVA`: path to the Java executable. Defaults to the Burp Suite Profes...