@arcadialdev/arcality 2.4.28 → 2.4.29

package/tests/_helpers/agentic-runner.bundle.spec.js

@@ -1,56 +1,1403 @@
-var $e=Object.create;var we=Object.defineProperty;var Oe=Object.getOwnPropertyDescriptor;var Ne=Object.getOwnPropertyNames;var Ue=Object.getPrototypeOf,Pe=Object.prototype.hasOwnProperty;var De=(o,e,i,a)=>{if(e&&typeof e=="object"||typeof e=="function")for(let l of Ne(e))!Pe.call(o,l)&&l!==i&&we(o,l,{get:()=>e[l],enumerable:!(a=Oe(e,l))||a.enumerable});return o};var Z=(o,e,i)=>(i=o!=null?$e(Ue(o)):{},De(e||!o||!o.__esModule?we(i,"default",{value:o,enumerable:!0}):i,o));var Se=require("@playwright/test");var Me={name:"validate_element_state",description:"QA Skill: Validate that an element meets expected conditions (exists, visible, enabled, disabled, contains text, has value). Use this for assertions during test execution WITHOUT executing actions. This is the KEY tool for verifying application state.",input_schema:{type:"object",properties:{idx:{type:"number",description:"The IDX of the element to validate"},validations:{type:"array",description:"List of validations to perform on this element",items:{type:"object",properties:{type:{enum:["exists","visible","enabled","disabled","contains_text","has_value","is_empty","has_class"],description:"Type of validation to perform"},expected_value:{type:"string",description:"Expected value (required for: contains_text, has_value, has_class)"}},required:["type"]}}},required:["idx","validations"]}},je={name:"extract_table_data",description:"QA Skill: Extract structured data from tables or lists on the page. Use this to validate datasets, counts, or specific values. Returns an array of objects representing rows with their data.",input_schema:{type:"object",properties:{table_identifier:{type:"string",description:"Text content near the table, aria-label, or distinctive text that identifies the table (e.g., 'Timesheet - Hoy', 'Listado de pendientes')"},max_rows:{type:"number",description:"Maximum number of rows to extract (default: 50)",default:50},filter_column:{type:"string",description:"Optional: Column name to filter by"},filter_value:{type:"string",description:"Optional: Value to match in the filter column"}},required:["table_identifier"]}},Fe={name:"capture_console_errors",description:"QA Skill: Capture JavaScript console errors, warnings, and network failures that occurred during the test. Use this to detect client-side bugs that are not visible in the UI. This is CRITICAL for detecting hidden issues.",input_schema:{type:"object",properties:{severity_filter:{enum:["all","error","warning"],description:"Filter by severity level (default: error)",default:"error"},include_network_errors:{type:"boolean",description:"Include failed network requests (HTTP errors)",default:!0}}}},Ye={name:"assert_url_pattern",description:"QA Skill: Validate that the current URL matches (or doesn't match) an expected pattern. Use this to ensure navigation worked correctly or to verify you're on the expected page.",input_schema:{type:"object",properties:{pattern:{type:"string",description:"URL pattern to match (can be a substring like '/welcome' or a full URL)"},should_match:{type:"boolean",description:"True if URL should contain the pattern, false if it should NOT",default:!0}},required:["pattern"]}},qe={name:"measure_page_performance",description:"QA Skill: Measure page load time, network requests, and performance metrics (FCP, DOM loaded, total load). Use this to validate performance requirements or SLAs. Returns measured values and PASS/FAIL against optional thresholds.",input_schema:{type:"object",properties:{metrics_to_capture:{type:"array",items:{enum:["load_time","dom_content_loaded","first_contentful_paint","network_requests","resource_size"]},description:"Metrics to measure (default: all available)"},thresholds:{type:"object",description:"Optional thresholds for PASS/FAIL evaluation (e.g., {load_time_ms: 3000, dom_content_loaded_ms: 2000})",properties:{load_time_ms:{type:"number",description:"Maximum acceptable page load time in ms"},dom_content_loaded_ms:{type:"number",description:"Maximum acceptable DOM content loaded time in ms"},first_contentful_paint_ms:{type:"number",description:"Maximum acceptable FCP in ms"},max_network_requests:{type:"number",description:"Maximum number of network requests allowed"},max_resource_size_kb:{type:"number",description:"Maximum total resource size in KB"}}}}}},Be={name:"save_navigation_checkpoint",description:"QA Skill: Save the current page state (URL, cookies, localStorage, sessionStorage) as a named checkpoint. Use this before testing multiple paths from the same starting point, so you can restore later without repeating setup steps.",input_schema:{type:"object",properties:{checkpoint_name:{type:"string",description:"Unique name for this checkpoint (e.g., 'form_filled', 'logged_in', 'before_submit')"},include_storage:{type:"boolean",description:"Save localStorage and sessionStorage (default: true)",default:!0}},required:["checkpoint_name"]}},He={name:"restore_navigation_checkpoint",description:"QA Skill: Restore a previously saved checkpoint to return to that page state. This navigates back to the saved URL and restores cookies/storage. Use this to test alternative paths from the same starting point without re-running the entire flow.",input_schema:{type:"object",properties:{checkpoint_name:{type:"string",description:"Name of the checkpoint to restore (must have been saved previously)"}},required:["checkpoint_name"]}},Ge={name:"create_test_evidence",description:"QA Skill: Create visual test evidence (screenshots or annotated screenshots) and save them to disk. Use 'screenshot' for a plain capture, 'annotated_screenshot' to highlight specific elements with colored borders and labels, or 'full_page_screenshot' for a full-page capture. Evidence files are saved for bug reports and test documentation.",input_schema:{type:"object",properties:{evidence_type:{enum:["screenshot","annotated_screenshot","full_page_screenshot"],description:"Type of evidence to create"},annotations:{type:"array",description:"Elements to highlight with labels (only for 'annotated_screenshot')",items:{type:"object",properties:{idx:{type:"number",description:"IDX of the element to highlight"},label:{type:"string",description:"Annotation text to display near the element"},color:{type:"string",description:"Highlight color (default: red)",default:"red"}},required:["idx","label"]}},save_as:{type:"string",description:"Filename for the evidence (without extension, .png will be added). Example: 'bug_save_button_disabled'"},description:{type:"string",description:"Description of what this evidence proves or highlights"},finish_run:{type:"boolean",description:"If true, immediately ends the mission after saving evidence (saves tokens). Use this for final success evidence."}},required:["evidence_type","save_as"]}},Ve={name:"send_keyboard_event",description:"QA Skill: Send a keyboard event to the page or a specific element. Use this for: pressing Escape to close modals/popups, pressing Tab to navigate between form fields, pressing Enter to submit or confirm, pressing Arrow keys to navigate within date/time pickers, dropdowns, sliders, or any custom component that responds to keyboard input. This is CRITICAL for native browser controls (time pickers, date pickers, color pickers) that do not respond well to 'fill'.",input_schema:{type:"object",properties:{key:{type:"string",description:"The key to press. Supported values: 'Escape', 'Enter', 'Tab', 'Backspace', 'Delete', 'ArrowUp', 'ArrowDown', 'ArrowLeft', 'ArrowRight', 'Home', 'End', 'PageUp', 'PageDown', 'Space', or any single character like 'a', '1', etc. For key combinations use '+' separator: 'Control+a', 'Shift+Tab'."},idx:{type:"number",description:"Optional: IDX of the element to focus before sending the key. If not provided, the key is sent to whatever element currently has focus."},repeat:{type:"number",description:"Number of times to press the key (default: 1). Useful for ArrowUp/ArrowDown in time pickers.",default:1}},required:["key"]}},Ke={name:"interact_native_control",description:"QA Skill: Interact with native HTML controls that standard click/fill may not handle correctly. This includes: <input type='time'>, <input type='date'>, <input type='datetime-local'>, <input type='color'>, <input type='range'>, <select> with optgroup, and contenteditable elements. This tool uses Playwright's specialized methods (selectOption, fill with format coercion, press sequences) to reliably set values. ALWAYS prefer this tool over manual fill for time/date inputs.",input_schema:{type:"object",properties:{idx:{type:"number",description:"The IDX of the native control element"},control_type:{enum:["time","date","datetime","color","range","select","contenteditable"],description:"The type of native control"},value:{type:"string",description:"The value to set. Formats: time='HH:mm' or 'HH:mm:ss', date='YYYY-MM-DD', datetime='YYYY-MM-DDTHH:mm', color='#rrggbb', range='number', select='option text or value', contenteditable='text to type'."}},required:["idx","control_type","value"]}},ze={name:"scroll_page",description:"QA Skill: Scroll the page or a specific container to reveal elements that are outside the current viewport. Use this when: you cannot find an expected element in CURRENT COMPONENTS (it might be below the fold), a form has many fields and you need to see more, or you need to scroll to a specific element. After scrolling, the page state will be refreshed in the next turn.",input_schema:{type:"object",properties:{direction:{enum:["up","down","left","right","top","bottom"],description:"Direction to scroll. 'top' and 'bottom' scroll all the way to the start/end."},amount:{type:"number",description:"Pixels to scroll (default: 500). Ignored for 'top' and 'bottom' directions.",default:500},idx:{type:"number",description:"Optional: IDX of a scrollable container. If omitted, scrolls the main page."}},required:["direction"]}},be=[Me,je,Fe,Ye,qe,Be,He,Ge,Ve,Ke,ze];async function ue(o){console.log(`[QA-SEC] Auditing HTTP Headers for: ${o.url()}`);let i=(await o.reload({waitUntil:"domcontentloaded"}))?.headers(),a=[],l={"Content-Security-Policy":{severity:"Medium",remediation:"Implement a strict Content-Security-Policy (CSP) to mitigate XSS and other injection attacks. Start with a restrictive policy and gradually allow trusted sources.",impact:"If an injection issue exists elsewhere in the application, the lack of CSP may increase exploitability and impact.",cwe:"CWE-16"},"Strict-Transport-Security":{severity:"Medium",remediation:"Implement HTTP Strict Transport Security (HSTS) to force browsers to communicate over HTTPS, preventing downgrade attacks.",impact:"Man-in-the-middle attacks could downgrade the connection to HTTP, allowing traffic interception.",cwe:"CWE-319"},"X-Content-Type-Options":{severity:"Low",remediation:"Set `X-Content-Type-Options: nosniff` to prevent browsers from MIME-sniffing a response away from the declared content-type.",impact:"Browsers may interpret non-executable MIME types as executable, leading to potential XSS.",cwe:"CWE-430"},"X-Frame-Options":{severity:"Medium",remediation:"Set `X-Frame-Options: SAMEORIGIN` or `DENY` to protect against clickjacking attacks by preventing the page from being loaded in an iframe on other domains.",impact:"Attackers could trick users into clicking visually hidden elements, causing unintended actions (Clickjacking).",cwe:"CWE-1021"}};for(let[h,w]of Object.entries(l))(!i||!Object.keys(i).find(R=>R.toLowerCase()===h.toLowerCase()))&&a.push({type:"security_misconfiguration",category:"Missing Security Header",subcategory:h,severity:w.severity,confidence:"High",exploitability:"not_confirmed",status:"detected",description:`The '${h}' HTTP header is missing. This header is crucial for defending against various web attacks.`,impact:w.impact,evidence:{url:o.url(),missingHeader:h},reproductionSteps:[`Navigate to ${o.url()}`,"Inspect the response headers.",`Verify that ${h} is absent.`],remediation:w.remediation,classification:{owaspTop10:"A05:2021 Security Misconfiguration",cwe:w.cwe}});return console.log(`[QA-SEC] Found ${a.length} missing security headers.`),a}async function pe(o){console.log("[QA-SEC] Scanning localStorage and sessionStorage for sensitive data.");let e=[],i=["token","password","secret","key","jwt","auth"],a={localStorage:await o.evaluate(()=>Object.entries(window.localStorage)),sessionStorage:await o.evaluate(()=>Object.entries(window.sessionStorage))};for(let[l,h]of Object.entries(a))for(let[w,R]of h)i.some(b=>w.toLowerCase().includes(b))&&e.push({type:"potential_issue",category:"Sensitive Data Exposure",subcategory:"Browser Storage",severity:"Medium",confidence:"Medium",exploitability:"unknown",status:"detected",description:`Potentially sensitive data was found in ${l}. Storing sensitive information like tokens or keys in browser storage is insecure.`,impact:"If an attacker discovers an XSS vulnerability, they can read localStorage/sessionStorage and exfiltrate secrets.",evidence:{storage:l,key:w,valuePreview:R?`${R.substring(0,10)}...`:"(empty)"},reproductionSteps:[`Open Developer Tools on ${o.url()}`,`Check ${l} for the key '${w}'.`],remediation:"Avoid storing sensitive data in browser storage. Use secure, HttpOnly cookies for session tokens. If you must store data, encrypt it first.",classification:{owaspTop10:"A04:2021 Insecure Design",cwe:"CWE-312"}});return console.log(`[QA-SEC] Found ${e.length} instances of sensitive data in browser storage.`),e}var K=Z(require("fs")),ie=Z(require("path"));var Ae=Z(require("crypto")),V=Z(require("chalk")),me=class o{static instance;apiBase;apiKey;projectId=null;constructor(){this.apiBase=process.env.ARCALITY_API_URL||"https://arcalityqadev.arcadial.lat",this.apiKey=process.env.ARCALITY_API_KEY||"",this.projectId=process.env.ARCALITY_PROJECT_ID||null}async fetchWithTimeout(e,i={},a=1e4){let l=new AbortController,h=setTimeout(()=>l.abort(),a);try{let w=await fetch(e,{...i,signal:l.signal});return clearTimeout(h),w}catch(w){throw clearTimeout(h),w}}static getInstance(){return o.instance||(o.instance=new o),o.instance}setProjectId(e){this.projectId=e}getProjectId(){return(!this.projectId||this.projectId==="undefined"||this.projectId==="null")&&(this.projectId=process.env.ARCALITY_PROJECT_ID||null),this.projectId}async getProjects(){try{let e=await this.fetchWithTimeout(`${this.apiBase}/api/v1/projects`,{headers:{"x-api-key":this.apiKey}});return e.ok?(await e.json()).projects||[]:[]}catch(e){return console.warn(V.default.yellow(`[KnowledgeService] Error al obtener proyectos: ${e.message}`)),[]}}async createProject(e,i){try{let a=await this.fetchWithTimeout(`${this.apiBase}/api/v1/projects`,{method:"POST",headers:{"Content-Type":"application/json","x-api-key":this.apiKey},body:JSON.stringify({name:e,base_url:i})});return a.ok?await a.json():null}catch(a){return console.error(V.default.red(`[KnowledgeService] Fall\xF3 creaci\xF3n de proyecto: ${a.message}`)),null}}async ingest(e){if(!e.project_id||e.project_id==="undefined"){console.warn(V.default.yellow("[Knowledge] Ingesta cancelada: project_id es inv\xE1lido."));return}try{let i=await this.fetchWithTimeout(`${this.apiBase}/api/v1/portal/ingest`,{method:"POST",headers:{"Content-Type":"application/json","x-api-key":this.apiKey},body:JSON.stringify(e)});i.status===200&&((await i.json()).status==="skipped_duplicate_dom"||console.log(V.default.cyan(`[Knowledge] Ingesta exitosa (Project: ${e.project_id})`)))}catch(i){console.warn(V.default.yellow(`[Knowledge] Error en ingesta: ${i.message}`))}}async getContext(e){let i=this.getProjectId();if(!i||i==="undefined")return null;try{let a=new URL(e).pathname,l=await this.fetchWithTimeout(`${this.apiBase}/api/v1/portal/context?project_id=${i}&path=${encodeURIComponent(a)}`,{headers:{"x-api-key":this.apiKey}});return l.ok?await l.json():null}catch(a){return console.warn(V.default.yellow(`[Knowledge] Error al obtener contexto: ${a.message}`)),null}}async saveRule(e,i,a="important",l){let h=this.getProjectId();if(!(!h||h==="undefined"))try{let w=l?new URL(l).pathname:null;await fetch(`${this.apiBase}/api/v1/portal/rules`,{method:"POST",headers:{"Content-Type":"application/json","x-api-key":this.apiKey},body:JSON.stringify({project_id:h,rule_type:"UI_UX",title:e,description:i,severity:a})}),console.log(V.default.green(`[Knowledge] Nueva regla registrada: ${e}`))}catch{}}async saveField(e,i,a){let l=this.getProjectId();if(!(!l||l==="undefined"))try{await fetch(`${this.apiBase}/api/v1/portal/fields`,{method:"POST",headers:{"Content-Type":"application/json","x-api-key":this.apiKey},body:JSON.stringify({project_id:l,field_identifier:e,field_type:i,is_required:a,source:"agent_auto"})}),console.log(V.default.green(`[Knowledge] Nuevo campo catalogado: ${e}`))}catch{}}async saveKnowledge(e,i,a="PROCESS"){let l=this.getProjectId();if(!(!l||l==="undefined"))try{await fetch(`${this.apiBase}/api/v1/portal/knowledge`,{method:"POST",headers:{"Content-Type":"application/json","x-api-key":this.apiKey},body:JSON.stringify({project_id:l,doc_type:a,title:e,content:i,source:"agent_auto"})}),console.log(V.default.green(`[Knowledge] Nuevo conocimiento guardado: ${e}`))}catch{}}calculateDomHash(e){let i=e.map(a=>`${a.tag}-${a.semanticLabel}`).join("|");return Ae.createHash("sha256").update(i).digest("hex")}};var ae=()=>process.env.ARCALITY_API_URL?`${process.env.ARCALITY_API_URL}/api/v1`:null,re=()=>process.env.ARCALITY_API_KEY||"",ce=()=>process.env.ARCALITY_PROJECT_ID||"",We="00000000-0000-0000-0000-000000000000";function ge(){let o=ae(),e=re(),i=ce();return!(!o||!e||!i||i===We)}async function le(o){if(!ge())return null;try{let e=await fetch(`${ae()}/portal/rules`,{method:"POST",headers:{"Content-Type":"application/json","x-api-key":re()},body:JSON.stringify({project_id:ce(),rule_type:o.rule_type,title:o.title.substring(0,100),description:o.description.substring(0,500),severity:o.severity??"important",source:"agent"})});if(!e.ok)return console.warn(`[CollectiveMemory] pushRule HTTP ${e.status}: ${await e.text().catch(()=>"")}`),null;let i=await e.json();return console.log(`\x1B[32m[CollectiveMemory] \u2705 Regla guardada: "${o.title}"\x1B[0m`),i.id??null}catch(e){return console.warn(`[CollectiveMemory] pushRule error: ${e?.message}`),null}}async function ve(o){if(!ge()||o.existingFieldIds?.includes(o.field_identifier))return null;try{let e=await fetch(`${ae()}/portal/fields`,{method:"POST",headers:{"Content-Type":"application/json","x-api-key":re()},body:JSON.stringify({project_id:ce(),page_id:o.page_id??null,field_identifier:o.field_identifier.substring(0,100),field_type:o.field_type??"text",is_required:o.is_required??!1,validation_rule:o.validation_rule?.substring(0,300)??null,source:"agent"})});return e.ok?(await e.json()).id??null:null}catch{return null}}async function Ie(o){if(!ge())return null;try{let e=await fetch(`${ae()}/portal/knowledge`,{method:"POST",headers:{"Content-Type":"application/json","x-api-key":re()},body:JSON.stringify({project_id:ce(),doc_type:o.doc_type,title:o.title.substring(0,150),content:o.content.substring(0,500),source:"agent"})});if(!e.ok)return console.warn(`[CollectiveMemory] pushKnowledge HTTP ${e.status}: ${await e.text().catch(()=>"")}`),null;let i=await e.json();return console.log(`\x1B[32m[CollectiveMemory] \u2705 Conocimiento guardado: "${o.title}"\x1B[0m`),i.id??null}catch(e){return console.warn(`[CollectiveMemory] pushKnowledge error: ${e?.message}`),null}}async function Ee(o){if(!ge())return[];try{let e=await fetch(`${ae()}/portal/context?project_id=${ce()}&path=${encodeURIComponent(o)}`,{headers:{"x-api-key":re()}});return e.ok?((await e.json())?.fields??[]).map(a=>a.field_identifier??"").filter(Boolean):[]}catch{return[]}}var _e=Z(require("node:fs")),Ce=Z(require("node:path"));function xe(o){let e=Ce.default.join(o,"package.json"),i={name:"Arcality Project",version:"1.0.0",framework:"unknown",scripts:[],dependencies:[]};if(!_e.default.existsSync(e))return i;try{let a=JSON.parse(_e.default.readFileSync(e,"utf8"));i.name=a.name||i.name,i.version=a.version||i.version;let l={...a.dependencies,...a.devDependencies};i.dependencies=Object.keys(l),i.scripts=a.scripts?Object.keys(a.scripts):[],l.next?i.framework="next":l.vite?i.framework="vite":l["react-scripts"]&&(i.framework="cra")}catch{}return i}var Xe=[{name:"test_xss_injection",description:"Injects a standard XSS payload into an input field to test for reflected XSS vulnerabilities. Reports a vulnerability if an alert is triggered.",parameters:{type:"object",properties:{selector:{type:"string",description:"The CSS selector of the input field to test."}},required:["selector"]}},{name:"test_auth_bypass",description:"Attempts to directly navigate to a URL that should be protected to check for authentication bypass vulnerabilities.",parameters:{type:"object",properties:{url:{type:"string",description:"The protected URL to test."},redirectUrl:{type:"string",description:"The expected URL to be redirected to if unauthorized (e.g., '/login')."}},required:["url","redirectUrl"]}},{name:"audit_http_headers",description:"Audits the current page's HTTP response headers for common security headers like CSP, HSTS, etc.",parameters:{type:"object",properties:{}}},{name:"scan_sensitive_data_exposure",description:"Scans localStorage and sessionStorage for keys that might contain sensitive data (e.g., 'token', 'password').",parameters:{type:"object",properties:{}}}],Re=new Set,he=class{page;contextDir;testInfo;knowledgeService;lastScreenshot=null;logs=[];checkpoints=new Map;sessionStorage=new Map;constructor(e,i="out",a,l){this.page=e,this.contextDir=i,this.testInfo=a,this.knowledgeService=l||me.getInstance(),this.page.on("console",h=>{(h.type()==="error"||h.type()==="warning")&&(this.logs.push(`[${h.type().toUpperCase()}] ${h.text()}`),this.logs.length>30&&this.logs.shift())}),this.page.on("requestfailed",h=>{let w=h.failure();this.logs.push(`[NETWORK_ERROR] ${h.method()} ${h.url()} - ${w?.errorText||"Unknown error"}`),this.logs.length>30&&this.logs.shift()})}loadSkills(){try{let e="",i=0,a=process.env.ARCALITY_ROOT||ie.join(__dirname,"..",".."),l=[ie.join(a,".agent","skills"),ie.join(a,".agents","skills")];for(let h of l){if(!K.existsSync(h))continue;i===0&&(e+=`
-\xF0\u0178\u203A\xA0\xEF\xB8\x8F SKILLS INSTALADAS (Metodolog\xC3\xADas activas):
-`);let w=K.readdirSync(h,{withFileTypes:!0});for(let R of w){let b="",j=R.name;if(R.isDirectory()){let N=ie.join(h,R.name,"SKILL.md");K.existsSync(N)&&(b=K.readFileSync(N,"utf8"))}else if(R.name.endsWith(".md")){let N=ie.join(h,R.name);b=K.readFileSync(N,"utf8")}b&&(e+=`
---- SKILL: ${j} ---
-${b}
-`,i++)}}if(i>0)return console.log(`>> \xF0\u0178\u201C\u2018 ${i} habilidades QA inyectadas al cerebro.`),e}catch(e){console.warn(`>>ARCALITY_STATUS>> \xE2\u0161\xA0\xEF\xB8\x8F Error cargando habilidades: ${e.message}`)}return""}loadMemory(e){try{let i=ie.join(this.contextDir,"memoria-agente.json");if(K.existsSync(i)){let a=JSON.parse(K.readFileSync(i,"utf8")),l=e.toLowerCase().split(" ").filter(b=>b.length>4),h=a.filter(b=>{if(!b.success)return!1;let j=(b.prompt||"").toLowerCase(),N=l.filter(E=>j.includes(E)).length;return N>=3||l.length>0&&N===l.length}).slice(-1),w=a.filter(b=>!b.success&&b.error).slice(-1),R="";if(h.length){let b=h[0];R+=`
-\xF0\u0178\u201C\u0161 SUCCESS GUIDANCE FOR THIS MISSION:
-The following steps led to SUCCESS for a similar mission ("${b.prompt}"):
-${b.steps.slice(0,15).map(j=>`  - ${j}`).join(`
-`)}
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+
+// tests/_helpers/agentic-runner.spec.ts
+var import_test = require("@playwright/test");
+
+// tests/_helpers/qa-tools.ts
+var validateElementStateTool = {
+  name: "validate_element_state",
+  description: "QA Skill: Validate that an element meets expected conditions (exists, visible, enabled, disabled, contains text, has value). Use this for assertions during test execution WITHOUT executing actions. This is the KEY tool for verifying application state.",
+  input_schema: {
+    type: "object",
+    properties: {
+      idx: {
+        type: "number",
+        description: "The IDX of the element to validate"
+      },
+      validations: {
+        type: "array",
+        description: "List of validations to perform on this element",
+        items: {
+          type: "object",
+          properties: {
+            type: {
+              enum: ["exists", "visible", "enabled", "disabled", "contains_text", "has_value", "is_empty", "has_class"],
+              description: "Type of validation to perform"
+            },
+            expected_value: {
+              type: "string",
+              description: "Expected value (required for: contains_text, has_value, has_class)"
+            }
+          },
+          required: ["type"]
+        }
+      }
+    },
+    required: ["idx", "validations"]
+  }
+};
+var extractTableDataTool = {
+  name: "extract_table_data",
+  description: "QA Skill: Extract structured data from tables or lists on the page. Use this to validate datasets, counts, or specific values. Returns an array of objects representing rows with their data.",
+  input_schema: {
+    type: "object",
+    properties: {
+      table_identifier: {
+        type: "string",
+        description: "Text content near the table, aria-label, or distinctive text that identifies the table (e.g., 'Timesheet - Hoy', 'Listado de pendientes')"
+      },
+      max_rows: {
+        type: "number",
+        description: "Maximum number of rows to extract (default: 50)",
+        default: 50
+      },
+      filter_column: {
+        type: "string",
+        description: "Optional: Column name to filter by"
+      },
+      filter_value: {
+        type: "string",
+        description: "Optional: Value to match in the filter column"
+      }
+    },
+    required: ["table_identifier"]
+  }
+};
+var captureConsoleErrorsTool = {
+  name: "capture_console_errors",
+  description: "QA Skill: Capture JavaScript console errors, warnings, and network failures that occurred during the test. Use this to detect client-side bugs that are not visible in the UI. This is CRITICAL for detecting hidden issues.",
+  input_schema: {
+    type: "object",
+    properties: {
+      severity_filter: {
+        enum: ["all", "error", "warning"],
+        description: "Filter by severity level (default: error)",
+        default: "error"
+      },
+      include_network_errors: {
+        type: "boolean",
+        description: "Include failed network requests (HTTP errors)",
+        default: true
+      }
+    }
+  }
+};
+var assertUrlPatternTool = {
+  name: "assert_url_pattern",
+  description: "QA Skill: Validate that the current URL matches (or doesn't match) an expected pattern. Use this to ensure navigation worked correctly or to verify you're on the expected page.",
+  input_schema: {
+    type: "object",
+    properties: {
+      pattern: {
+        type: "string",
+        description: "URL pattern to match (can be a substring like '/welcome' or a full URL)"
+      },
+      should_match: {
+        type: "boolean",
+        description: "True if URL should contain the pattern, false if it should NOT",
+        default: true
+      }
+    },
+    required: ["pattern"]
+  }
+};
+var measurePagePerformanceTool = {
+  name: "measure_page_performance",
+  description: "QA Skill: Measure page load time, network requests, and performance metrics (FCP, DOM loaded, total load). Use this to validate performance requirements or SLAs. Returns measured values and PASS/FAIL against optional thresholds.",
+  input_schema: {
+    type: "object",
+    properties: {
+      metrics_to_capture: {
+        type: "array",
+        items: {
+          enum: ["load_time", "dom_content_loaded", "first_contentful_paint", "network_requests", "resource_size"]
+        },
+        description: "Metrics to measure (default: all available)"
+      },
+      thresholds: {
+        type: "object",
+        description: "Optional thresholds for PASS/FAIL evaluation (e.g., {load_time_ms: 3000, dom_content_loaded_ms: 2000})",
+        properties: {
+          load_time_ms: { type: "number", description: "Maximum acceptable page load time in ms" },
+          dom_content_loaded_ms: { type: "number", description: "Maximum acceptable DOM content loaded time in ms" },
+          first_contentful_paint_ms: { type: "number", description: "Maximum acceptable FCP in ms" },
+          max_network_requests: { type: "number", description: "Maximum number of network requests allowed" },
+          max_resource_size_kb: { type: "number", description: "Maximum total resource size in KB" }
+        }
+      }
+    }
+  }
+};
+var saveNavigationCheckpointTool = {
+  name: "save_navigation_checkpoint",
+  description: "QA Skill: Save the current page state (URL, cookies, localStorage, sessionStorage) as a named checkpoint. Use this before testing multiple paths from the same starting point, so you can restore later without repeating setup steps.",
+  input_schema: {
+    type: "object",
+    properties: {
+      checkpoint_name: {
+        type: "string",
+        description: "Unique name for this checkpoint (e.g., 'form_filled', 'logged_in', 'before_submit')"
+      },
+      include_storage: {
+        type: "boolean",
+        description: "Save localStorage and sessionStorage (default: true)",
+        default: true
+      }
+    },
+    required: ["checkpoint_name"]
+  }
+};
+var restoreNavigationCheckpointTool = {
+  name: "restore_navigation_checkpoint",
+  description: "QA Skill: Restore a previously saved checkpoint to return to that page state. This navigates back to the saved URL and restores cookies/storage. Use this to test alternative paths from the same starting point without re-running the entire flow.",
+  input_schema: {
+    type: "object",
+    properties: {
+      checkpoint_name: {
+        type: "string",
+        description: "Name of the checkpoint to restore (must have been saved previously)"
+      }
+    },
+    required: ["checkpoint_name"]
+  }
+};
+var createTestEvidenceTool = {
+  name: "create_test_evidence",
+  description: "QA Skill: Create visual test evidence (screenshots or annotated screenshots) and save them to disk. Use 'screenshot' for a plain capture, 'annotated_screenshot' to highlight specific elements with colored borders and labels, or 'full_page_screenshot' for a full-page capture. Evidence files are saved for bug reports and test documentation.",
+  input_schema: {
+    type: "object",
+    properties: {
+      evidence_type: {
+        enum: ["screenshot", "annotated_screenshot", "full_page_screenshot"],
+        description: "Type of evidence to create"
+      },
+      annotations: {
+        type: "array",
+        description: "Elements to highlight with labels (only for 'annotated_screenshot')",
+        items: {
+          type: "object",
+          properties: {
+            idx: { type: "number", description: "IDX of the element to highlight" },
+            label: { type: "string", description: "Annotation text to display near the element" },
+            color: { type: "string", description: "Highlight color (default: red)", default: "red" }
+          },
+          required: ["idx", "label"]
+        }
+      },
+      save_as: {
+        type: "string",
+        description: "Filename for the evidence (without extension, .png will be added). Example: 'bug_save_button_disabled'"
+      },
+      description: {
+        type: "string",
+        description: "Description of what this evidence proves or highlights"
+      },
+      finish_run: {
+        type: "boolean",
+        description: "If true, immediately ends the mission after saving evidence (saves tokens). Use this for final success evidence."
+      }
+    },
+    required: ["evidence_type", "save_as"]
+  }
+};
+var sendKeyboardEventTool = {
+  name: "send_keyboard_event",
+  description: "QA Skill: Send a keyboard event to the page or a specific element. Use this for: pressing Escape to close modals/popups, pressing Tab to navigate between form fields, pressing Enter to submit or confirm, pressing Arrow keys to navigate within date/time pickers, dropdowns, sliders, or any custom component that responds to keyboard input. This is CRITICAL for native browser controls (time pickers, date pickers, color pickers) that do not respond well to 'fill'.",
+  input_schema: {
+    type: "object",
+    properties: {
+      key: {
+        type: "string",
+        description: "The key to press. Supported values: 'Escape', 'Enter', 'Tab', 'Backspace', 'Delete', 'ArrowUp', 'ArrowDown', 'ArrowLeft', 'ArrowRight', 'Home', 'End', 'PageUp', 'PageDown', 'Space', or any single character like 'a', '1', etc. For key combinations use '+' separator: 'Control+a', 'Shift+Tab'."
+      },
+      idx: {
+        type: "number",
+        description: "Optional: IDX of the element to focus before sending the key. If not provided, the key is sent to whatever element currently has focus."
+      },
+      repeat: {
+        type: "number",
+        description: "Number of times to press the key (default: 1). Useful for ArrowUp/ArrowDown in time pickers.",
+        default: 1
+      }
+    },
+    required: ["key"]
+  }
+};
+var interactNativeControlTool = {
+  name: "interact_native_control",
+  description: "QA Skill: Interact with native HTML controls that standard click/fill may not handle correctly. This includes: <input type='time'>, <input type='date'>, <input type='datetime-local'>, <input type='color'>, <input type='range'>, <select> with optgroup, and contenteditable elements. This tool uses Playwright's specialized methods (selectOption, fill with format coercion, press sequences) to reliably set values. ALWAYS prefer this tool over manual fill for time/date inputs.",
+  input_schema: {
+    type: "object",
+    properties: {
+      idx: {
+        type: "number",
+        description: "The IDX of the native control element"
+      },
+      control_type: {
+        enum: ["time", "date", "datetime", "color", "range", "select", "contenteditable"],
+        description: "The type of native control"
+      },
+      value: {
+        type: "string",
+        description: "The value to set. Formats: time='HH:mm' or 'HH:mm:ss', date='YYYY-MM-DD', datetime='YYYY-MM-DDTHH:mm', color='#rrggbb', range='number', select='option text or value', contenteditable='text to type'."
+      }
+    },
+    required: ["idx", "control_type", "value"]
+  }
+};
+var scrollPageTool = {
+  name: "scroll_page",
+  description: "QA Skill: Scroll the page or a specific container to reveal elements that are outside the current viewport. Use this when: you cannot find an expected element in CURRENT COMPONENTS (it might be below the fold), a form has many fields and you need to see more, or you need to scroll to a specific element. After scrolling, the page state will be refreshed in the next turn.",
+  input_schema: {
+    type: "object",
+    properties: {
+      direction: {
+        enum: ["up", "down", "left", "right", "top", "bottom"],
+        description: "Direction to scroll. 'top' and 'bottom' scroll all the way to the start/end."
+      },
+      amount: {
+        type: "number",
+        description: "Pixels to scroll (default: 500). Ignored for 'top' and 'bottom' directions.",
+        default: 500
+      },
+      idx: {
+        type: "number",
+        description: "Optional: IDX of a scrollable container. If omitted, scrolls the main page."
+      }
+    },
+    required: ["direction"]
+  }
+};
+var qaAdvancedTools = [
+  validateElementStateTool,
+  extractTableDataTool,
+  captureConsoleErrorsTool,
+  assertUrlPatternTool,
+  measurePagePerformanceTool,
+  saveNavigationCheckpointTool,
+  restoreNavigationCheckpointTool,
+  createTestEvidenceTool,
+  sendKeyboardEventTool,
+  interactNativeControlTool,
+  scrollPageTool
+];
+
+// tests/_helpers/qa-security-tools.ts
+async function audit_http_headers(page) {
+  console.log(`[QA-SEC] Auditing HTTP Headers for: ${page.url()}`);
+  const response = await page.reload({ waitUntil: "domcontentloaded" });
+  const headers = response?.headers();
+  const vulnerabilities = [];
+  const securityHeaders = {
+    "Content-Security-Policy": {
+      severity: "Medium",
+      remediation: "Implement a strict Content-Security-Policy (CSP) to mitigate XSS and other injection attacks. Start with a restrictive policy and gradually allow trusted sources.",
+      impact: "If an injection issue exists elsewhere in the application, the lack of CSP may increase exploitability and impact.",
+      cwe: "CWE-16"
+    },
+    "Strict-Transport-Security": {
+      severity: "Medium",
+      remediation: "Implement HTTP Strict Transport Security (HSTS) to force browsers to communicate over HTTPS, preventing downgrade attacks.",
+      impact: "Man-in-the-middle attacks could downgrade the connection to HTTP, allowing traffic interception.",
+      cwe: "CWE-319"
+    },
+    "X-Content-Type-Options": {
+      severity: "Low",
+      remediation: "Set `X-Content-Type-Options: nosniff` to prevent browsers from MIME-sniffing a response away from the declared content-type.",
+      impact: "Browsers may interpret non-executable MIME types as executable, leading to potential XSS.",
+      cwe: "CWE-430"
+    },
+    "X-Frame-Options": {
+      severity: "Medium",
+      remediation: "Set `X-Frame-Options: SAMEORIGIN` or `DENY` to protect against clickjacking attacks by preventing the page from being loaded in an iframe on other domains.",
+      impact: "Attackers could trick users into clicking visually hidden elements, causing unintended actions (Clickjacking).",
+      cwe: "CWE-1021"
+    }
+  };
+  for (const [header, info] of Object.entries(securityHeaders)) {
+    if (!headers || !Object.keys(headers).find((h) => h.toLowerCase() === header.toLowerCase())) {
+      vulnerabilities.push({
+        type: "security_misconfiguration",
+        category: "Missing Security Header",
+        subcategory: header,
+        severity: info.severity,
+        confidence: "High",
+        exploitability: "not_confirmed",
+        status: "detected",
+        description: `The '${header}' HTTP header is missing. This header is crucial for defending against various web attacks.`,
+        impact: info.impact,
+        evidence: {
+          url: page.url(),
+          missingHeader: header
+        },
+        reproductionSteps: [
+          `Navigate to ${page.url()}`,
+          `Inspect the response headers.`,
+          `Verify that ${header} is absent.`
+        ],
+        remediation: info.remediation,
+        classification: {
+          owaspTop10: "A05:2021 Security Misconfiguration",
+          cwe: info.cwe
+        }
+      });
+    }
+  }
+  console.log(`[QA-SEC] Found ${vulnerabilities.length} missing security headers.`);
+  return vulnerabilities;
+}
+async function scan_sensitive_data_exposure(page) {
+  console.log(`[QA-SEC] Scanning localStorage and sessionStorage for sensitive data.`);
+  const vulnerabilities = [];
+  const sensitiveKeywords = ["token", "password", "secret", "key", "jwt", "auth"];
+  const storages = {
+    localStorage: await page.evaluate(() => Object.entries(window.localStorage)),
+    sessionStorage: await page.evaluate(() => Object.entries(window.sessionStorage))
+  };
+  for (const [storageType, items] of Object.entries(storages)) {
+    for (const [key, value] of items) {
+      if (sensitiveKeywords.some((keyword) => key.toLowerCase().includes(keyword))) {
+        vulnerabilities.push({
+          type: "potential_issue",
+          category: "Sensitive Data Exposure",
+          subcategory: "Browser Storage",
+          severity: "Medium",
+          confidence: "Medium",
+          exploitability: "unknown",
+          status: "detected",
+          description: `Potentially sensitive data was found in ${storageType}. Storing sensitive information like tokens or keys in browser storage is insecure.`,
+          impact: "If an attacker discovers an XSS vulnerability, they can read localStorage/sessionStorage and exfiltrate secrets.",
+          evidence: {
+            storage: storageType,
+            key,
+            valuePreview: value ? `${value.substring(0, 10)}...` : "(empty)"
+          },
+          reproductionSteps: [
+            `Open Developer Tools on ${page.url()}`,
+            `Check ${storageType} for the key '${key}'.`
+          ],
+          remediation: "Avoid storing sensitive data in browser storage. Use secure, HttpOnly cookies for session tokens. If you must store data, encrypt it first.",
+          classification: {
+            owaspTop10: "A04:2021 Insecure Design",
+            cwe: "CWE-312"
+          }
+        });
+      }
+    }
+  }
+  console.log(`[QA-SEC] Found ${vulnerabilities.length} instances of sensitive data in browser storage.`);
+  return vulnerabilities;
+}
+
+// tests/_helpers/ai-agent-helper.ts
+var fs = __toESM(require("fs"));
+var path = __toESM(require("path"));
+
+// src/KnowledgeService.ts
+var crypto = __toESM(require("crypto"));
+var import_chalk = __toESM(require("chalk"));
+var KnowledgeService = class _KnowledgeService {
+  static instance;
+  apiBase;
+  apiKey;
+  projectId = null;
+  constructor() {
+    this.apiBase = process.env.ARCALITY_API_URL || "https://arcalityqadev.arcadial.lat";
+    this.apiKey = process.env.ARCALITY_API_KEY || "";
+    this.projectId = process.env.ARCALITY_PROJECT_ID || null;
+  }
+  /**
+   * Fetch wrapper with a 10-second timeout to prevent hanging.
+   * All KnowledgeService calls are telemetry/secondary — they must NEVER block the agent.
+   */
+  async fetchWithTimeout(url, options = {}, timeoutMs = 1e4) {
+    const controller = new AbortController();
+    const id = setTimeout(() => controller.abort(), timeoutMs);
+    try {
+      const res = await fetch(url, { ...options, signal: controller.signal });
+      clearTimeout(id);
+      return res;
+    } catch (err) {
+      clearTimeout(id);
+      throw err;
+    }
+  }
+  static getInstance() {
+    if (!_KnowledgeService.instance) {
+      _KnowledgeService.instance = new _KnowledgeService();
+    }
+    return _KnowledgeService.instance;
+  }
+  setProjectId(id) {
+    this.projectId = id;
+  }
+  getProjectId() {
+    if (!this.projectId || this.projectId === "undefined" || this.projectId === "null") {
+      this.projectId = process.env.ARCALITY_PROJECT_ID || null;
+    }
+    return this.projectId;
+  }
+  /**
+   * 1. Gestión de Proyectos
+   */
+  async getProjects() {
+    try {
+      const res = await this.fetchWithTimeout(`${this.apiBase}/api/v1/projects`, {
+        headers: { "x-api-key": this.apiKey }
+      });
+      if (!res.ok)
+        return [];
+      const data = await res.json();
+      return data.projects || [];
+    } catch (e) {
+      console.warn(import_chalk.default.yellow(`[KnowledgeService] Error al obtener proyectos: ${e.message}`));
+      return [];
+    }
+  }
+  async createProject(name, baseUrl) {
+    try {
+      const res = await this.fetchWithTimeout(`${this.apiBase}/api/v1/projects`, {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json",
+          "x-api-key": this.apiKey
+        },
+        body: JSON.stringify({ name, base_url: baseUrl })
+      });
+      if (!res.ok)
+        return null;
+      return await res.json();
+    } catch (e) {
+      console.error(import_chalk.default.red(`[KnowledgeService] Fall\xF3 creaci\xF3n de proyecto: ${e.message}`));
+      return null;
+    }
+  }
+  /**
+   * 2. Ingesta (Post-Percept)
+   */
+  async ingest(payload) {
+    if (!payload.project_id || payload.project_id === "undefined") {
+      console.warn(import_chalk.default.yellow(`[Knowledge] Ingesta cancelada: project_id es inv\xE1lido.`));
+      return;
+    }
+    try {
+      const res = await this.fetchWithTimeout(`${this.apiBase}/api/v1/portal/ingest`, {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json",
+          "x-api-key": this.apiKey
+        },
+        body: JSON.stringify(payload)
+      });
+      if (res.status === 200) {
+        const data = await res.json();
+        if (data.status === "skipped_duplicate_dom") {
+        } else {
+          console.log(import_chalk.default.cyan(`[Knowledge] Ingesta exitosa (Project: ${payload.project_id})`));
+        }
+      }
+    } catch (e) {
+      console.warn(import_chalk.default.yellow(`[Knowledge] Error en ingesta: ${e.message}`));
+    }
+  }
+  /**
+   * 3. Contexto (Pre-Reasoning)
+   */
+  async getContext(url) {
+    const pid = this.getProjectId();
+    if (!pid || pid === "undefined")
+      return null;
+    try {
+      const pathUrl = new URL(url).pathname;
+      const res = await this.fetchWithTimeout(
+        `${this.apiBase}/api/v1/portal/context?project_id=${pid}&path=${encodeURIComponent(pathUrl)}`,
+        { headers: { "x-api-key": this.apiKey } }
+      );
+      if (!res.ok)
+        return null;
+      return await res.json();
+    } catch (e) {
+      console.warn(import_chalk.default.yellow(`[Knowledge] Error al obtener contexto: ${e.message}`));
+      return null;
+    }
+  }
+  /**
+   * 4. Aprendizaje (portal_domain_rules)
+   */
+  async saveRule(title, description, severity = "important", pageUrl) {
+    const pid = this.getProjectId();
+    if (!pid || pid === "undefined")
+      return;
+    try {
+      const pathUrl = pageUrl ? new URL(pageUrl).pathname : null;
+      await fetch(`${this.apiBase}/api/v1/portal/rules`, {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json",
+          "x-api-key": this.apiKey
+        },
+        body: JSON.stringify({
+          project_id: pid,
+          rule_type: "UI_UX",
+          // Default según especificación
+          title,
+          description,
+          severity
+        })
+      });
+      console.log(import_chalk.default.green(`[Knowledge] Nueva regla registrada: ${title}`));
+    } catch (e) {
+    }
+  }
+  /**
+   * 5. Catálogo de Campos (portal_field_catalog)
+   */
+  async saveField(identifier, type, isRequired) {
+    const pid = this.getProjectId();
+    if (!pid || pid === "undefined")
+      return;
+    try {
+      await fetch(`${this.apiBase}/api/v1/portal/fields`, {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json",
+          "x-api-key": this.apiKey
+        },
+        body: JSON.stringify({
+          project_id: pid,
+          field_identifier: identifier,
+          field_type: type,
+          is_required: isRequired,
+          source: "agent_auto"
+        })
+      });
+      console.log(import_chalk.default.green(`[Knowledge] Nuevo campo catalogado: ${identifier}`));
+    } catch (e) {
+    }
+  }
+  /**
+   * 6. Conocimiento General (Documentación)
+   */
+  async saveKnowledge(title, content, docType = "PROCESS") {
+    const pid = this.getProjectId();
+    if (!pid || pid === "undefined")
+      return;
+    try {
+      await fetch(`${this.apiBase}/api/v1/portal/knowledge`, {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json",
+          "x-api-key": this.apiKey
+        },
+        body: JSON.stringify({
+          project_id: pid,
+          doc_type: docType,
+          title,
+          content,
+          source: "agent_auto"
+        })
+      });
+      console.log(import_chalk.default.green(`[Knowledge] Nuevo conocimiento guardado: ${title}`));
+    } catch (e) {
+    }
+  }
+  /**
+   * Utilidad: Calcular Hash para Ingesta
+   */
+  calculateDomHash(components) {
+    const fingerprint = components.map((c) => `${c.tag}-${c.semanticLabel}`).join("|");
+    return crypto.createHash("sha256").update(fingerprint).digest("hex");
+  }
+};
+
+// src/services/collectiveMemoryService.ts
+var getBase = () => process.env.ARCALITY_API_URL ? `${process.env.ARCALITY_API_URL}/api/v1` : null;
+var getKey = () => process.env.ARCALITY_API_KEY || "";
+var getPid = () => process.env.ARCALITY_PROJECT_ID || "";
+var EMPTY_GUID = "00000000-0000-0000-0000-000000000000";
+function isConfigured() {
+  const base = getBase();
+  const key = getKey();
+  const pid = getPid();
+  if (!base || !key || !pid || pid === EMPTY_GUID) {
+    return false;
+  }
+  return true;
+}
+async function pushRule(rule) {
+  if (!isConfigured())
+    return null;
+  try {
+    const res = await fetch(`${getBase()}/portal/rules`, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        "x-api-key": getKey()
+      },
+      body: JSON.stringify({
+        project_id: getPid(),
+        rule_type: rule.rule_type,
+        title: rule.title.substring(0, 100),
+        description: rule.description.substring(0, 500),
+        severity: rule.severity ?? "important",
+        source: "agent"
+      })
+    });
+    if (!res.ok) {
+      console.warn(`[CollectiveMemory] pushRule HTTP ${res.status}: ${await res.text().catch(() => "")}`);
+      return null;
+    }
+    const data = await res.json();
+    console.log(`\x1B[32m[CollectiveMemory] \u2705 Regla guardada: "${rule.title}"\x1B[0m`);
+    return data.id ?? null;
+  } catch (err) {
+    console.warn(`[CollectiveMemory] pushRule error: ${err?.message}`);
+    return null;
+  }
+}
+async function pushField(field) {
+  if (!isConfigured())
+    return null;
+  if (field.existingFieldIds?.includes(field.field_identifier)) {
+    return null;
+  }
+  try {
+    const res = await fetch(`${getBase()}/portal/fields`, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        "x-api-key": getKey()
+      },
+      body: JSON.stringify({
+        project_id: getPid(),
+        page_id: field.page_id ?? null,
+        field_identifier: field.field_identifier.substring(0, 100),
+        field_type: field.field_type ?? "text",
+        is_required: field.is_required ?? false,
+        validation_rule: field.validation_rule?.substring(0, 300) ?? null,
+        source: "agent"
+      })
+    });
+    if (!res.ok) {
+      return null;
+    }
+    const data = await res.json();
+    return data.id ?? null;
+  } catch (err) {
+    return null;
+  }
+}
+async function pushKnowledge(knowledge) {
+  if (!isConfigured())
+    return null;
+  try {
+    const res = await fetch(`${getBase()}/portal/knowledge`, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        "x-api-key": getKey()
+      },
+      body: JSON.stringify({
+        project_id: getPid(),
+        doc_type: knowledge.doc_type,
+        title: knowledge.title.substring(0, 150),
+        content: knowledge.content.substring(0, 500),
+        source: "agent"
+      })
+    });
+    if (!res.ok) {
+      console.warn(`[CollectiveMemory] pushKnowledge HTTP ${res.status}: ${await res.text().catch(() => "")}`);
+      return null;
+    }
+    const data = await res.json();
+    console.log(`\x1B[32m[CollectiveMemory] \u2705 Conocimiento guardado: "${knowledge.title}"\x1B[0m`);
+    return data.id ?? null;
+  } catch (err) {
+    console.warn(`[CollectiveMemory] pushKnowledge error: ${err?.message}`);
+    return null;
+  }
+}
+async function getKnownFieldIdentifiers(pathUrl) {
+  if (!isConfigured())
+    return [];
+  try {
+    const res = await fetch(
+      `${getBase()}/portal/context?project_id=${getPid()}&path=${encodeURIComponent(pathUrl)}`,
+      { headers: { "x-api-key": getKey() } }
+    );
+    if (!res.ok)
+      return [];
+    const data = await res.json();
+    return (data?.fields ?? []).map((f) => f.field_identifier ?? "").filter(Boolean);
+  } catch {
+    return [];
+  }
+}
+
+// tests/_helpers/ai-agent-helper.ts
+var qaSecurityTools = [
+  {
+    name: "test_xss_injection",
+    description: "Injects a standard XSS payload into an input field to test for reflected XSS vulnerabilities. Reports a vulnerability if an alert is triggered.",
+    parameters: {
+      type: "object",
+      properties: {
+        selector: { type: "string", description: "The CSS selector of the input field to test." }
+      },
+      required: ["selector"]
+    }
+  },
+  {
+    name: "test_auth_bypass",
+    description: "Attempts to directly navigate to a URL that should be protected to check for authentication bypass vulnerabilities.",
+    parameters: {
+      type: "object",
+      properties: {
+        url: { type: "string", description: "The protected URL to test." },
+        redirectUrl: { type: "string", description: "The expected URL to be redirected to if unauthorized (e.g., '/login')." }
+      },
+      required: ["url", "redirectUrl"]
+    }
+  },
+  {
+    name: "audit_http_headers",
+    description: "Audits the current page's HTTP response headers for common security headers like CSP, HSTS, etc.",
+    parameters: { type: "object", properties: {} }
+  },
+  {
+    name: "scan_sensitive_data_exposure",
+    description: "Scans localStorage and sessionStorage for keys that might contain sensitive data (e.g., 'token', 'password').",
+    parameters: { type: "object", properties: {} }
+  }
+];
+var _sessionFieldCache = /* @__PURE__ */ new Set();
+var AIAgentHelper = class {
+  page;
+  contextDir;
+  testInfo;
+  knowledgeService;
+  lastScreenshot = null;
+  logs = [];
+  checkpoints = /* @__PURE__ */ new Map();
+  sessionStorage = /* @__PURE__ */ new Map();
+  constructor(page, contextDir = "out", testInfo, knowledgeService) {
+    this.page = page;
+    this.contextDir = contextDir;
+    this.testInfo = testInfo;
+    this.knowledgeService = knowledgeService || KnowledgeService.getInstance();
+    this.page.on("console", (msg) => {
+      if (msg.type() === "error" || msg.type() === "warning") {
+        this.logs.push(`[${msg.type().toUpperCase()}] ${msg.text()}`);
+        if (this.logs.length > 30)
+          this.logs.shift();
+      }
+    });
+    this.page.on("requestfailed", (request) => {
+      const failure = request.failure();
+      this.logs.push(`[NETWORK_ERROR] ${request.method()} ${request.url()} - ${failure?.errorText || "Unknown error"}`);
+      if (this.logs.length > 30)
+        this.logs.shift();
+    });
+  }
+  loadSkills() {
+    try {
+      let skillsContext = "";
+      let loadedCount = 0;
+      const toolsRoot = process.env.ARCALITY_ROOT || path.join(__dirname, "..", "..");
+      const possibleDirs = [
+        path.join(toolsRoot, ".agent", "skills"),
+        path.join(toolsRoot, ".agents", "skills")
+      ];
+      for (const rootDir of possibleDirs) {
+        if (!fs.existsSync(rootDir))
+          continue;
+        if (loadedCount === 0) {
+          skillsContext += "\n\u{1F6E0}\uFE0F SKILLS INSTALADAS (Metodolog\xEDas activas):\n";
+        }
+        const entries = fs.readdirSync(rootDir, { withFileTypes: true });
+        for (const entry of entries) {
+          let content = "";
+          let skillName = entry.name;
+          if (entry.isDirectory()) {
+            const skillPath = path.join(rootDir, entry.name, "SKILL.md");
+            if (fs.existsSync(skillPath)) {
+              content = fs.readFileSync(skillPath, "utf8");
+            }
+          } else if (entry.name.endsWith(".md")) {
+            const skillPath = path.join(rootDir, entry.name);
+            content = fs.readFileSync(skillPath, "utf8");
+          }
+          if (content) {
+            skillsContext += `
+--- SKILL: ${skillName} ---
+${content}
+`;
+            loadedCount++;
+          }
+        }
+      }
+      if (loadedCount > 0) {
+        console.log(`>> \u{1F4D1} ${loadedCount} habilidades QA inyectadas al cerebro.`);
+        return skillsContext;
+      }
+    } catch (e) {
+      console.warn(`>>ARCALITY_STATUS>> \u26A0\uFE0F Error cargando habilidades: ${e.message}`);
+    }
+    return "";
+  }
+  loadMemory(prompt) {
+    try {
+      const memoryFile = path.join(this.contextDir, "memoria-agente.json");
+      if (fs.existsSync(memoryFile)) {
+        const memories = JSON.parse(fs.readFileSync(memoryFile, "utf8"));
+        const keywords = prompt.toLowerCase().split(" ").filter((w) => w.length > 4);
+        const relevantSuccess = memories.filter((m) => {
+          if (!m.success)
+            return false;
+          const memPrompt = (m.prompt || "").toLowerCase();
+          const matches = keywords.filter((kw) => memPrompt.includes(kw)).length;
+          return matches >= 3 || keywords.length > 0 && matches === keywords.length;
+        }).slice(-1);
+        const relevantFailures = memories.filter((m) => !m.success && m.error).slice(-1);
+        let memoryContext = "";
+        if (relevantSuccess.length) {
+          const best = relevantSuccess[0];
+          memoryContext += `
+\u{1F4DA} SUCCESS GUIDANCE FOR THIS MISSION:
+The following steps led to SUCCESS for a similar mission ("${best.prompt}"):
+${best.steps.slice(0, 15).map((s) => `  - ${s}`).join("\n")}
 (Use these steps as a roadmap if the current UI allows it!)
-`}return w.length&&(R+=`
-\xE2\u0161\xA0\xEF\xB8\x8F PREVIOUS FAILURES TO AVOID:
-${w.map(b=>`- ${b.prompt}`).join(`
-`)}
-`),R}}catch{}return""}async getPageState(){return this.page.isClosed()?{url:"",title:"",components:[]}:this.getPageStateRefined()}async getPageStateRefined(){let e=this.page.frames(),i=0,a=[];for(let R=0;R<e.length;R++){let b=e[R];if(!b.isDetached())try{let j=await b.evaluate(({startIdx:N})=>{let E=A=>{let d=window.getComputedStyle(A),k=A.getBoundingClientRect(),_=k.width>1&&k.height>1,C=parseFloat(d.opacity||"1")>.05;return d.display!=="none"&&d.visibility!=="hidden"&&C&&_},U=Array.from(document.querySelectorAll('button, input, select, textarea, [role], a, h1, h2, label, span, p, i, svg, img, [class*="alert"],[class*="toast"],[class*="message"],[class*="error"],[class*="success"],[id*="alert"],[id*="toast"],[role="alert"],[role="status"],.error-message,.success-message')),$=0;return U.filter(A=>{let d=A;return d.tagName.toLowerCase()==="input"&&d.type==="file"?window.getComputedStyle(d).display!=="none":E(d)}).map(A=>{let d=A,k=d.tagName.toLowerCase(),_=d.getAttribute("role")||"",C=(d.innerText||d.getAttribute("aria-label")||d.getAttribute("title")||"").trim().replace(/\s+/g," "),L=C.toLowerCase(),q=(L.includes("error")||L.includes("fall\xC3\xB3")||L.includes("no se puede")||L.includes("ya existe")||L.includes("existe")||L.includes("inv\xC3\xA1lido")||L.includes("incorrecto")||L.includes("ligado")||L.includes("depende")||L.includes("duplicado")||L.includes("repetido"))&&C.length<200,Q=(L.includes("exitosamente")||L.includes("guardado")||L.includes("creado")||L.includes("success")||L.includes("correctamente")&&C.length<100)&&C.length<200,Y=q||Q;if(!Y&&(k==="span"||k==="p"||k==="label"||k==="i"||k==="svg"||k==="img"||k==="div")){let m=d.hasAttribute("aria-label")||d.hasAttribute("title")||_||d.id;if(C.length>300&&!Y&&!m||C.length<2&&!m&&k!=="svg"&&k!=="img"&&k!=="i")return null}let B=N+$++;d.setAttribute("agent-idx",B.toString());let O=C||d.getAttribute("aria-label")||d.getAttribute("title")||d.getAttribute("placeholder");if(!O){let m=d.outerHTML.match(/fa-([a-z0-9-]+)|md-([a-z0-9-]+)|bi-([a-z0-9-]+)/i);m&&(O=`Icon:${m[1]||m[2]||m[3]}`)}let T=d.outerHTML.toLowerCase(),F=(d.className||"").toString().toLowerCase(),t=T.includes("trash")||T.includes("delete")||T.includes("eliminar")||T.includes("remove"),p=T.includes("edit")||T.includes("pencil")||T.includes("modify")||T.includes("editar")||T.includes("modificar")||T.includes("pen");t&&(!O||O.length<3)&&(O="[INFERRED] Eliminar"),p&&(!O||O.length<3)&&(O="[INFERRED] Editar");let u="INFO",s=F.includes("error")||F.includes("danger")||F.includes("fail"),n=q||s&&C.split(" ").length>2,r=F.includes("success")||Q||L.includes("\xC3\xA9xito"),f=_==="tab"||F.includes("tab")||F.includes("pesta\xC3\xB1a");if(k==="input"||k==="textarea"||k==="select"?u="FIELD":k==="button"||_==="button"||k==="a"||_==="link"||f?u="ACTION":_==="option"?u="OPTION":_==="combobox"||d.hasAttribute("aria-expanded")?u="DROPDOWN":(n||F.includes("alert")||F.includes("toast")||_==="status"||_==="alert"||Y)&&(u=r?"SUCCESS_MESSAGE":n?"ERROR_MESSAGE":"MESSAGE"),u.includes("MESSAGE")&&(O=(n?"\xF0\u0178\u203A\u2018 [ERROR_CR\xC3\x8DTICO] ":r?"\xE2\u0153\xA8 [\xC3\u2030XITO_DETECTADO] ":"[INFO] ")+(O||C||"Mensaje del sistema")),(u==="ACTION"||u==="FIELD")&&(O=`[${k}] ${O||""}`.trim(),!O||O.length<10)){let m=d.closest("tr");if(m){let y=(m.innerText||"").split(`
-`)[0].substring(0,20).trim();y&&(O+=` (${y})`)}}O||(O=k);let c=10;return u==="MESSAGE"?c=200:u==="FIELD"?c=100:u==="OPTION"?c=90:u==="ACTION"?c=80:u==="DROPDOWN"&&(c=70),{idx:B,type:u,name:O,value:d.value||"",frameIdx:0,selector:`[agent-idx="${B}"]`,score:c}}).filter(Boolean)},{startIdx:i});j.forEach(N=>{N.frameIdx=R,a.push(N)}),i+=j.length}catch{}}console.log(`>>ARCALITY_STATUS>> \xF0\u0178\u201D\x8D Percepci\xC3\xB3n profunda encontr\xC3\xB3 ${a.length} componentes`);let l=a.sort((R,b)=>b.score-R.score).slice(0,500),h=await this.page.title(),w=this.page.url();try{let R=this.knowledgeService.calculateDomHash(l),b=this.page.viewportSize()||{width:1280,height:720},j=this.knowledgeService.getProjectId()||process.env.ARCALITY_PROJECT_ID||"";if(j){let N={project_id:j,target_url:w,page_title:h,dom_hash:R,viewport:{width:b.width,height:b.height},components:l.map(E=>{let U="INFO";return E.type==="ACTION"?U="ACTION":E.type==="FIELD"||E.type==="OPTION"||E.type==="DROPDOWN"?U="FIELD":(E.name?.toLowerCase().includes("nav")||E.type==="ACTION")&&(U="NAVIGATION"),{tag:E.selector?.split("]")[0]?.replace("[","")||"div",component_type:U,semantic_label:E.name,text_content:E.value,is_interactive:U==="ACTION"||U==="FIELD",attributes:{idx:E.idx,originalType:E.type},bounding_rect:E.rect||{x:0,y:0,width:0,height:0}}})};await this.knowledgeService.ingest(N);try{let E=new URL(w).pathname,$=l.filter(A=>A.type==="FIELD"||A.type==="OPTION"||A.type==="DROPDOWN").filter(A=>{let d=(A.name||A.value||"").trim();return d.length>=2&&!Re.has(d)}).slice(0,5);if($.length>0){let A=await Ee(E);for(let d of $){let k=(d.name||d.value||"").trim();Re.add(k);let _=(d.selector||"").toLowerCase(),C=k.toLowerCase(),L="text";C.includes("email")||_.includes("email")?L="email":C.includes("password")||_.includes("password")?L="password":d.type==="DROPDOWN"||_.includes("select")?L="select":_.includes("textarea")?L="textarea":_.includes("checkbox")?L="checkbox":_.includes("date")?L="date":_.includes("number")&&(L="number"),ve({field_identifier:k.substring(0,100),field_type:L,is_required:!1,existingFieldIds:A}).catch(()=>{})}}}catch{}}}catch(R){console.log(`>>ARCALITY_STATUS>> \xE2\u0161\xA0\xEF\xB8\x8F Error en hook de ingesta: ${R.message}`)}return{url:w,title:h,components:l}}async getActionFromGuia(e,i){try{let a=require("fs"),h=require("path").join(this.contextDir,"memoria-agente.json");if(!a.existsSync(h))return null;let w=JSON.parse(a.readFileSync(h,"utf8")),R=await this.getPageState(),b=this.page.url(),j=$=>{let A=$.toLowerCase(),d=new Set;return A.includes("primera")&&d.add("primera"),A.includes("segunda")&&d.add("segunda"),A.includes("tercera")&&d.add("tercera"),A.includes("cuarta")&&d.add("cuarta"),A.includes("\xC3\xBAltima")&&d.add("\xC3\xBAltima"),A.includes("first")&&d.add("primera"),A.includes("second")&&d.add("segunda"),A.includes("third")&&d.add("tercera"),A.includes("fourth")&&d.add("cuarta"),A.includes("last")&&d.add("\xC3\xBAltima"),d},N=j(e),E=["elimina","borra","quita","delete","remove","crea","nueva","a\xC3\xB1ade","add","create","new","edita","modifica","cambia","edit","update"].filter($=>e.toLowerCase().includes($)),U=w.filter($=>$.success&&$.steps_data&&$.steps_data[i]).reverse().find($=>{let A=($.prompt||"").toLowerCase(),k=e.toLowerCase().split(" ").filter(t=>t.length>3);if(k.length===0||k.filter(t=>A.includes(t)).length/k.length<.7)return!1;let C=["elimina","borra","quita","delete","remove","crea","nueva","a\xC3\xB1ade","add","create","new","edita","modifica","cambia","edit","update"].filter(t=>A.includes(t)),L=E.some(t=>C.includes(t));if(E.some(t=>["elimina","borra","delete"].includes(t))&&C.some(t=>["crea","nueva","create","new"].includes(t))||E.some(t=>["crea","nueva","create","new"].includes(t))&&C.some(t=>["elimina","borra","delete"].includes(t))||!L&&E.length>0||E.length===0&&C.length>0)return!1;let Q=j($.prompt||"");for(let t of N)if(!Q.has(t))return!1;let Y=$.steps_data[i];if(!Y)return!1;let B=t=>t.replace(/\/[a-z]{2}-[A-Z]{2}\//g,"/{locale}/").replace(/\/[a-z]{2}\//g,"/{lang}/"),O=B((Y.url||"").split("?")[0]),T=B(b.split("?")[0]);return O!==T?!1:!!R.components.find(t=>{let p=(Y.componentName||"").replace(/\[.*?\]/g,"").replace(/\(.*?\)/g,"").trim().toLowerCase(),u=(t.name||"").replace(/\[.*?\]/g,"").replace(/\(.*?\)/g,"").trim().toLowerCase();return t.selector===Y.selector||p!==""&&(p===u||u.includes(p))})});if(U){let $=U.steps_data[i],A=$.componentName||"";if(A.length>80)return console.log(`>>ARCALITY_STATUS>> \xE2\u0161\xA0\xEF\xB8\x8F Gu\xC3\xADa rechazada: Nombre de componente demasiado largo (${A.length} chars). Delegando a IA.`),null;if(A.includes("[INFERRED]"))return console.log(`>>ARCALITY_STATUS>> \xE2\u0161\xA0\xEF\xB8\x8F Gu\xC3\xADa rechazada: Componente con nombre inferido "${A}". Delegando a IA.`),null;if(!A||A.length<3)return console.log(">>ARCALITY_STATUS>> \xE2\u0161\xA0\xEF\xB8\x8F Gu\xC3\xADa rechazada: Componente sin nombre claro. Delegando a IA."),null;let d=R.components.find(k=>{let _=($.componentName||"").replace(/\[.*?\]/g,"").replace(/\(.*?\)/g,"").trim().toLowerCase(),C=(k.name||"").replace(/\[.*?\]/g,"").replace(/\(.*?\)/g,"").trim().toLowerCase();return k.selector===$.selector||_!==""&&(_===C||C.includes(_))});if(d)return{thought:`[GU\xC3\x8DA DE \xC3\u2030XITO] Reutilizando paso maestro aprendido: ${$.action_data.action} en ${d.name}`,actions:[{...$.action_data,idx:d.idx,description:d.name,selector:d.selector,frameIdx:d.frameIdx,type:d.type}],finish:$.finish||!1}}}catch{}return null}async askIA(e,i=[],a){if(!process.env.ARCALITY_API_URL&&!process.env.ANTHROPIC_API_KEY)throw new Error("ANTHROPIC_API_KEY missing and ARCALITY_API_URL not configured");let l=await this.getPageState(),h=await this.page.screenshot({type:"png"}),w=h.toString("base64"),R=l.components.map(_=>`IDX:${_.idx} | TYPE:${_.type} | NAME: "${_.name}"${_.value?` | VAL:"${_.value}"`:""} `).join(`
-`),b=[{name:"perform_ui_actions",description:"Execute standard UI interactions (click, fill, wait) to progress in the mission.",parameters:{type:"object",properties:{thought:{type:"string",description:"Reasoning about why these actions are taken."},actions:{type:"array",items:{type:"object",properties:{idx:{type:"number",description:"The IDX from the components list."},action:{enum:["click","double_click","fill","select","wait"]},value:{type:"string",description:"Text to fill if action is 'fill'."}},required:["action"]}},finish:{type:"boolean",description:"CRITICAL: Set to true only when the mission objective is fully achieved. If true, actions should ideally be empty."}},required:["thought","actions"]}},{name:"inspect_element_details",description:"QA Skill: Get deep technical metadata of an element (attributes, computed styles). Use this if an element is hidden, disabled, or not responding correctly.",parameters:{type:"object",properties:{idx:{type:"number",description:"The IDX of the component to research."}},required:["idx"]}},{name:"report_application_bug",description:"QA Skill: Use this when the mission objective cannot be achieved. This includes: (1) Technical BUGS (elements not appearing), (2) BUSINESS ERRORS (validation messages like 'Conflict', 'Already exists', 'Permission denied'), or (3) Any condition that violates the user's success criteria.",parameters:{type:"object",properties:{bug_description:{type:"string",description:"Detailed description of the failure or error message."},expected_behavior:{type:"string",description:"What the mission expected (Success Criteria)."},actual_behavior:{type:"string",description:"What actually happened (Failure Criteria)."}},required:["bug_description","expected_behavior","actual_behavior"]}},{name:"report_inability_to_proceed",description:"CRITICAL: Use this when you are STUCK, CONFUSED, or CANNOT find required elements after 3+ attempts. This tool allows you to gracefully admit confusion and help the user rephrase the prompt. Use when: (1) You've clicked the same element 3+ times, (2) Cannot find a specific UI element mentioned in the prompt, (3) The prompt is ambiguous or contradictory.",parameters:{type:"object",properties:{confusion_reason:{type:"string",description:"Explain why you cannot proceed (e.g., 'Cannot find Menu icon after 5 attempts', 'Stuck clicking same element repeatedly', 'Prompt asks for first but I only see second')"},attempts_summary:{type:"string",description:"Summarize what you tried (e.g., 'Clicked TAE-063 5 times, went back to list 5 times')"},prompt_suggestion:{type:"string",description:"Suggest how the user can rephrase for clarity (e.g., 'Please specify the exact text or position of the menu icon')"}},required:["confusion_reason","attempts_summary","prompt_suggestion"]}},...be.map(_=>({name:_.name,description:_.description,parameters:_.input_schema||_.parameters})),...Xe.map(_=>({name:_.name,description:_.description,parameters:_.input_schema||_.parameters}))],j=process.env.LOGIN_USER&&process.env.LOGIN_PASSWORD?`
-\xF0\u0178\u201D\u2018 QA CREDENTIALS (Use if login is needed):
+`;
+        }
+        if (relevantFailures.length) {
+          memoryContext += `
+\u26A0\uFE0F PREVIOUS FAILURES TO AVOID:
+${relevantFailures.map((m) => `- ${m.prompt}`).join("\n")}
+`;
+        }
+        return memoryContext;
+      }
+    } catch {
+    }
+    return "";
+  }
+  async getPageState() {
+    if (this.page.isClosed())
+      return { url: "", title: "", components: [] };
+    return this.getPageStateRefined();
+  }
+  async getPageStateRefined() {
+    const frames = this.page.frames();
+    let globalIdx = 0;
+    const allComponents = [];
+    for (let fIdx = 0; fIdx < frames.length; fIdx++) {
+      const frame = frames[fIdx];
+      if (frame.isDetached())
+        continue;
+      try {
+        const results = await frame.evaluate(({ startIdx }) => {
+          const isVisible = (el) => {
+            const style = window.getComputedStyle(el);
+            const rect = el.getBoundingClientRect();
+            const hasSize = rect.width > 1 && rect.height > 1;
+            const isNotTranslucent = parseFloat(style.opacity || "1") > 0.05;
+            const isCssVisible = style.display !== "none" && style.visibility !== "hidden";
+            return isCssVisible && isNotTranslucent && hasSize;
+          };
+          const nodes = Array.from(document.querySelectorAll('button, input, select, textarea, [role], a, h1, h2, label, span, p, i, svg, img, [class*="alert"],[class*="toast"],[class*="message"],[class*="error"],[class*="success"],[id*="alert"],[id*="toast"],[role="alert"],[role="status"],.error-message,.success-message'));
+          let localCount = 0;
+          return nodes.filter((el) => {
+            const htmlEl = el;
+            if (htmlEl.tagName.toLowerCase() === "input" && htmlEl.type === "file") {
+              return window.getComputedStyle(htmlEl).display !== "none";
+            }
+            return isVisible(htmlEl);
+          }).map((el) => {
+            const htmlEl = el;
+            const tag = htmlEl.tagName.toLowerCase();
+            const role = htmlEl.getAttribute("role") || "";
+            const text = (htmlEl.innerText || htmlEl.getAttribute("aria-label") || htmlEl.getAttribute("title") || "").trim().replace(/\s+/g, " ");
+            const textLower = text.toLowerCase();
+            const isCriticalFailure = (textLower.includes("error") || textLower.includes("fall\xF3") || textLower.includes("no se puede") || textLower.includes("ya existe") || textLower.includes("existe") || textLower.includes("inv\xE1lido") || textLower.includes("incorrecto") || textLower.includes("ligado") || textLower.includes("depende") || textLower.includes("duplicado") || textLower.includes("repetido")) && text.length < 200;
+            const isCriticalSuccess = (textLower.includes("exitosamente") || textLower.includes("guardado") || textLower.includes("creado") || textLower.includes("success") || textLower.includes("correctamente") && text.length < 100) && text.length < 200;
+            const isCriticalFeedback = isCriticalFailure || isCriticalSuccess;
+            if (!isCriticalFeedback && (tag === "span" || tag === "p" || tag === "label" || tag === "i" || tag === "svg" || tag === "img" || tag === "div")) {
+              const hasIdentification = htmlEl.hasAttribute("aria-label") || htmlEl.hasAttribute("title") || role || htmlEl.id;
+              if (text.length > 300 && !isCriticalFeedback && !hasIdentification)
+                return null;
+              if (text.length < 2 && !hasIdentification && tag !== "svg" && tag !== "img" && tag !== "i")
+                return null;
+            }
+            const idx = startIdx + localCount++;
+            htmlEl.setAttribute("agent-idx", idx.toString());
+            let name = text || htmlEl.getAttribute("aria-label") || htmlEl.getAttribute("title") || htmlEl.getAttribute("placeholder");
+            if (!name) {
+              const iconMatch = htmlEl.outerHTML.match(/fa-([a-z0-9-]+)|md-([a-z0-9-]+)|bi-([a-z0-9-]+)/i);
+              if (iconMatch) {
+                name = `Icon:${iconMatch[1] || iconMatch[2] || iconMatch[3]}`;
+              }
+            }
+            const htmlLower = htmlEl.outerHTML.toLowerCase();
+            const classLower = (htmlEl.className || "").toString().toLowerCase();
+            const isDeleteAction = htmlLower.includes("trash") || htmlLower.includes("delete") || htmlLower.includes("eliminar") || htmlLower.includes("remove");
+            const isEditAction = htmlLower.includes("edit") || htmlLower.includes("pencil") || htmlLower.includes("modify") || htmlLower.includes("editar") || htmlLower.includes("modificar") || htmlLower.includes("pen");
+            if (isDeleteAction && (!name || name.length < 3))
+              name = "[INFERRED] Eliminar";
+            if (isEditAction && (!name || name.length < 3))
+              name = "[INFERRED] Editar";
+            let type = "INFO";
+            const isErrorClass = classLower.includes("error") || classLower.includes("danger") || classLower.includes("fail");
+            const isError = isCriticalFailure || isErrorClass && text.split(" ").length > 2;
+            const isSuccess = classLower.includes("success") || isCriticalSuccess || textLower.includes("\xE9xito");
+            const isTab = role === "tab" || classLower.includes("tab") || classLower.includes("pesta\xF1a");
+            if (tag === "input" || tag === "textarea" || tag === "select")
+              type = "FIELD";
+            else if (tag === "button" || role === "button" || tag === "a" || role === "link" || isTab)
+              type = "ACTION";
+            else if (role === "option")
+              type = "OPTION";
+            else if (role === "combobox" || htmlEl.hasAttribute("aria-expanded"))
+              type = "DROPDOWN";
+            else if (isError || classLower.includes("alert") || classLower.includes("toast") || role === "status" || role === "alert" || isCriticalFeedback) {
+              type = isSuccess ? "SUCCESS_MESSAGE" : isError ? "ERROR_MESSAGE" : "MESSAGE";
+            }
+            if (type.includes("MESSAGE")) {
+              const prefix = isError ? "\u{1F6D1} [ERROR_CR\xCDTICO] " : isSuccess ? "\u2728 [\xC9XITO_DETECTADO] " : "[INFO] ";
+              name = prefix + (name || text || "Mensaje del sistema");
+            }
+            if (type === "ACTION" || type === "FIELD") {
+              name = `[${tag}] ${name || ""}`.trim();
+              if (!name || name.length < 10) {
+                const row = htmlEl.closest("tr");
+                if (row) {
+                  const rowText = (row.innerText || "").split("\n")[0].substring(0, 20).trim();
+                  if (rowText)
+                    name += ` (${rowText})`;
+                }
+              }
+            }
+            if (!name)
+              name = tag;
+            let score = 10;
+            if (type === "MESSAGE")
+              score = 200;
+            else if (type === "FIELD")
+              score = 100;
+            else if (type === "OPTION")
+              score = 90;
+            else if (type === "ACTION")
+              score = 80;
+            else if (type === "DROPDOWN")
+              score = 70;
+            return {
+              idx,
+              type,
+              name,
+              value: htmlEl.value || "",
+              frameIdx: 0,
+              // Placeholder
+              selector: `[agent-idx="${idx}"]`,
+              score
+            };
+          }).filter(Boolean);
+        }, { startIdx: globalIdx });
+        results.forEach((c) => {
+          c.frameIdx = fIdx;
+          allComponents.push(c);
+        });
+        globalIdx += results.length;
+      } catch {
+      }
+    }
+    console.log(`>>ARCALITY_STATUS>> \u{1F50D} Percepci\xF3n profunda encontr\xF3 ${allComponents.length} componentes`);
+    const sortedComponents = allComponents.sort((a, b) => b.score - a.score).slice(0, 500);
+    const title = await this.page.title();
+    const url = this.page.url();
+    try {
+      const domHash = this.knowledgeService.calculateDomHash(sortedComponents);
+      const viewport = this.page.viewportSize() || { width: 1280, height: 720 };
+      const projectId = this.knowledgeService.getProjectId() || process.env.ARCALITY_PROJECT_ID || "";
+      if (projectId) {
+        const requestPayload = {
+          project_id: projectId,
+          target_url: url,
+          page_title: title,
+          dom_hash: domHash,
+          viewport: { width: viewport.width, height: viewport.height },
+          components: sortedComponents.map((c) => {
+            let compType = "INFO";
+            if (c.type === "ACTION")
+              compType = "ACTION";
+            else if (c.type === "FIELD" || c.type === "OPTION" || c.type === "DROPDOWN")
+              compType = "FIELD";
+            else if (c.name?.toLowerCase().includes("nav") || c.type === "ACTION")
+              compType = "NAVIGATION";
+            return {
+              tag: c.selector?.split("]")[0]?.replace("[", "") || "div",
+              component_type: compType,
+              semantic_label: c.name,
+              text_content: c.value,
+              is_interactive: compType === "ACTION" || compType === "FIELD",
+              attributes: { idx: c.idx, originalType: c.type },
+              bounding_rect: c.rect || { x: 0, y: 0, width: 0, height: 0 }
+            };
+          })
+        };
+        await this.knowledgeService.ingest(requestPayload);
+        try {
+          const currentPath = new URL(url).pathname;
+          const fieldComponents = sortedComponents.filter(
+            (c) => c.type === "FIELD" || c.type === "OPTION" || c.type === "DROPDOWN"
+          );
+          const newFields = fieldComponents.filter((fc) => {
+            const identifier = (fc.name || fc.value || "").trim();
+            return identifier.length >= 2 && !_sessionFieldCache.has(identifier);
+          }).slice(0, 5);
+          if (newFields.length > 0) {
+            const existingFieldIds = await getKnownFieldIdentifiers(currentPath);
+            for (const fc of newFields) {
+              const identifier = (fc.name || fc.value || "").trim();
+              _sessionFieldCache.add(identifier);
+              const selectorLower = (fc.selector || "").toLowerCase();
+              const nameLower = identifier.toLowerCase();
+              let fieldType = "text";
+              if (nameLower.includes("email") || selectorLower.includes("email"))
+                fieldType = "email";
+              else if (nameLower.includes("password") || selectorLower.includes("password"))
+                fieldType = "password";
+              else if (fc.type === "DROPDOWN" || selectorLower.includes("select"))
+                fieldType = "select";
+              else if (selectorLower.includes("textarea"))
+                fieldType = "textarea";
+              else if (selectorLower.includes("checkbox"))
+                fieldType = "checkbox";
+              else if (selectorLower.includes("date"))
+                fieldType = "date";
+              else if (selectorLower.includes("number"))
+                fieldType = "number";
+              pushField({
+                field_identifier: identifier.substring(0, 100),
+                field_type: fieldType,
+                is_required: false,
+                existingFieldIds
+              }).catch(() => {
+              });
+            }
+          }
+        } catch {
+        }
+      }
+    } catch (e) {
+      console.log(`>>ARCALITY_STATUS>> \u26A0\uFE0F Error en hook de ingesta: ${e.message}`);
+    }
+    return {
+      url,
+      title,
+      components: sortedComponents
+    };
+  }
+  /**
+   * Busca una acción sugerida en la memoria SIN usar tokens.
+   * Compara URL, componentes visuales Y palabras clave del prompt.
+   */
+  async getActionFromGuia(prompt, historyLength) {
+    try {
+      const fs3 = require("fs");
+      const path3 = require("path");
+      const memoryFile = path3.join(this.contextDir, "memoria-agente.json");
+      if (!fs3.existsSync(memoryFile))
+        return null;
+      const memories = JSON.parse(fs3.readFileSync(memoryFile, "utf8"));
+      const state = await this.getPageState();
+      const currentUrl = this.page.url();
+      const extractCriticalKeywords = (text) => {
+        const lower = text.toLowerCase();
+        const keywords = /* @__PURE__ */ new Set();
+        if (lower.includes("primera"))
+          keywords.add("primera");
+        if (lower.includes("segunda"))
+          keywords.add("segunda");
+        if (lower.includes("tercera"))
+          keywords.add("tercera");
+        if (lower.includes("cuarta"))
+          keywords.add("cuarta");
+        if (lower.includes("\xFAltima"))
+          keywords.add("\xFAltima");
+        if (lower.includes("first"))
+          keywords.add("primera");
+        if (lower.includes("second"))
+          keywords.add("segunda");
+        if (lower.includes("third"))
+          keywords.add("tercera");
+        if (lower.includes("fourth"))
+          keywords.add("cuarta");
+        if (lower.includes("last"))
+          keywords.add("\xFAltima");
+        return keywords;
+      };
+      const currentKeywords = extractCriticalKeywords(prompt);
+      const currentVerbs = ["elimina", "borra", "quita", "delete", "remove", "crea", "nueva", "a\xF1ade", "add", "create", "new", "edita", "modifica", "cambia", "edit", "update"].filter((v) => prompt.toLowerCase().includes(v));
+      const matchingRun = memories.filter((m) => m.success && m.steps_data && m.steps_data[historyLength]).reverse().find((m) => {
+        const memPrompt = (m.prompt || "").toLowerCase();
+        const currentPrompt = prompt.toLowerCase();
+        const words = currentPrompt.split(" ").filter((w) => w.length > 3);
+        if (words.length === 0)
+          return false;
+        const matches = words.filter((w) => memPrompt.includes(w)).length;
+        if (matches / words.length < 0.7)
+          return false;
+        const memVerbs = ["elimina", "borra", "quita", "delete", "remove", "crea", "nueva", "a\xF1ade", "add", "create", "new", "edita", "modifica", "cambia", "edit", "update"].filter((v) => memPrompt.includes(v));
+        const hasSharedVerb = currentVerbs.some((cv) => memVerbs.includes(cv));
+        const hasOppositeIntent = currentVerbs.some((v) => ["elimina", "borra", "delete"].includes(v)) && memVerbs.some((v) => ["crea", "nueva", "create", "new"].includes(v)) || currentVerbs.some((v) => ["crea", "nueva", "create", "new"].includes(v)) && memVerbs.some((v) => ["elimina", "borra", "delete"].includes(v));
+        if (hasOppositeIntent)
+          return false;
+        if (!hasSharedVerb && currentVerbs.length > 0)
+          return false;
+        if (currentVerbs.length === 0 && memVerbs.length > 0)
+          return false;
+        const memKeywords = extractCriticalKeywords(m.prompt || "");
+        for (const kw of currentKeywords) {
+          if (!memKeywords.has(kw))
+            return false;
+        }
+        const memStep = m.steps_data[historyLength];
+        if (!memStep)
+          return false;
+        const normalizeUrl = (u) => u.replace(/\/[a-z]{2}-[A-Z]{2}\//g, "/{locale}/").replace(/\/[a-z]{2}\//g, "/{lang}/");
+        const memUrl = normalizeUrl((memStep.url || "").split("?")[0]);
+        const currUrl = normalizeUrl(currentUrl.split("?")[0]);
+        if (memUrl !== currUrl)
+          return false;
+        const foundComponent = state.components.find((c) => {
+          const cleanMemName = (memStep.componentName || "").replace(/\[.*?\]/g, "").replace(/\(.*?\)/g, "").trim().toLowerCase();
+          const cleanCurrName = (c.name || "").replace(/\[.*?\]/g, "").replace(/\(.*?\)/g, "").trim().toLowerCase();
+          return c.selector === memStep.selector || cleanMemName !== "" && (cleanMemName === cleanCurrName || cleanCurrName.includes(cleanMemName));
+        });
+        return !!foundComponent;
+      });
+      if (matchingRun) {
+        const memStep = matchingRun.steps_data[historyLength];
+        const memCompName = memStep.componentName || "";
+        if (memCompName.length > 80) {
+          console.log(`>>ARCALITY_STATUS>> \u26A0\uFE0F Gu\xEDa rechazada: Nombre de componente demasiado largo (${memCompName.length} chars). Delegando a IA.`);
+          return null;
+        }
+        if (memCompName.includes("[INFERRED]")) {
+          console.log(`>>ARCALITY_STATUS>> \u26A0\uFE0F Gu\xEDa rechazada: Componente con nombre inferido "${memCompName}". Delegando a IA.`);
+          return null;
+        }
+        if (!memCompName || memCompName.length < 3) {
+          console.log(`>>ARCALITY_STATUS>> \u26A0\uFE0F Gu\xEDa rechazada: Componente sin nombre claro. Delegando a IA.`);
+          return null;
+        }
+        const foundComponent = state.components.find((c) => {
+          const cleanMemName = (memStep.componentName || "").replace(/\[.*?\]/g, "").replace(/\(.*?\)/g, "").trim().toLowerCase();
+          const cleanCurrName = (c.name || "").replace(/\[.*?\]/g, "").replace(/\(.*?\)/g, "").trim().toLowerCase();
+          return c.selector === memStep.selector || cleanMemName !== "" && (cleanMemName === cleanCurrName || cleanCurrName.includes(cleanMemName));
+        });
+        if (foundComponent) {
+          return {
+            thought: `[GU\xCDA DE \xC9XITO] Reutilizando paso maestro aprendido: ${memStep.action_data.action} en ${foundComponent.name}`,
+            actions: [{
+              ...memStep.action_data,
+              idx: foundComponent.idx,
+              description: foundComponent.name,
+              selector: foundComponent.selector,
+              frameIdx: foundComponent.frameIdx,
+              type: foundComponent.type
+            }],
+            finish: memStep.finish || false
+          };
+        }
+      }
+    } catch (e) {
+    }
+    return null;
+  }
+  async askIA(prompt, history = [], stepCount) {
+    if (!process.env.ARCALITY_API_URL && !process.env.ANTHROPIC_API_KEY) {
+      throw new Error("ANTHROPIC_API_KEY missing and ARCALITY_API_URL not configured");
+    }
+    const state = await this.getPageState();
+    const screenshot = await this.page.screenshot({ type: "png" });
+    const base64Img = screenshot.toString("base64");
+    const componentsList = state.components.map(
+      (c) => `IDX:${c.idx} | TYPE:${c.type} | NAME: "${c.name}"${c.value ? ` | VAL:"${c.value}"` : ""} `
+    ).join("\n");
+    const rawTools = [
+      {
+        name: "perform_ui_actions",
+        description: "Execute standard UI interactions (click, fill, wait) to progress in the mission.",
+        parameters: {
+          type: "object",
+          properties: {
+            thought: { type: "string", description: "Reasoning about why these actions are taken." },
+            actions: {
+              type: "array",
+              items: {
+                type: "object",
+                properties: {
+                  idx: { type: "number", description: "The IDX from the components list." },
+                  action: { enum: ["click", "double_click", "fill", "select", "wait"] },
+                  value: { type: "string", description: "Text to fill if action is 'fill'." }
+                },
+                required: ["action"]
+              }
+            },
+            finish: { type: "boolean", description: "CRITICAL: Set to true only when the mission objective is fully achieved. If true, actions should ideally be empty." }
+          },
+          required: ["thought", "actions"]
+        }
+      },
+      {
+        name: "inspect_element_details",
+        description: "QA Skill: Get deep technical metadata of an element (attributes, computed styles). Use this if an element is hidden, disabled, or not responding correctly.",
+        parameters: {
+          type: "object",
+          properties: {
+            idx: { type: "number", description: "The IDX of the component to research." }
+          },
+          required: ["idx"]
+        }
+      },
+      {
+        name: "report_application_bug",
+        description: "QA Skill: Use this when the mission objective cannot be achieved. This includes: (1) Technical BUGS (elements not appearing), (2) BUSINESS ERRORS (validation messages like 'Conflict', 'Already exists', 'Permission denied'), or (3) Any condition that violates the user's success criteria.",
+        parameters: {
+          type: "object",
+          properties: {
+            bug_description: { type: "string", description: "Detailed description of the failure or error message." },
+            expected_behavior: { type: "string", description: "What the mission expected (Success Criteria)." },
+            actual_behavior: { type: "string", description: "What actually happened (Failure Criteria)." }
+          },
+          required: ["bug_description", "expected_behavior", "actual_behavior"]
+        }
+      },
+      {
+        name: "report_inability_to_proceed",
+        description: "CRITICAL: Use this when you are STUCK, CONFUSED, or CANNOT find required elements after 3+ attempts. This tool allows you to gracefully admit confusion and help the user rephrase the prompt. Use when: (1) You've clicked the same element 3+ times, (2) Cannot find a specific UI element mentioned in the prompt, (3) The prompt is ambiguous or contradictory.",
+        parameters: {
+          type: "object",
+          properties: {
+            confusion_reason: {
+              type: "string",
+              description: "Explain why you cannot proceed (e.g., 'Cannot find Menu icon after 5 attempts', 'Stuck clicking same element repeatedly', 'Prompt asks for first but I only see second')"
+            },
+            attempts_summary: {
+              type: "string",
+              description: "Summarize what you tried (e.g., 'Clicked TAE-063 5 times, went back to list 5 times')"
+            },
+            prompt_suggestion: {
+              type: "string",
+              description: "Suggest how the user can rephrase for clarity (e.g., 'Please specify the exact text or position of the menu icon')"
+            }
+          },
+          required: ["confusion_reason", "attempts_summary", "prompt_suggestion"]
+        }
+      },
+      ...qaAdvancedTools.map((t) => ({
+        name: t.name,
+        description: t.description,
+        parameters: t.input_schema || t.parameters
+      })),
+      ...qaSecurityTools.map((t) => ({
+        name: t.name,
+        description: t.description,
+        parameters: t.input_schema || t.parameters
+      }))
+    ];
+    const credentialsContext = process.env.LOGIN_USER && process.env.LOGIN_PASSWORD ? `
+\u{1F511} QA CREDENTIALS (Use if login is needed):
 - User: ${process.env.LOGIN_USER}
 - Password: ${process.env.LOGIN_PASSWORD} 
-`:"",N=this.loadMemory(e),E=this.loadSkills(),U="";try{let _=xe(process.cwd());U=`
-\xF0\u0178\x8F\u2014\xEF\xB8\x8F PROJECT CONTEXT:
-- Name: ${_.name}
-- Tech Stack: ${_.framework}
-- Environment: ${process.env.NODE_ENV||"development"}
-- Active Config: ${process.env.ACTIVE_CONFIG||"Default"}
-`}catch{}let $="";try{let _=await this.knowledgeService.getContext(l.url);_&&(_.rules?.length>0||_.fields?.length>0)&&($=`
-\xF0\u0178\xA7\xA0 BACKEND COLLECTIVE MEMORY FOR THIS PAGE:
-`,_.rules?.length>0&&($+=`BUSINESS RULES:
-`,_.rules.forEach(C=>$+=`- [${C.severity}] ${C.title}: ${C.description}
-`)),_.fields?.length>0&&($+=`KNOWN FIELDS:
-`,_.fields.forEach(C=>$+=`- ${C.field_identifier} (${C.field_type}) - Required: ${C.is_required}
-`)),console.log(`>>ARCALITY_STATUS>> \xF0\u0178\xA7\xA0 Contexto de Memoria Colectiva inyectado (${_.rules?.length||0} reglas, ${_.fields?.length||0} campos).`))}catch(_){console.log(`>>ARCALITY_STATUS>> \xE2\u0161\xA0\xEF\xB8\x8F Error en hook de contexto: ${_.message}`)}let A=[{type:"text",text:`# IDENTITY
-You are **Arcality**, an elite Senior QA Web Testing Agent. You have 10+ years of experience in manual and automated testing. You are meticulous, thorough, and NEVER take shortcuts. You treat every mission as a real client engagement where your professional reputation is on the line. You MUST use your full arsenal of QA tools \xE2\u20AC\u201D guessing and blind retries are UNACCEPTABLE.
+` : "";
+    const memoryContext = this.loadMemory(prompt);
+    const skillsContext = this.loadSkills();
+    let projectInfo = "";
+    try {
+      const { getProjectContext } = require("../src/projectInspector");
+      const ctx = getProjectContext(process.cwd());
+      projectInfo = `
+\u{1F3D7}\uFE0F PROJECT CONTEXT:
+- Name: ${ctx.name}
+- Tech Stack: ${ctx.framework}
+- Environment: ${process.env.NODE_ENV || "development"}
+- Active Config: ${process.env.ACTIVE_CONFIG || "Default"}
+`;
+    } catch {
+    }
+    let memoryBackendContext = "";
+    try {
+      const contextData = await this.knowledgeService.getContext(state.url);
+      if (contextData && (contextData.rules?.length > 0 || contextData.fields?.length > 0)) {
+        memoryBackendContext = `
+\u{1F9E0} BACKEND COLLECTIVE MEMORY FOR THIS PAGE:
+`;
+        if (contextData.rules?.length > 0) {
+          memoryBackendContext += `BUSINESS RULES:
+`;
+          contextData.rules.forEach((r) => memoryBackendContext += `- [${r.severity}] ${r.title}: ${r.description}
+`);
+        }
+        if (contextData.fields?.length > 0) {
+          memoryBackendContext += `KNOWN FIELDS:
+`;
+          contextData.fields.forEach((f) => memoryBackendContext += `- ${f.field_identifier} (${f.field_type}) - Required: ${f.is_required}
+`);
+        }
+        console.log(`>>ARCALITY_STATUS>> \u{1F9E0} Contexto de Memoria Colectiva inyectado (${contextData.rules?.length || 0} reglas, ${contextData.fields?.length || 0} campos).`);
+      }
+    } catch (e) {
+      console.log(`>>ARCALITY_STATUS>> \u26A0\uFE0F Error en hook de contexto: ${e.message}`);
+    }
+    const systemPromptBlocks = [
+      {
+        type: "text",
+        text: `# IDENTITY
+You are **Arcality**, an elite Senior QA Web Testing Agent. You have 10+ years of experience in manual and automated testing. You are meticulous, thorough, and NEVER take shortcuts. You treat every mission as a real client engagement where your professional reputation is on the line. You MUST use your full arsenal of QA tools \u2014 guessing and blind retries are UNACCEPTABLE.
 
 # MISSION
-${e}
-
-${U}
-${E}
-${N}
-${j}
-${$}`},{type:"text",text:`
-# METHODOLOGY (MANDATORY \xE2\u20AC\u201D Follow in order)
+${prompt}
+
+${projectInfo}
+${skillsContext}
+${memoryContext}
+${credentialsContext}
+${memoryBackendContext}`
+      },
+      {
+        type: "text",
+        text: `
+# METHODOLOGY (MANDATORY \u2014 Follow in order)
 Every turn, you MUST follow these 4 phases:
 
 ## Phase 1: OBSERVE
 - Read ALL components in CURRENT COMPONENTS carefully.
-- Check the URL \xE2\u20AC\u201D are you on the right page?
-- Read HISTORY \xE2\u20AC\u201D what have you already done? Don't repeat actions.
-- Look for MESSAGE components \xE2\u20AC\u201D errors ([ERROR_CR\xC3\x8DTICO]) or success messages.
-- If you see [INFERRED] in any component name \xE2\u2020\u2019 that name is UNRELIABLE. You MUST call \`inspect_element_details\` on it BEFORE interacting.
+- Check the URL \u2014 are you on the right page?
+- Read HISTORY \u2014 what have you already done? Don't repeat actions.
+- Look for MESSAGE components \u2014 errors ([ERROR_CR\xCDTICO]) or success messages.
+- If you see [INFERRED] in any component name \u2192 that name is UNRELIABLE. You MUST call \`inspect_element_details\` on it BEFORE interacting.
 
 ## Phase 2: PLAN
 - Based on your observations, decide: What is the ONE next meaningful step toward completing the mission?
@@ -61,8 +1408,8 @@ Every turn, you MUST follow these 4 phases:
 ## Phase 3: ACT
 - Execute your planned actions using \`perform_ui_actions\`.
 - Group multiple related actions in one call (e.g., click+fill for 3 fields = 6 actions in one call).
-- For dropdowns/selects: Click to open \xE2\u2020\u2019 WAIT for next turn to see options \xE2\u2020\u2019 Select.
-- For menus: Click menu icon \xE2\u2020\u2019 WAIT for next turn \xE2\u2020\u2019 Click option.
+- For dropdowns/selects: Click to open \u2192 WAIT for next turn to see options \u2192 Select.
+- For menus: Click menu icon \u2192 WAIT for next turn \u2192 Click option.
 
 ## Phase 4: VERIFY
 - After critical actions (SAVE/CREATE/DELETE), verify the result:
@@ -85,7 +1432,7 @@ These are NOT optional. You MUST use these tools in these situations:
 | Bug found in application | \`create_test_evidence\` | To document with annotated screenshot |
 | Mission complete | \`create_test_evidence\` | To document the final successful state |
 | Modal/popup blocking page | \`send_keyboard_event\` (Escape) | To close the overlay |
-| Time/Date/Color picker field | \`interact_native_control\` | INSTEAD of fill \xE2\u20AC\u201D native inputs need special handling |
+| Time/Date/Color picker field | \`interact_native_control\` | INSTEAD of fill \u2014 native inputs need special handling |
 | Element not found on screen | \`scroll_page\` | To reveal off-screen content |
 | Need to close dropdown/menu | \`send_keyboard_event\` (Escape) | After inspecting options |
 | Navigate between form sections | \`send_keyboard_event\` (Tab) | To move focus between fields |
@@ -97,7 +1444,7 @@ These are NOT optional. You MUST use these tools in these situations:
 3. **CURRENT STATE > MEMORY**: What you see in CURRENT COMPONENTS is the truth. SUCCESS MEMORY is a guide, not gospel.
 4. **PAGE TRANSITIONS**: If URL contains '/edit' or you see a 'Save' button, you ARE in the edit view. Don't go back.
 5. **MENUS & DROPDOWNS**: After clicking a toggle/menu, WAIT for the next turn. Never click the same menu icon twice in a row.
-6. **ERROR HANDLING**: If you see '\xF0\u0178\u203A\u2018 [ERROR_CR\xC3\x8DTICO]', STOP everything. Analyze the error, fix the data, then retry.
+6. **ERROR HANDLING**: If you see '\u{1F6D1} [ERROR_CR\xCDTICO]', STOP everything. Analyze the error, fix the data, then retry.
 7. **DATA UNIQUENESS**: When generating test data, ALWAYS include a unique suffix (timestamp, counter). Never use "Test123" or "Prueba" alone.
 8. **FINISH CORRECTLY**: Use \`finish: true\` ONLY when the mission objective is FULLY achieved. 
    - **BEWARE**: If you see a record in a table, confirm it is the one you JUST created (e.g., check timestamp or log message). Do NOT assume an existing record is your success.
@@ -106,9 +1453,34 @@ These are NOT optional. You MUST use these tools in these situations:
 10. **STUCK DETECTION**: If history shows 3+ similar actions without progress, use \`report_inability_to_proceed\`.
 11. **NEGATIVE TESTING**: If mission expects an error (e.g., "verifica que no se pueda guardar sin campos"), and you see that error, the mission is SUCCESS. Use \`finish: true\`.
 12. **GUIDE CONFLICT**: If SUCCESS MEMORY disagrees with what you see on screen, ABANDON the memory and trust your eyes.
-13. **NATIVE CONTROLS**: For \`<input type="time">\`, \`<input type="date">\`, or similar native pickers, NEVER use \`fill\` repeatedly. Use \`interact_native_control\` or \`send_keyboard_event\` instead. If \`fill\` fails once, switch strategy immediately.`,cache_control:{type:"ephemeral"}}];this.testInfo&&await this.testInfo.attach(`turn-${i.length}-vision`,{body:h,contentType:"image/png"});let d=[{role:"user",content:[{type:"image",source:{type:"base64",media_type:"image/png",data:w},cache_control:{type:"ephemeral"}},{type:"text",text:`MISSION STATUS:
-- URL: ${l.url}
-- Title: ${l.title}
+13. **NATIVE CONTROLS**: For \`<input type="time">\`, \`<input type="date">\`, or similar native pickers, NEVER use \`fill\` repeatedly. Use \`interact_native_control\` or \`send_keyboard_event\` instead. If \`fill\` fails once, switch strategy immediately.`,
+        cache_control: { type: "ephemeral" }
+      }
+    ];
+    if (this.testInfo) {
+      await this.testInfo.attach(`turn-${history.length}-vision`, {
+        body: screenshot,
+        contentType: "image/png"
+      });
+    }
+    const anthropicMessages = [
+      {
+        role: "user",
+        content: [
+          {
+            type: "image",
+            source: {
+              type: "base64",
+              media_type: "image/png",
+              data: base64Img
+            },
+            cache_control: { type: "ephemeral" }
+          },
+          {
+            type: "text",
+            text: `MISSION STATUS:
+- URL: ${state.url}
+- Title: ${state.title}
 
 PROGRESS TRACKING:
 - IMPORTANT: This mission is a SEQUENCE of steps. Analyze the HISTORY to see which steps are DONE.
@@ -117,33 +1489,746 @@ PROGRESS TRACKING:
 - DO NOT restart or go back to previous steps if you are already in the target view.
 
 CURRENT COMPONENTS:
-${R}
+${componentsList}
 
 CONSOLE LOGS:
-${this.logs.join(`
-`)||"None"}
+${this.logs.join("\n") || "None"}
 
 HISTORY (last 25 steps):
-${i.slice(-25).join(`
-`)||"None"}`},{type:"text",text:"Please analyze the current state and provide the next step.",cache_control:{type:"ephemeral"}}]}];console.log(">>ARCALITY_STATUS>> \xF0\u0178\xA7\xA0 Arcality est\xC3\xA1 procesando la visi\xC3\xB3n...");let k=Date.now();for(let _=0;_<10;_++){let C,L=0,q=3;for(;;){let t=!!process.env.ARCALITY_API_URL,p=t?`${process.env.ARCALITY_API_URL}/api/v1/ai/proxy`:"https://api.anthropic.com/v1/messages",u=a!==void 0?a:_+1;console.log(`>>ARCALITY_STATUS>> \xF0\u0178\u201C\xA1 Llamando a: ${p} (turno IA ${u}${_>0?`, reintento ${_}`:""})`);let s={"Content-Type":"application/json"};if(t){s["x-api-key"]=process.env.ARCALITY_API_KEY||"";let m=process.env.ARCALITY_MISSION_ID||"";m&&(s["x-mission-id"]=m)}else s["x-api-key"]=process.env.ANTHROPIC_API_KEY,s["anthropic-version"]="2023-06-01";let n=new AbortController,r=setTimeout(()=>n.abort(),9e4);try{C=await fetch(p,{method:"POST",headers:s,signal:n.signal,body:JSON.stringify({model:process.env.CLAUDE_MODEL||"claude-3-5-sonnet-20241022",max_tokens:4096,system:A,tools:b.map(m=>({name:m.name,description:m.description,input_schema:m.parameters||m.input_schema})),messages:d,temperature:.2})})}catch(m){throw clearTimeout(r),m.name==="AbortError"?new Error(`Arcality Brain Timeout: No response from ${p} after 90s`):new Error(`Arcality Brain Network Error: ${m.message}`)}if(clearTimeout(r),C.ok)break;let f=await C.text();if(console.log(`>>ARCALITY_STATUS>> \xE2\x9D\u0152 API Error ${C.status}: ${f.substring(0,500)}`),(C.status===529||C.status===429||C.status===503)&&L<q){L++;let m=Math.pow(2,L)*1e3;console.log(`
->>ARCALITY_STATUS>> \xE2\u0161\xA0\xEF\xB8\x8F Arcality est\xC3\xA1 saturado (${C.status}). Reintentando...`),await new Promise(y=>setTimeout(y,m));continue}throw new Error(`Arcality Brain Error ${C.status}: ${f}`)}let Y=await C.json();d.push({role:"assistant",content:Y.content});let B=Y.content.filter(t=>t.type==="tool_use"),O=Y.content.find(t=>t.type==="text")?.text||"";if(B.length===0)return console.log(`(${((Date.now()-k)/1e3).toFixed(1)}s)`),{thought:O||"No action decided",actions:[]};let T=[],F=null;for(let t of B){let p=t.name,u=t.input;if(p==="perform_ui_actions")F={id:t.id,input:u},B.length>1&&T.push({type:"tool_result",tool_use_id:t.id,content:"UI Action buffered."});else if(p==="inspect_element_details"){let s=u.idx,n=l.components.find(f=>f.idx===s);console.log(`>>ARCALITY_STATUS>> \xF0\u0178\u201D\x8D Investigando IDX:${s}...`);let r="Element not found or no longer present.";if(n)try{r=await this.page.frames()[n.frameIdx].evaluate(f=>{let c=document.querySelector(f);if(!c)return"Not found";let m=window.getComputedStyle(c);return JSON.stringify({tag:c.tagName,id:c.id,classes:c.className,isVisible:c.offsetParent!==null,rect:c.getBoundingClientRect(),attributes:Array.from(c.attributes).map(y=>`${y.name}="${y.value}"`),style:{display:m.display,pointerEvents:m.pointerEvents,opacity:m.opacity}},null,2)},n.selector)}catch(f){r=`Error inspecting: ${f.message}`}T.push({type:"tool_result",tool_use_id:t.id,content:r})}else if(p==="report_application_bug"){console.error(`\xF0\u0178\x90\u203A [BUG DETECTED] ${u.bug_description}`);try{let s=this.page.url();await this.knowledgeService.saveRule("Validaci\xC3\xB3n Detectada (Auto-Learning)",`Error: ${u.bug_description}. Se esperaba: ${u.expected_behavior}`,"WARNING",s)}catch{}throw new Error(`APPLICATION BUG: ${u.bug_description}`)}else{if(p==="report_inability_to_proceed")return T.push({type:"tool_result",tool_use_id:t.id,content:"Confusion acknowledged."}),{thought:`DISCULPA: ${u.confusion_reason}
-
-\xF0\u0178\u2019\xA1 SUGERENCIA: ${u.prompt_suggestion}`,actions:[],finish:!0};if(p==="validate_element_state"){let{idx:s,validations:n}=u,r=l.components.find(c=>c.idx===s),f="";if(!r)f="Element not found.";else try{f=await this.page.frames()[r.frameIdx].evaluate(({selector:c,validations:m})=>{let y=document.querySelector(c);if(!y)return"Element no longer exists in DOM.";let M=window.getComputedStyle(y);return m.map(g=>{let v=!1,S="";switch(g.type){case"exists":v=!!y,S=v?"exists":"none";break;case"visible":v=y.offsetParent!==null&&M.visibility!=="hidden"&&M.display!=="none"&&parseFloat(M.opacity)>0,S=v?"visible":"hidden";break;case"enabled":v=!y.disabled&&y.getAttribute("aria-disabled")!=="true",S=v?"enabled":"disabled";break;case"disabled":v=y.disabled||y.getAttribute("aria-disabled")==="true",S=v?"disabled":"enabled";break;case"contains_text":S=y.innerText||"",v=S.toLowerCase().includes(g.expected_value.toLowerCase());break;case"has_value":S=y.value||"",v=S===g.expected_value;break;case"is_empty":S=y.value||y.innerText||"",v=S.trim()==="";break;case"has_class":S=y.className,v=y.classList.contains(g.expected_value);break}return`${g.type}: ${v?"PASS":"FAIL"} (Actual: "${S}")`}).join(`
-`)},{selector:r.selector,validations:n})}catch(c){f=`Error validating: ${c.message}`}T.push({type:"tool_result",tool_use_id:t.id,content:f})}else if(p==="extract_table_data"){let{table_identifier:s,max_rows:n=50}=u;console.log(`>>ARCALITY_STATUS>> \xF0\u0178\u201C\u0160 Extrayendo tabla: ${s}...`);try{let r=await this.page.evaluate(({identifier:f,limit:c})=>{let y=(()=>{let P=Array.from(document.querySelectorAll("h1, h2, h3, h4, th, label, span, p, div")).filter(g=>g.textContent?.includes(f));for(let g of P){let v=g;for(let S=0;S<5&&v;S++){let I=v.querySelector("table")||(v.tagName==="TABLE"?v:null);if(I)return I;v=v.parentElement}}return document.querySelector("table")})();return y?Array.from(y.querySelectorAll("tr")).slice(0,c).map(P=>Array.from(P.querySelectorAll("td, th")).map(g=>g.textContent?.trim()||"")):"No table found with identifier: "+f},{identifier:s,limit:n});T.push({type:"tool_result",tool_use_id:t.id,content:JSON.stringify(r,null,2)})}catch(r){T.push({type:"tool_result",tool_use_id:t.id,content:`Error extracting: ${r.message}`})}}else if(p==="capture_console_errors"){let s=this.logs.length>0?this.logs.join(`
-`):"No console errors/warnings/network errors captured.";T.push({type:"tool_result",tool_use_id:t.id,content:s})}else if(p==="assert_url_pattern"){let{pattern:s,should_match:n=!0}=u,r=this.page.url(),f=r.includes(s),m=`URL Assertion: ${(n?f:!f)?"PASS":"FAIL"} (Current URL: ${r} | Pattern: ${s} | Expected match: ${n})`;T.push({type:"tool_result",tool_use_id:t.id,content:m})}else if(p==="measure_page_performance"){let{thresholds:s={}}=u;console.log(">>ARCALITY_STATUS>> \xE2\u0161\xA1 Midiendo rendimiento de p\xC3\xA1gina...");try{let n=await this.page.evaluate(()=>{let f=performance.getEntriesByType("navigation")[0],c=performance.getEntriesByType("paint"),m=performance.getEntriesByType("resource"),y=c.find(M=>M.name==="first-contentful-paint");return{load_time_ms:f?Math.round(f.loadEventEnd-f.startTime):null,dom_content_loaded_ms:f?Math.round(f.domContentLoadedEventEnd-f.startTime):null,first_contentful_paint_ms:y?Math.round(y.startTime):null,network_requests:m.length,total_resource_size_kb:Math.round(m.reduce((M,P)=>M+(P.transferSize||0),0)/1024)}}),r=["\xF0\u0178\u201C\u0160 PERFORMANCE METRICS:",`  Load Time: ${n.load_time_ms??"N/A"}ms`,`  DOM Content Loaded: ${n.dom_content_loaded_ms??"N/A"}ms`,`  First Contentful Paint: ${n.first_contentful_paint_ms??"N/A"}ms`,`  Network Requests: ${n.network_requests}`,`  Total Resource Size: ${n.total_resource_size_kb}KB`];T.push({type:"tool_result",tool_use_id:t.id,content:r.join(`
-`)})}catch(n){T.push({type:"tool_result",tool_use_id:t.id,content:`Error measuring performance: ${n.message}`})}}else if(p==="save_navigation_checkpoint"){let{checkpoint_name:s,include_storage:n=!0}=u;console.log(`>>ARCALITY_STATUS>> \xF0\u0178\u2019\xBE Guardando punto de control: "${s}"...`);try{let r=this.page.url(),c=await this.page.context().storageState(),m={},y={};if(n){let P=await this.page.evaluate(()=>{let g={};for(let S=0;S<window.localStorage.length;S++){let I=window.localStorage.key(S);I&&(g[I]=window.localStorage.getItem(I)||"")}let v={};for(let S=0;S<window.sessionStorage.length;S++){let I=window.sessionStorage.key(S);I&&(v[I]=window.sessionStorage.getItem(I)||"")}return{localStorage:g,sessionStorage:v}});m=P.localStorage,y=P.sessionStorage}this.checkpoints.set(s,{url:r,storageState:c,localStorage:m,sessionStorage:y});let M=`\xE2\u0153\u2026 Checkpoint "${s}" saved successfully.`;T.push({type:"tool_result",tool_use_id:t.id,content:M})}catch(r){T.push({type:"tool_result",tool_use_id:t.id,content:`Error saving checkpoint: ${r.message}`})}}else if(p==="restore_navigation_checkpoint"){let{checkpoint_name:s}=u;console.log(`>>ARCALITY_STATUS>> \xF0\u0178\u201D\u201E Restaurando punto de control: "${s}"...`);let n=this.checkpoints.get(s);if(!n)T.push({type:"tool_result",tool_use_id:t.id,content:`\xE2\x9D\u0152 Checkpoint "${s}" not found.`});else try{let r=this.page.context();await r.clearCookies(),n.storageState.cookies?.length&&await r.addCookies(n.storageState.cookies),await this.page.goto(n.url,{waitUntil:"domcontentloaded",timeout:15e3}),await this.page.evaluate(({ls:f,ss:c})=>{window.localStorage.clear();for(let[m,y]of Object.entries(f))window.localStorage.setItem(m,y);window.sessionStorage.clear();for(let[m,y]of Object.entries(c))window.sessionStorage.setItem(m,y)},{ls:n.localStorage,ss:n.sessionStorage}),await this.page.reload({waitUntil:"domcontentloaded",timeout:15e3}),T.push({type:"tool_result",tool_use_id:t.id,content:`\xE2\u0153\u2026 Checkpoint "${s}" restored.`})}catch(r){T.push({type:"tool_result",tool_use_id:t.id,content:`Error restoring checkpoint: ${r.message}`})}}else if(p==="test_xss_injection"){let{idx:s,payload_type:n}=u,r=l.components.find(f=>f.idx===s);if(!r)T.push({type:"tool_result",tool_use_id:t.id,content:`Element idx ${s} not found.`});else{console.log(`>>ARCALITY_STATUS>> \xF0\u0178\u203A\xA1\xEF\xB8\x8F [Security] Probando inyecci\xC3\xB3n XSS en IDX ${s}...`);let f="<script>alert(1)</script>";n==="image"&&(f="<img src=x onerror=alert(1)>"),n==="svg"&&(f="<svg onload=alert(1)>");try{await this.page.locator(`xpath=${r.selector}`).first().fill(f),T.push({type:"tool_result",tool_use_id:t.id,content:"Payload inyectado. Aseg\xC3\xBArate de probar si el payload fue ejecutado revisando el DOM, o realiza el sumbit y observa si el input regres\xC3\xB3 renderizado tal cual o sanitizado."}),this.testInfo&&this.testInfo.attach("security_tool_call",{body:JSON.stringify({action:"test_xss_injection",target:s,payload:f}),contentType:"application/json"})}catch(c){T.push({type:"tool_result",tool_use_id:t.id,content:`Error injecting payload: ${c.message}`})}}}else if(p==="test_auth_bypass"){let{target_url:s}=u;console.log(`>>ARCALITY_STATUS>> \xF0\u0178\u203A\xA1\xEF\xB8\x8F [Security] Intentando Auth Bypass en ${s}...`);try{let n=new URL(this.page.url()).origin,r=new URL(s,n).toString();await this.page.goto(r),await this.page.waitForLoadState("networkidle",{timeout:3e3}).catch(()=>{});let f=this.page.url(),c=`Navegado a ${r}. 
-URL resultante: ${f}. 
-`;f!==r?c+="Posiblemente redirigido (el bypass fall\xC3\xB3 o te enviaron a Login).":c+="URL se mantuvo igual. \xC2\xA1Esto podr\xC3\xADa ser un IDOR o Auth Bypass si ves datos a los que no deber\xC3\xADas acceder!",T.push({type:"tool_result",tool_use_id:t.id,content:c})}catch(n){T.push({type:"tool_result",tool_use_id:t.id,content:`Error test_auth_bypass: ${n.message}`})}}else if(p==="scan_sensitive_data_exposure"){console.log(">>ARCALITY_STATUS>> \xF0\u0178\u203A\xA1\xEF\xB8\x8F [Security] Escaneando datos sensibles...");try{let s=await pe(this.page);if(s.length>0){let n=s.map(r=>`- ${r.category}: ${r.description}
-  Evidence: ${JSON.stringify(r.evidence)}`).join(`
-`);T.push({type:"tool_result",tool_use_id:t.id,content:`Vulnerabilidades detectadas:
-${n}`})}else T.push({type:"tool_result",tool_use_id:t.id,content:"No se detectaron datos sensibles en LocalStorage/SessionStorage en este chequeo."})}catch(s){T.push({type:"tool_result",tool_use_id:t.id,content:`Error scan_sensitive_data_exposure: ${s.message}`})}}else if(p==="audit_http_headers"){console.log(">>ARCALITY_STATUS>> \xF0\u0178\u203A\xA1\xEF\xB8\x8F [Security] Auditando headers HTTP...");try{let s=await ue(this.page);if(s.length>0){let n=s.map(r=>`- ${r.category}: ${r.description}`).join(`
-`);T.push({type:"tool_result",tool_use_id:t.id,content:`Vulnerabilidades de Headers detectadas:
-${n}`})}else T.push({type:"tool_result",tool_use_id:t.id,content:"No se detectaron problemas en los headers de seguridad b\xC3\xA1sicos."})}catch(s){T.push({type:"tool_result",tool_use_id:t.id,content:`Error audit_http_headers: ${s.message}`})}}else if(p==="create_test_evidence"){let{evidence_type:s,annotations:n,save_as:r,description:f,finish_run:c=!1}=u;console.log(`\xF0\u0178\u201C\xB8 [SKILL] Creating test evidence: "${r}"...`);try{let m=r.replace(/[^a-zA-Z0-9_-]/g,"_");n&&n.length>0&&await this.page.evaluate(M=>{M.forEach(P=>{let g=document.querySelector(`[agent-idx="${P.idx}"]`);if(g){let v=g.getBoundingClientRect(),S=document.createElement("div");S.className="arcality-annotation",S.style.position="absolute",S.style.border=`3px solid ${P.color||"red"}`,S.style.top=`${v.top+window.scrollY}px`,S.style.left=`${v.left+window.scrollX}px`,S.style.width=`${v.width}px`,S.style.height=`${v.height}px`,S.style.pointerEvents="none",S.style.zIndex="1000000";let I=document.createElement("span");I.innerText=P.label,I.style.background=P.color||"red",I.style.color="white",I.style.fontSize="12px",I.style.padding="2px 4px",I.style.position="absolute",I.style.top="-20px",I.style.left="0",S.appendChild(I),document.body.appendChild(S)}})},n);let y=await this.page.screenshot({type:"png",fullPage:s==="full_page_screenshot"});if(await this.page.evaluate(()=>{document.querySelectorAll(".arcality-annotation").forEach(M=>M.remove())}),this.testInfo){if(await this.testInfo.attach(m,{body:y,contentType:"image/png"}),f&&await this.testInfo.attach(`${m}_description`,{body:Buffer.from(f,"utf-8"),contentType:"text/plain"}),T.push({type:"tool_result",tool_use_id:t.id,content:`\xE2\u0153\u2026 Evidence "${m}" created and attached.`}),c)return this.lastScreenshot=w,{thought:`Evidence "${f||m}" created. Mission complete.`,actions:[],finish:!0}}else T.push({type:"tool_result",tool_use_id:t.id,content:"\xE2\u0161\xA0\xEF\xB8\x8F testInfo not available."})}catch(m){T.push({type:"tool_result",tool_use_id:t.id,content:`Error creating evidence: ${m.message}`})}}else if(p==="send_keyboard_event"){let{key:s,idx:n,repeat:r=1}=u;console.log(`>>ARCALITY_STATUS>> \xE2\u0152\xA8\xEF\xB8\x8F Enviando tecla: "${s}" ${n!==void 0?`(focus en IDX:${n})`:"(focus actual)"} x${r}`);try{if(n!==void 0){let f=l.components.find(c=>c.idx===n);if(f){let c=this.page.frames()[f.frameIdx].locator(f.selector).first();await c.focus({timeout:5e3}).catch(async()=>{await c.click({timeout:5e3,force:!0})})}}for(let f=0;f<Math.min(r,20);f++)await this.page.keyboard.press(s),r>1&&await this.page.waitForTimeout(100);T.push({type:"tool_result",tool_use_id:t.id,content:`\xE2\u0153\u2026 Key "${s}" pressed ${r} time(s).`})}catch(f){T.push({type:"tool_result",tool_use_id:t.id,content:`Error sending key: ${f.message}`})}}else if(p==="interact_native_control"){let{idx:s,control_type:n,value:r}=u,f=l.components.find(c=>c.idx===s);if(console.log(`>>ARCALITY_STATUS>> \xF0\u0178\u017D\u203A\xEF\xB8\x8F Control nativo: ${n} IDX:${s} \xE2\u2020\u2019 "${r}"`),!f)T.push({type:"tool_result",tool_use_id:t.id,content:"Element not found."});else try{let c=this.page.frames()[f.frameIdx],m=c.locator(f.selector).first();switch(n){case"time":case"date":case"datetime":{try{await m.fill(r,{timeout:3e3});let P=await m.inputValue();if(P&&P!==""){T.push({type:"tool_result",tool_use_id:t.id,content:`\xE2\u0153\u2026 ${n} set to "${P}" via fill().`});break}}catch{}await m.click({force:!0}),await this.page.keyboard.press("Control+a"),await this.page.waitForTimeout(100);let y=r.replace(/[:-T]/g,"");await this.page.keyboard.type(y,{delay:50});let M=await m.inputValue().catch(()=>"");T.push({type:"tool_result",tool_use_id:t.id,content:`\xE2\u0153\u2026 ${n} set via keyboard. Current value: "${M}".`});break}case"color":await m.fill(r,{timeout:3e3}),T.push({type:"tool_result",tool_use_id:t.id,content:`\xE2\u0153\u2026 Color set to "${r}".`});break;case"range":{let y=parseFloat(r);await m.fill(String(y),{timeout:3e3}).catch(async()=>{await c.evaluate(({sel:M,val:P})=>{let g=document.querySelector(M);g&&(g.value=P,g.dispatchEvent(new Event("input",{bubbles:!0})),g.dispatchEvent(new Event("change",{bubbles:!0})))},{sel:f.selector,val:String(y)})}),T.push({type:"tool_result",tool_use_id:t.id,content:`\xE2\u0153\u2026 Range set to ${y}.`});break}case"select":{try{await m.selectOption({label:r},{timeout:3e3})}catch{try{await m.selectOption({value:r},{timeout:3e3})}catch{await m.selectOption(r,{timeout:3e3})}}let y=await m.inputValue().catch(()=>"unknown");T.push({type:"tool_result",tool_use_id:t.id,content:`\xE2\u0153\u2026 Option selected. Value: "${y}".`});break}case"contenteditable":await m.click({force:!0}),await this.page.keyboard.press("Control+a"),await this.page.keyboard.type(r,{delay:30}),T.push({type:"tool_result",tool_use_id:t.id,content:`\xE2\u0153\u2026 Content set to "${r}".`});break;default:T.push({type:"tool_result",tool_use_id:t.id,content:`\xE2\x9D\u0152 Unknown control type: ${n}`})}}catch(c){T.push({type:"tool_result",tool_use_id:t.id,content:`Error interacting with native control: ${c.message}`})}}else if(p==="scroll_page"){let{direction:s,amount:n=500,idx:r}=u;console.log(`>>ARCALITY_STATUS>> \xF0\u0178\u201C\u0153 Scroll: ${s} ${n}px ${r!==void 0?`(container IDX:${r})`:"(page)"}`);try{if(r!==void 0){let f=l.components.find(c=>c.idx===r);f&&await this.page.frames()[f.frameIdx].locator(f.selector).first().evaluate((m,y)=>{let M=y.direction,P=y.amount;M==="top"?m.scrollTop=0:M==="bottom"?m.scrollTop=m.scrollHeight:M==="down"?m.scrollTop+=P:M==="up"?m.scrollTop-=P:M==="left"?m.scrollLeft-=P:M==="right"&&(m.scrollLeft+=P)},{direction:s,amount:n})}else switch(s){case"down":await this.page.mouse.wheel(0,n);break;case"up":await this.page.mouse.wheel(0,-n);break;case"right":await this.page.mouse.wheel(n,0);break;case"left":await this.page.mouse.wheel(-n,0);break;case"top":await this.page.evaluate(()=>window.scrollTo(0,0));break;case"bottom":await this.page.evaluate(()=>window.scrollTo(0,document.body.scrollHeight));break}await this.page.waitForTimeout(300),T.push({type:"tool_result",tool_use_id:t.id,content:`\xE2\u0153\u2026 Scrolled ${s} ${s==="top"||s==="bottom"?"completely":`${n}px`}. Page state will refresh on next turn.`})}catch(f){T.push({type:"tool_result",tool_use_id:t.id,content:`Error scrolling: ${f.message}`})}}else T.push({type:"tool_result",tool_use_id:t.id,content:`Error: Tool '${p}' not recognized by this version.`})}}if(!(T.length>0&&(d.push({role:"user",content:T}),!F))&&F){let t=F.input;return console.log(`(${((Date.now()-k)/1e3).toFixed(1)}s)`),this.lastScreenshot=w,{thought:t.thought,actions:t.actions.map(p=>{let u=l.components.find(n=>n.idx===p.idx),s=p.value;if(p.action==="fill"&&s&&/^\d{2}\/\d{2}\/\d{4}$/.test(s)){let[n,r,f]=s.split("/");s=`${f}-${r}-${n}`}return{...p,value:s,selector:u?.selector,frameIdx:u?.frameIdx,description:u?.name,type:u?.type}}),finish:t.finish}}}return{thought:"Max internal turns reached",actions:[]}}async humanizeMissionResult(e,i){if(!process.env.ANTHROPIC_API_KEY)return null;try{let a=!!process.env.ARCALITY_API_URL,l=a?`${process.env.ARCALITY_API_URL}/api/v1/ai/proxy`:"https://api.anthropic.com/v1/messages",h={"Content-Type":"application/json"};if(a){h["x-api-key"]=process.env.ARCALITY_API_KEY||"";let b=process.env.ARCALITY_MISSION_ID||"";b&&(h["x-mission-id"]=b)}else h["x-api-key"]=process.env.ANTHROPIC_API_KEY,h["anthropic-version"]="2023-06-01";return(await(await fetch(l,{method:"POST",headers:h,body:JSON.stringify({model:process.env.CLAUDE_MODEL||"claude-3-5-sonnet-20241022",max_tokens:300,system:"Eres un Senior QA personalizador de reportes. Tu tarea es resumir en una sola frase corta, profesional y amigable por qu\xC3\xA9 una misi\xC3\xB3n de testing fue exitosa bas\xC3\xA1ndote en el historial de pasos. Usa un tono de victoria. No menciones detalles t\xC3\xA9cnicos como 'selectores' o 'DOM'. El resumen debe empezar con algo como '\xC2\xA1Misi\xC3\xB3n cumplida! ...'",messages:[{role:"user",content:`Misi\xC3\xB3n original: ${e}
+${history.slice(-25).join("\n") || "None"}`
+          },
+          {
+            type: "text",
+            text: `Please analyze the current state and provide the next step.`,
+            cache_control: { type: "ephemeral" }
+          }
+        ]
+      }
+    ];
+    console.log(`>>ARCALITY_STATUS>> \u{1F9E0} Arcality est\xE1 procesando la visi\xF3n...`);
+    const startTime = Date.now();
+    for (let turn = 0; turn < 10; turn++) {
+      let response;
+      let retryCount = 0;
+      const maxRetries = 3;
+      while (true) {
+        const isProxyMode = !!process.env.ARCALITY_API_URL;
+        const endpointUrl = isProxyMode ? `${process.env.ARCALITY_API_URL}/api/v1/ai/proxy` : "https://api.anthropic.com/v1/messages";
+        const displayTurn = stepCount !== void 0 ? stepCount : turn + 1;
+        console.log(`>>ARCALITY_STATUS>> \u{1F4E1} Llamando a: ${endpointUrl} (turno IA ${displayTurn}${turn > 0 ? `, reintento ${turn}` : ""})`);
+        const headers = {
+          "Content-Type": "application/json"
+        };
+        if (isProxyMode) {
+          headers["x-api-key"] = process.env.ARCALITY_API_KEY || "";
+          const missionId = process.env.ARCALITY_MISSION_ID || "";
+          if (missionId)
+            headers["x-mission-id"] = missionId;
+        } else {
+          headers["x-api-key"] = process.env.ANTHROPIC_API_KEY;
+          headers["anthropic-version"] = "2023-06-01";
+        }
+        const controller = new AbortController();
+        const timeoutId = setTimeout(() => controller.abort(), 9e4);
+        try {
+          response = await fetch(endpointUrl, {
+            method: "POST",
+            headers,
+            signal: controller.signal,
+            body: JSON.stringify({
+              model: process.env.CLAUDE_MODEL || "claude-3-5-sonnet-20241022",
+              max_tokens: 4096,
+              system: systemPromptBlocks,
+              tools: rawTools.map((t) => ({
+                name: t.name,
+                description: t.description,
+                input_schema: t.parameters || t.input_schema
+              })),
+              messages: anthropicMessages,
+              temperature: 0.2
+            })
+          });
+        } catch (fetchErr) {
+          clearTimeout(timeoutId);
+          if (fetchErr.name === "AbortError") {
+            throw new Error(`Arcality Brain Timeout: No response from ${endpointUrl} after 90s`);
+          }
+          throw new Error(`Arcality Brain Network Error: ${fetchErr.message}`);
+        }
+        clearTimeout(timeoutId);
+        if (response.ok)
+          break;
+        const errorText = await response.text();
+        console.log(`>>ARCALITY_STATUS>> \u274C API Error ${response.status}: ${errorText.substring(0, 500)}`);
+        const isTransient = response.status === 529 || response.status === 429 || response.status === 503;
+        if (isTransient && retryCount < maxRetries) {
+          retryCount++;
+          const delay = Math.pow(2, retryCount) * 1e3;
+          console.log(`
+>>ARCALITY_STATUS>> \u26A0\uFE0F Arcality est\xE1 saturado (${response.status}). Reintentando...`);
+          await new Promise((resolve) => setTimeout(resolve, delay));
+          continue;
+        }
+        throw new Error(`Arcality Brain Error ${response.status}: ${errorText}`);
+      }
+      const data = await response.json();
+      const message = data;
+      anthropicMessages.push({
+        role: "assistant",
+        content: message.content
+      });
+      const toolCalls = message.content.filter((c) => c.type === "tool_use");
+      const textResponse = message.content.find((c) => c.type === "text")?.text || "";
+      if (toolCalls.length === 0) {
+        console.log(`(${((Date.now() - startTime) / 1e3).toFixed(1)}s)`);
+        return { thought: textResponse || "No action decided", actions: [] };
+      }
+      const toolResults = [];
+      let uiActionCall = null;
+      for (const toolUse of toolCalls) {
+        const toolName = toolUse.name;
+        const toolInput = toolUse.input;
+        if (toolName === "perform_ui_actions") {
+          uiActionCall = { id: toolUse.id, input: toolInput };
+          if (toolCalls.length > 1) {
+            toolResults.push({ type: "tool_result", tool_use_id: toolUse.id, content: "UI Action buffered." });
+          }
+        } else if (toolName === "inspect_element_details") {
+          const idx = toolInput.idx;
+          const c = state.components.find((comp) => comp.idx === idx);
+          console.log(`>>ARCALITY_STATUS>> \u{1F50D} Investigando IDX:${idx}...`);
+          let details = "Element not found or no longer present.";
+          if (c) {
+            try {
+              details = await this.page.frames()[c.frameIdx].evaluate((s) => {
+                const el = document.querySelector(s);
+                if (!el)
+                  return "Not found";
+                const styles = window.getComputedStyle(el);
+                return JSON.stringify({
+                  tag: el.tagName,
+                  id: el.id,
+                  classes: el.className,
+                  isVisible: el.offsetParent !== null,
+                  rect: el.getBoundingClientRect(),
+                  attributes: Array.from(el.attributes).map((a) => `${a.name}="${a.value}"`),
+                  style: { display: styles.display, pointerEvents: styles.pointerEvents, opacity: styles.opacity }
+                }, null, 2);
+              }, c.selector);
+            } catch (e) {
+              details = `Error inspecting: ${e.message}`;
+            }
+          }
+          toolResults.push({ type: "tool_result", tool_use_id: toolUse.id, content: details });
+        } else if (toolName === "report_application_bug") {
+          console.error(`\u{1F41B} [BUG DETECTED] ${toolInput.bug_description}`);
+          try {
+            const url = this.page.url();
+            await this.knowledgeService.saveRule(
+              "Validaci\xF3n Detectada (Auto-Learning)",
+              `Error: ${toolInput.bug_description}. Se esperaba: ${toolInput.expected_behavior}`,
+              "WARNING",
+              url
+            );
+          } catch (e) {
+          }
+          throw new Error(`APPLICATION BUG: ${toolInput.bug_description}`);
+        } else if (toolName === "report_inability_to_proceed") {
+          toolResults.push({ type: "tool_result", tool_use_id: toolUse.id, content: "Confusion acknowledged." });
+          return {
+            thought: `DISCULPA: ${toolInput.confusion_reason}
+
+\u{1F4A1} SUGERENCIA: ${toolInput.prompt_suggestion}`,
+            actions: [],
+            finish: true
+          };
+        } else if (toolName === "validate_element_state") {
+          const { idx, validations } = toolInput;
+          const c = state.components.find((comp) => comp.idx === idx);
+          let result = "";
+          if (!c) {
+            result = "Element not found.";
+          } else {
+            try {
+              result = await this.page.frames()[c.frameIdx].evaluate(({ selector, validations: validations2 }) => {
+                const el = document.querySelector(selector);
+                if (!el)
+                  return "Element no longer exists in DOM.";
+                const styles = window.getComputedStyle(el);
+                const results = validations2.map((v) => {
+                  let pass = false;
+                  let actual = "";
+                  switch (v.type) {
+                    case "exists":
+                      pass = !!el;
+                      actual = pass ? "exists" : "none";
+                      break;
+                    case "visible":
+                      pass = el.offsetParent !== null && styles.visibility !== "hidden" && styles.display !== "none" && parseFloat(styles.opacity) > 0;
+                      actual = pass ? "visible" : "hidden";
+                      break;
+                    case "enabled":
+                      pass = !el.disabled && el.getAttribute("aria-disabled") !== "true";
+                      actual = pass ? "enabled" : "disabled";
+                      break;
+                    case "disabled":
+                      pass = el.disabled || el.getAttribute("aria-disabled") === "true";
+                      actual = pass ? "disabled" : "enabled";
+                      break;
+                    case "contains_text":
+                      actual = el.innerText || "";
+                      pass = actual.toLowerCase().includes(v.expected_value.toLowerCase());
+                      break;
+                    case "has_value":
+                      actual = el.value || "";
+                      pass = actual === v.expected_value;
+                      break;
+                    case "is_empty":
+                      actual = el.value || el.innerText || "";
+                      pass = actual.trim() === "";
+                      break;
+                    case "has_class":
+                      actual = el.className;
+                      pass = el.classList.contains(v.expected_value);
+                      break;
+                  }
+                  return `${v.type}: ${pass ? "PASS" : "FAIL"} (Actual: "${actual}")`;
+                });
+                return results.join("\n");
+              }, { selector: c.selector, validations });
+            } catch (e) {
+              result = `Error validating: ${e.message}`;
+            }
+          }
+          toolResults.push({ type: "tool_result", tool_use_id: toolUse.id, content: result });
+        } else if (toolName === "extract_table_data") {
+          const { table_identifier, max_rows = 50 } = toolInput;
+          console.log(`>>ARCALITY_STATUS>> \u{1F4CA} Extrayendo tabla: ${table_identifier}...`);
+          try {
+            const tableData = await this.page.evaluate(({ identifier, limit }) => {
+              const findTable = () => {
+                const headers = Array.from(document.querySelectorAll("h1, h2, h3, h4, th, label, span, p, div")).filter((el) => el.textContent?.includes(identifier));
+                for (const h of headers) {
+                  let curr = h;
+                  for (let i = 0; i < 5; i++) {
+                    if (!curr)
+                      break;
+                    const table2 = curr.querySelector("table") || (curr.tagName === "TABLE" ? curr : null);
+                    if (table2)
+                      return table2;
+                    curr = curr.parentElement;
+                  }
+                }
+                return document.querySelector("table");
+              };
+              const table = findTable();
+              if (!table)
+                return "No table found with identifier: " + identifier;
+              const rows = Array.from(table.querySelectorAll("tr")).slice(0, limit);
+              return rows.map((r) => {
+                return Array.from(r.querySelectorAll("td, th")).map((c) => c.textContent?.trim() || "");
+              });
+            }, { identifier: table_identifier, limit: max_rows });
+            toolResults.push({ type: "tool_result", tool_use_id: toolUse.id, content: JSON.stringify(tableData, null, 2) });
+          } catch (e) {
+            toolResults.push({ type: "tool_result", tool_use_id: toolUse.id, content: `Error extracting: ${e.message}` });
+          }
+        } else if (toolName === "capture_console_errors") {
+          const logs = this.logs.length > 0 ? this.logs.join("\n") : "No console errors/warnings/network errors captured.";
+          toolResults.push({ type: "tool_result", tool_use_id: toolUse.id, content: logs });
+        } else if (toolName === "assert_url_pattern") {
+          const { pattern, should_match = true } = toolInput;
+          const url = this.page.url();
+          const match = url.includes(pattern);
+          const pass = should_match ? match : !match;
+          const result = `URL Assertion: ${pass ? "PASS" : "FAIL"} (Current URL: ${url} | Pattern: ${pattern} | Expected match: ${should_match})`;
+          toolResults.push({ type: "tool_result", tool_use_id: toolUse.id, content: result });
+        } else if (toolName === "measure_page_performance") {
+          const { thresholds = {} } = toolInput;
+          console.log(`>>ARCALITY_STATUS>> \u26A1 Midiendo rendimiento de p\xE1gina...`);
+          try {
+            const perfData = await this.page.evaluate(() => {
+              const nav = performance.getEntriesByType("navigation")[0];
+              const paint = performance.getEntriesByType("paint");
+              const resources = performance.getEntriesByType("resource");
+              const fcp = paint.find((p) => p.name === "first-contentful-paint");
+              return {
+                load_time_ms: nav ? Math.round(nav.loadEventEnd - nav.startTime) : null,
+                dom_content_loaded_ms: nav ? Math.round(nav.domContentLoadedEventEnd - nav.startTime) : null,
+                first_contentful_paint_ms: fcp ? Math.round(fcp.startTime) : null,
+                network_requests: resources.length,
+                total_resource_size_kb: Math.round(resources.reduce((sum, r) => sum + (r.transferSize || 0), 0) / 1024)
+              };
+            });
+            const results = [
+              `\u{1F4CA} PERFORMANCE METRICS:`,
+              `  Load Time: ${perfData.load_time_ms ?? "N/A"}ms`,
+              `  DOM Content Loaded: ${perfData.dom_content_loaded_ms ?? "N/A"}ms`,
+              `  First Contentful Paint: ${perfData.first_contentful_paint_ms ?? "N/A"}ms`,
+              `  Network Requests: ${perfData.network_requests}`,
+              `  Total Resource Size: ${perfData.total_resource_size_kb}KB`
+            ];
+            toolResults.push({ type: "tool_result", tool_use_id: toolUse.id, content: results.join("\n") });
+          } catch (e) {
+            toolResults.push({ type: "tool_result", tool_use_id: toolUse.id, content: `Error measuring performance: ${e.message}` });
+          }
+        } else if (toolName === "save_navigation_checkpoint") {
+          const { checkpoint_name, include_storage = true } = toolInput;
+          console.log(`>>ARCALITY_STATUS>> \u{1F4BE} Guardando punto de control: "${checkpoint_name}"...`);
+          try {
+            const url = this.page.url();
+            const context = this.page.context();
+            const storageState = await context.storageState();
+            let localStorage = {};
+            let sessionStorage = {};
+            if (include_storage) {
+              const storageData = await this.page.evaluate(() => {
+                const ls = {};
+                for (let i = 0; i < window.localStorage.length; i++) {
+                  const key = window.localStorage.key(i);
+                  if (key)
+                    ls[key] = window.localStorage.getItem(key) || "";
+                }
+                const ss = {};
+                for (let i = 0; i < window.sessionStorage.length; i++) {
+                  const key = window.sessionStorage.key(i);
+                  if (key)
+                    ss[key] = window.sessionStorage.getItem(key) || "";
+                }
+                return { localStorage: ls, sessionStorage: ss };
+              });
+              localStorage = storageData.localStorage;
+              sessionStorage = storageData.sessionStorage;
+            }
+            this.checkpoints.set(checkpoint_name, { url, storageState, localStorage, sessionStorage });
+            const result = `\u2705 Checkpoint "${checkpoint_name}" saved successfully.`;
+            toolResults.push({ type: "tool_result", tool_use_id: toolUse.id, content: result });
+          } catch (e) {
+            toolResults.push({ type: "tool_result", tool_use_id: toolUse.id, content: `Error saving checkpoint: ${e.message}` });
+          }
+        } else if (toolName === "restore_navigation_checkpoint") {
+          const { checkpoint_name } = toolInput;
+          console.log(`>>ARCALITY_STATUS>> \u{1F504} Restaurando punto de control: "${checkpoint_name}"...`);
+          const checkpoint = this.checkpoints.get(checkpoint_name);
+          if (!checkpoint) {
+            toolResults.push({ type: "tool_result", tool_use_id: toolUse.id, content: `\u274C Checkpoint "${checkpoint_name}" not found.` });
+          } else {
+            try {
+              const context = this.page.context();
+              await context.clearCookies();
+              if (checkpoint.storageState.cookies?.length) {
+                await context.addCookies(checkpoint.storageState.cookies);
+              }
+              await this.page.goto(checkpoint.url, { waitUntil: "domcontentloaded", timeout: 15e3 });
+              await this.page.evaluate(({ ls, ss }) => {
+                window.localStorage.clear();
+                for (const [k, v] of Object.entries(ls))
+                  window.localStorage.setItem(k, v);
+                window.sessionStorage.clear();
+                for (const [k, v] of Object.entries(ss))
+                  window.sessionStorage.setItem(k, v);
+              }, { ls: checkpoint.localStorage, ss: checkpoint.sessionStorage });
+              await this.page.reload({ waitUntil: "domcontentloaded", timeout: 15e3 });
+              toolResults.push({ type: "tool_result", tool_use_id: toolUse.id, content: `\u2705 Checkpoint "${checkpoint_name}" restored.` });
+            } catch (e) {
+              toolResults.push({ type: "tool_result", tool_use_id: toolUse.id, content: `Error restoring checkpoint: ${e.message}` });
+            }
+          }
+        } else if (toolName === "test_xss_injection") {
+          const { idx, payload_type } = toolInput;
+          const el = state.components.find((c) => c.idx === idx);
+          if (!el) {
+            toolResults.push({ type: "tool_result", tool_use_id: toolUse.id, content: `Element idx ${idx} not found.` });
+          } else {
+            console.log(`>>ARCALITY_STATUS>> \u{1F6E1}\uFE0F [Security] Probando inyecci\xF3n XSS en IDX ${idx}...`);
+            let payload = "<script>alert(1)</script>";
+            if (payload_type === "image")
+              payload = "<img src=x onerror=alert(1)>";
+            if (payload_type === "svg")
+              payload = "<svg onload=alert(1)>";
+            try {
+              const locator = this.page.locator(`xpath=${el.selector}`).first();
+              await locator.fill(payload);
+              toolResults.push({ type: "tool_result", tool_use_id: toolUse.id, content: `Payload inyectado. Aseg\xFArate de probar si el payload fue ejecutado revisando el DOM, o realiza el sumbit y observa si el input regres\xF3 renderizado tal cual o sanitizado.` });
+              if (this.testInfo)
+                this.testInfo.attach("security_tool_call", { body: JSON.stringify({ action: "test_xss_injection", target: idx, payload }), contentType: "application/json" });
+            } catch (e) {
+              toolResults.push({ type: "tool_result", tool_use_id: toolUse.id, content: `Error injecting payload: ${e.message}` });
+            }
+          }
+        } else if (toolName === "test_auth_bypass") {
+          const { target_url } = toolInput;
+          console.log(`>>ARCALITY_STATUS>> \u{1F6E1}\uFE0F [Security] Intentando Auth Bypass en ${target_url}...`);
+          try {
+            const baseUrl = new URL(this.page.url()).origin;
+            const fullUrl = new URL(target_url, baseUrl).toString();
+            await this.page.goto(fullUrl);
+            await this.page.waitForLoadState("networkidle", { timeout: 3e3 }).catch(() => {
+            });
+            const resultingUrl = this.page.url();
+            let resultData = `Navegado a ${fullUrl}. 
+URL resultante: ${resultingUrl}. 
+`;
+            if (resultingUrl !== fullUrl)
+              resultData += `Posiblemente redirigido (el bypass fall\xF3 o te enviaron a Login).`;
+            else
+              resultData += `URL se mantuvo igual. \xA1Esto podr\xEDa ser un IDOR o Auth Bypass si ves datos a los que no deber\xEDas acceder!`;
+            toolResults.push({ type: "tool_result", tool_use_id: toolUse.id, content: resultData });
+          } catch (e) {
+            toolResults.push({ type: "tool_result", tool_use_id: toolUse.id, content: `Error test_auth_bypass: ${e.message}` });
+          }
+        } else if (toolName === "scan_sensitive_data_exposure") {
+          console.log(`>>ARCALITY_STATUS>> \u{1F6E1}\uFE0F [Security] Escaneando datos sensibles...`);
+          try {
+            const issues = await scan_sensitive_data_exposure(this.page);
+            if (issues.length > 0) {
+              const report = issues.map((i) => `- ${i.category}: ${i.description}
+  Evidence: ${JSON.stringify(i.evidence)}`).join("\n");
+              toolResults.push({ type: "tool_result", tool_use_id: toolUse.id, content: `Vulnerabilidades detectadas:
+${report}` });
+            } else {
+              toolResults.push({ type: "tool_result", tool_use_id: toolUse.id, content: "No se detectaron datos sensibles en LocalStorage/SessionStorage en este chequeo." });
+            }
+          } catch (e) {
+            toolResults.push({ type: "tool_result", tool_use_id: toolUse.id, content: `Error scan_sensitive_data_exposure: ${e.message}` });
+          }
+        } else if (toolName === "audit_http_headers") {
+          console.log(`>>ARCALITY_STATUS>> \u{1F6E1}\uFE0F [Security] Auditando headers HTTP...`);
+          try {
+            const issues = await audit_http_headers(this.page);
+            if (issues.length > 0) {
+              const report = issues.map((i) => `- ${i.category}: ${i.description}`).join("\n");
+              toolResults.push({ type: "tool_result", tool_use_id: toolUse.id, content: `Vulnerabilidades de Headers detectadas:
+${report}` });
+            } else {
+              toolResults.push({ type: "tool_result", tool_use_id: toolUse.id, content: "No se detectaron problemas en los headers de seguridad b\xE1sicos." });
+            }
+          } catch (e) {
+            toolResults.push({ type: "tool_result", tool_use_id: toolUse.id, content: `Error audit_http_headers: ${e.message}` });
+          }
+        } else if (toolName === "create_test_evidence") {
+          const { evidence_type, annotations, save_as, description, finish_run = false } = toolInput;
+          console.log(`\u{1F4F8} [SKILL] Creating test evidence: "${save_as}"...`);
+          try {
+            const filename = save_as.replace(/[^a-zA-Z0-9_-]/g, "_");
+            if (annotations && annotations.length > 0) {
+              await this.page.evaluate((anns) => {
+                anns.forEach((ann) => {
+                  const el = document.querySelector(`[agent-idx="${ann.idx}"]`);
+                  if (el) {
+                    const rect = el.getBoundingClientRect();
+                    const div = document.createElement("div");
+                    div.className = "arcality-annotation";
+                    div.style.position = "absolute";
+                    div.style.border = `3px solid ${ann.color || "red"}`;
+                    div.style.top = `${rect.top + window.scrollY}px`;
+                    div.style.left = `${rect.left + window.scrollX}px`;
+                    div.style.width = `${rect.width}px`;
+                    div.style.height = `${rect.height}px`;
+                    div.style.pointerEvents = "none";
+                    div.style.zIndex = "1000000";
+                    const label = document.createElement("span");
+                    label.innerText = ann.label;
+                    label.style.background = ann.color || "red";
+                    label.style.color = "white";
+                    label.style.fontSize = "12px";
+                    label.style.padding = "2px 4px";
+                    label.style.position = "absolute";
+                    label.style.top = "-20px";
+                    label.style.left = "0";
+                    div.appendChild(label);
+                    document.body.appendChild(div);
+                  }
+                });
+              }, annotations);
+            }
+            let buffer = await this.page.screenshot({
+              type: "png",
+              fullPage: evidence_type === "full_page_screenshot"
+            });
+            await this.page.evaluate(() => {
+              document.querySelectorAll(".arcality-annotation").forEach((el) => el.remove());
+            });
+            if (this.testInfo) {
+              await this.testInfo.attach(filename, { body: buffer, contentType: "image/png" });
+              if (description) {
+                await this.testInfo.attach(`${filename}_description`, {
+                  body: Buffer.from(description, "utf-8"),
+                  contentType: "text/plain"
+                });
+              }
+              toolResults.push({ type: "tool_result", tool_use_id: toolUse.id, content: `\u2705 Evidence "${filename}" created and attached.` });
+              if (finish_run) {
+                this.lastScreenshot = base64Img;
+                return { thought: `Evidence "${description || filename}" created. Mission complete.`, actions: [], finish: true };
+              }
+            } else {
+              toolResults.push({ type: "tool_result", tool_use_id: toolUse.id, content: `\u26A0\uFE0F testInfo not available.` });
+            }
+          } catch (e) {
+            toolResults.push({ type: "tool_result", tool_use_id: toolUse.id, content: `Error creating evidence: ${e.message}` });
+          }
+        } else if (toolName === "send_keyboard_event") {
+          const { key, idx, repeat = 1 } = toolInput;
+          console.log(`>>ARCALITY_STATUS>> \u2328\uFE0F Enviando tecla: "${key}" ${idx !== void 0 ? `(focus en IDX:${idx})` : "(focus actual)"} x${repeat}`);
+          try {
+            if (idx !== void 0) {
+              const c = state.components.find((comp) => comp.idx === idx);
+              if (c) {
+                const loc = this.page.frames()[c.frameIdx].locator(c.selector).first();
+                await loc.focus({ timeout: 5e3 }).catch(async () => {
+                  await loc.click({ timeout: 5e3, force: true });
+                });
+              }
+            }
+            for (let i = 0; i < Math.min(repeat, 20); i++) {
+              await this.page.keyboard.press(key);
+              if (repeat > 1)
+                await this.page.waitForTimeout(100);
+            }
+            toolResults.push({ type: "tool_result", tool_use_id: toolUse.id, content: `\u2705 Key "${key}" pressed ${repeat} time(s).` });
+          } catch (e) {
+            toolResults.push({ type: "tool_result", tool_use_id: toolUse.id, content: `Error sending key: ${e.message}` });
+          }
+        } else if (toolName === "interact_native_control") {
+          const { idx, control_type, value } = toolInput;
+          const c = state.components.find((comp) => comp.idx === idx);
+          console.log(`>>ARCALITY_STATUS>> \u{1F39B}\uFE0F Control nativo: ${control_type} IDX:${idx} \u2192 "${value}"`);
+          if (!c) {
+            toolResults.push({ type: "tool_result", tool_use_id: toolUse.id, content: "Element not found." });
+          } else {
+            try {
+              const frame = this.page.frames()[c.frameIdx];
+              const loc = frame.locator(c.selector).first();
+              switch (control_type) {
+                case "time":
+                case "date":
+                case "datetime": {
+                  try {
+                    await loc.fill(value, { timeout: 3e3 });
+                    const actualValue = await loc.inputValue();
+                    if (actualValue && actualValue !== "") {
+                      toolResults.push({ type: "tool_result", tool_use_id: toolUse.id, content: `\u2705 ${control_type} set to "${actualValue}" via fill().` });
+                      break;
+                    }
+                  } catch {
+                  }
+                  await loc.click({ force: true });
+                  await this.page.keyboard.press("Control+a");
+                  await this.page.waitForTimeout(100);
+                  const digits = value.replace(/[:-T]/g, "");
+                  await this.page.keyboard.type(digits, { delay: 50 });
+                  const finalValue = await loc.inputValue().catch(() => "");
+                  toolResults.push({ type: "tool_result", tool_use_id: toolUse.id, content: `\u2705 ${control_type} set via keyboard. Current value: "${finalValue}".` });
+                  break;
+                }
+                case "color":
+                  await loc.fill(value, { timeout: 3e3 });
+                  toolResults.push({ type: "tool_result", tool_use_id: toolUse.id, content: `\u2705 Color set to "${value}".` });
+                  break;
+                case "range": {
+                  const numVal = parseFloat(value);
+                  await loc.fill(String(numVal), { timeout: 3e3 }).catch(async () => {
+                    await frame.evaluate(({ sel, val }) => {
+                      const el = document.querySelector(sel);
+                      if (el) {
+                        el.value = val;
+                        el.dispatchEvent(new Event("input", { bubbles: true }));
+                        el.dispatchEvent(new Event("change", { bubbles: true }));
+                      }
+                    }, { sel: c.selector, val: String(numVal) });
+                  });
+                  toolResults.push({ type: "tool_result", tool_use_id: toolUse.id, content: `\u2705 Range set to ${numVal}.` });
+                  break;
+                }
+                case "select": {
+                  try {
+                    await loc.selectOption({ label: value }, { timeout: 3e3 });
+                  } catch {
+                    try {
+                      await loc.selectOption({ value }, { timeout: 3e3 });
+                    } catch {
+                      await loc.selectOption(value, { timeout: 3e3 });
+                    }
+                  }
+                  const selected = await loc.inputValue().catch(() => "unknown");
+                  toolResults.push({ type: "tool_result", tool_use_id: toolUse.id, content: `\u2705 Option selected. Value: "${selected}".` });
+                  break;
+                }
+                case "contenteditable":
+                  await loc.click({ force: true });
+                  await this.page.keyboard.press("Control+a");
+                  await this.page.keyboard.type(value, { delay: 30 });
+                  toolResults.push({ type: "tool_result", tool_use_id: toolUse.id, content: `\u2705 Content set to "${value}".` });
+                  break;
+                default:
+                  toolResults.push({ type: "tool_result", tool_use_id: toolUse.id, content: `\u274C Unknown control type: ${control_type}` });
+              }
+            } catch (e) {
+              toolResults.push({ type: "tool_result", tool_use_id: toolUse.id, content: `Error interacting with native control: ${e.message}` });
+            }
+          }
+        } else if (toolName === "scroll_page") {
+          const { direction, amount = 500, idx } = toolInput;
+          console.log(`>>ARCALITY_STATUS>> \u{1F4DC} Scroll: ${direction} ${amount}px ${idx !== void 0 ? `(container IDX:${idx})` : "(page)"}`);
+          try {
+            if (idx !== void 0) {
+              const c = state.components.find((comp) => comp.idx === idx);
+              if (c) {
+                const loc = this.page.frames()[c.frameIdx].locator(c.selector).first();
+                await loc.evaluate((el, args) => {
+                  const d = args.direction;
+                  const a = args.amount;
+                  if (d === "top")
+                    el.scrollTop = 0;
+                  else if (d === "bottom")
+                    el.scrollTop = el.scrollHeight;
+                  else if (d === "down")
+                    el.scrollTop += a;
+                  else if (d === "up")
+                    el.scrollTop -= a;
+                  else if (d === "left")
+                    el.scrollLeft -= a;
+                  else if (d === "right")
+                    el.scrollLeft += a;
+                }, { direction, amount });
+              }
+            } else {
+              switch (direction) {
+                case "down":
+                  await this.page.mouse.wheel(0, amount);
+                  break;
+                case "up":
+                  await this.page.mouse.wheel(0, -amount);
+                  break;
+                case "right":
+                  await this.page.mouse.wheel(amount, 0);
+                  break;
+                case "left":
+                  await this.page.mouse.wheel(-amount, 0);
+                  break;
+                case "top":
+                  await this.page.evaluate(() => window.scrollTo(0, 0));
+                  break;
+                case "bottom":
+                  await this.page.evaluate(() => window.scrollTo(0, document.body.scrollHeight));
+                  break;
+              }
+            }
+            await this.page.waitForTimeout(300);
+            toolResults.push({ type: "tool_result", tool_use_id: toolUse.id, content: `\u2705 Scrolled ${direction} ${direction === "top" || direction === "bottom" ? "completely" : `${amount}px`}. Page state will refresh on next turn.` });
+          } catch (e) {
+            toolResults.push({ type: "tool_result", tool_use_id: toolUse.id, content: `Error scrolling: ${e.message}` });
+          }
+        } else {
+          toolResults.push({ type: "tool_result", tool_use_id: toolUse.id, content: `Error: Tool '${toolName}' not recognized by this version.` });
+        }
+      }
+      if (toolResults.length > 0) {
+        anthropicMessages.push({
+          role: "user",
+          content: toolResults
+        });
+        if (!uiActionCall)
+          continue;
+      }
+      if (uiActionCall) {
+        const input = uiActionCall.input;
+        console.log(`(${((Date.now() - startTime) / 1e3).toFixed(1)}s)`);
+        this.lastScreenshot = base64Img;
+        return {
+          thought: input.thought,
+          actions: input.actions.map((a) => {
+            const c = state.components.find((comp) => comp.idx === a.idx);
+            let finalValue = a.value;
+            if (a.action === "fill" && finalValue && /^\d{2}\/\d{2}\/\d{4}$/.test(finalValue)) {
+              const [d, m, y] = finalValue.split("/");
+              finalValue = `${y}-${m}-${d}`;
+            }
+            return { ...a, value: finalValue, selector: c?.selector, frameIdx: c?.frameIdx, description: c?.name, type: c?.type };
+          }),
+          finish: input.finish
+        };
+      }
+    }
+    return { thought: "Max internal turns reached", actions: [] };
+  }
+  /**
+   * QA Skill: Genera una explicación "humana" y amigable de por qué la misión fue exitosa.
+   */
+  async humanizeMissionResult(prompt, history) {
+    if (!process.env.ANTHROPIC_API_KEY)
+      return null;
+    try {
+      const isProxyMode = !!process.env.ARCALITY_API_URL;
+      const endpointUrl = isProxyMode ? `${process.env.ARCALITY_API_URL}/api/v1/ai/proxy` : "https://api.anthropic.com/v1/messages";
+      const headers = {
+        "Content-Type": "application/json"
+      };
+      if (isProxyMode) {
+        headers["x-api-key"] = process.env.ARCALITY_API_KEY || "";
+        const missionId = process.env.ARCALITY_MISSION_ID || "";
+        if (missionId)
+          headers["x-mission-id"] = missionId;
+      } else {
+        headers["x-api-key"] = process.env.ANTHROPIC_API_KEY;
+        headers["anthropic-version"] = "2023-06-01";
+      }
+      const response = await fetch(endpointUrl, {
+        method: "POST",
+        headers,
+        body: JSON.stringify({
+          model: process.env.CLAUDE_MODEL || "claude-3-5-sonnet-20241022",
+          max_tokens: 300,
+          system: "Eres un Senior QA personalizador de reportes. Tu tarea es resumir en una sola frase corta, profesional y amigable por qu\xE9 una misi\xF3n de testing fue exitosa bas\xE1ndote en el historial de pasos. Usa un tono de victoria. No menciones detalles t\xE9cnicos como 'selectores' o 'DOM'. El resumen debe empezar con algo como '\xA1Misi\xF3n cumplida! ...'",
+          messages: [
+            { role: "user", content: `Misi\xF3n original: ${prompt}
 
 history of steps:
-${i.join(`
-`)}`}]})})).json()).content?.[0]?.text||null}catch{return null}}async summarizeMissionToYaml(e,i,a){if(!process.env.ANTHROPIC_API_KEY)return null;try{let l=i.slice(-30).join(`
-`),h=!!process.env.ARCALITY_API_URL,w=h?`${process.env.ARCALITY_API_URL}/api/v1/ai/proxy`:"https://api.anthropic.com/v1/messages",R={"Content-Type":"application/json"};if(h){R["x-api-key"]=process.env.ARCALITY_API_KEY||"";let E=process.env.ARCALITY_MISSION_ID||"";E&&(R["x-mission-id"]=E)}else R["x-api-key"]=process.env.ANTHROPIC_API_KEY,R["anthropic-version"]="2023-06-01";let N=(await(await fetch(w,{method:"POST",headers:R,body:JSON.stringify({model:process.env.CLAUDE_MODEL||"claude-3-5-sonnet-20241022",max_tokens:1e3,system:`You are an elite QA Engineer. Your task is to transform a raw execution history into a clean, human-friendly English YAML Mission Card.
+${history.join("\n")}` }
+          ]
+        })
+      });
+      const data = await response.json();
+      return data.content?.[0]?.text || null;
+    } catch (e) {
+      return null;
+    }
+  }
+  /**
+       * MODO BRIDGE: Envía la percepción de la CLI hacia el Portal Web (SaaS)
+       * para que el servidor decida la acción usando su propia infraestructura e IP.
+      // askBridge eliminado — proxy mode ahora está integrado directamente en askIA.
+  
+      /**
+       * QA Skill: Summarizes the mission execution into a clean, human-friendly English YAML format.
+       */
+  async summarizeMissionToYaml(prompt, history, startUrl) {
+    if (!process.env.ANTHROPIC_API_KEY)
+      return null;
+    try {
+      const historyStr = history.slice(-30).join("\n");
+      const isProxyMode = !!process.env.ARCALITY_API_URL;
+      const endpointUrl = isProxyMode ? `${process.env.ARCALITY_API_URL}/api/v1/ai/proxy` : "https://api.anthropic.com/v1/messages";
+      const headers = {
+        "Content-Type": "application/json"
+      };
+      if (isProxyMode) {
+        headers["x-api-key"] = process.env.ARCALITY_API_KEY || "";
+        const missionId = process.env.ARCALITY_MISSION_ID || "";
+        if (missionId)
+          headers["x-mission-id"] = missionId;
+      } else {
+        headers["x-api-key"] = process.env.ANTHROPIC_API_KEY;
+        headers["anthropic-version"] = "2023-06-01";
+      }
+      const response = await fetch(endpointUrl, {
+        method: "POST",
+        headers,
+        body: JSON.stringify({
+          model: process.env.CLAUDE_MODEL || "claude-3-5-sonnet-20241022",
+          max_tokens: 1e3,
+          system: `You are an elite QA Engineer. Your task is to transform a raw execution history into a clean, human-friendly English YAML Mission Card.
                     
 STRICT YAML STRUCTURE:
 Title: "Descriptive title for the test"
@@ -159,16 +2244,760 @@ RULES:
 1. Use professional English.
 2. The 'Steps' must be what actually happened in the history, but simplified for a human to read.
 3. 'Data' should extract values mentioned in the history (e.g., if you filled a name with 'Test-123', include it).
-4. Output ONLY the YAML block. No preamble or explanations.`,messages:[{role:"user",content:`Original Mission: ${e}
-Starting URL: ${a}
+4. Output ONLY the YAML block. No preamble or explanations.`,
+          messages: [
+            { role: "user", content: `Original Mission: ${prompt}
+Starting URL: ${startUrl}
 
 Execution history:
-${l}`}],temperature:.1})})).json()).content?.[0]?.text||null;return N&&(N=N.replace(/```yaml\n?/g,"").replace(/```/g,"").trim()),N}catch(l){return console.error("Error generating Smart YAML:",l),null}}};var fe=class{page;report=[];constructor(e){this.page=e}async runAllScans(){console.log("[QA-SEC] Starting comprehensive security scan...");let e=await ue(this.page);this.report.push(...e);let i=await pe(this.page);return this.report.push(...i),await this.testOpenRedirect(),console.log(`[QA-SEC] Comprehensive scan finished. Found ${this.report.length} potential vulnerabilities.`),this.getReport()}async testOpenRedirect(){let e=new URL(this.page.url()),i=["redirect","next","url","returnTo","dest"];for(let a of i)if(e.searchParams.has(a)){let l=e.searchParams.get(a),h="https://www.evil-redirect.com";e.searchParams.set(a,h),console.log(`[QA-SEC] Testing Open Redirect on param: ${a}`);try{if(await this.page.goto(e.toString(),{waitUntil:"networkidle"}),this.page.url().startsWith(h)){let w={type:"confirmed_vulnerability",category:"Open Redirect",severity:"Medium",confidence:"High",exploitability:"confirmed",status:"detected",description:`The application is vulnerable to Open Redirect. The '${a}' parameter was manipulated to redirect the user to an external, malicious site.`,impact:"Attackers can use this to craft phishing links that appear to come from the trusted domain but redirect to malicious sites.",evidence:{vulnerableUrl:e.toString(),parameter:a,payload:h},reproductionSteps:[`Navigate to: ${e.toString()}`,"Observe that the page redirects to the payload domain."],remediation:"Validate all redirection URLs against a whitelist of allowed domains. Do not blindly redirect to user-supplied URLs.",classification:{cwe:"CWE-601"}};this.report.push(w),await this.page.goBack()}}catch{console.log("[QA-SEC] Error during open redirect test, this might be expected if the navigation was blocked. Continuing scan."),await this.page.goBack()}}}addVulnerability(e){this.report.push(e)}getReport(){let e=[],i=new Set;for(let a of this.report){let l=`${a.category}|${a.description}|${a.evidence.selector||""}`;i.has(l)||(e.push(a),i.add(l))}return e}};var It=require("dotenv/config"),H=Z(require("fs")),ye=Z(require("path")),ke=new Set;function Le(o,e){let i=o.substring(0,80).toLowerCase().trim();ke.has(i)||(ke.add(i),le({rule_type:"VALIDATION",title:`Restricci\xF3n detectada: ${o.substring(0,80)}`,description:`La aplicaci\xF3n rechaz\xF3 la acci\xF3n con el mensaje: "${o.substring(0,300)}". Contexto: ${e.substring(0,150)}`,severity:"important"}).catch(()=>{}))}(0,Se.test)("Arcality AI Runner",async({page:o},e)=>{Se.test.setTimeout(12e5);let i=process.env.CONTEXT_DIR||"out",a=process.env.ACTIVE_CONFIG||"Default";!process.env.BASE_URL&&process.env[`${a}_URL`]&&(process.env.BASE_URL=process.env[`${a}_URL`]),!process.env.LOGIN_USER&&process.env[`${a}_USER`]&&(process.env.LOGIN_USER=process.env[`${a}_USER`]),!process.env.LOGIN_PASSWORD&&process.env[`${a}_PASS`]&&(process.env.LOGIN_PASSWORD=process.env[`${a}_PASS`]),await o.context().grantPermissions(["geolocation"]),await o.context().setGeolocation({latitude:19.4326,longitude:-99.1332});let l=new he(o,i,e),h=process.env.SMART_PROMPT||"Navega al inicio y verifica que el sitio cargue",w=[],R=[],b=[],j=/exitosamente|creado correctamente|guardado correctamente|misión cumplida|registered successfully|created successfully|saved successfully|operación exitosa|registro guardado|successfully|correctly/i,N=/\berror\b|falló|failed|no se puede|cannot|unable|ya existe|already exists|inválido|invalid|incorrecto|incorrect|ligado|linked|depende|depends|duplicado|duplicate|repetido|repeated|reintentar|retry|missing|required|obligatorio|bad request|400|500/i,E=!1,U=!1,$=!1,A=!1,d=0,k=0,_=[],C=30,L="",q=()=>{if($)return;$=!0,H.existsSync(i)||H.mkdirSync(i,{recursive:!0});let t=E&&!U;try{let p=ye.join(i,"memoria-agente.json"),u=[];if(H.existsSync(p)){let n=H.readFileSync(p,"utf8").trim();if(n)try{u=JSON.parse(n)}catch{console.warn("\u26A0\uFE0F Memoria corrupta, reiniciando..."),u=[]}}let s={prompt:h,steps:w,steps_data:b,success:t,error:U,timestamp:Date.now()};u.push(s),H.writeFileSync(p,JSON.stringify(u,null,2)),console.log(`>>ARCALITY_STATUS>> \u{1F9E0} Memoria guardada: ${b.length} pasos nuevos`)}catch(p){console.error("\u274C Fall\xF3 al guardar memoria:",p)}try{let p=ye.join(i,`agent-log-${Date.now()}.json`);H.writeFileSync(p,JSON.stringify({prompt:h,history:w,steps:d,success:t,error:U},null,2))}catch{}},Q=!1,Y=async()=>{if(Q)return;Q=!0;let t=process.env.ARCALITY_PROJECT_ID||"",p=process.env.ARCALITY_API_URL||"",u=process.env.ARCALITY_API_KEY||"";if(!t||!p||!u){console.warn(`[CollectiveMemory] \u26A0\uFE0F Vars faltantes \u2014 project_id='${t}' api_url='${p}' api_key='${u?"OK":"MISSING"}'`);return}console.log(`\u{1F9E0} [COLLECTIVE MEMORY] Persistiendo conocimiento (project: ${t})...`);try{let s=b.map(c=>`${c.action_data?.action||"action"} "${c.componentName}" en ${c.url}`).join(" \u2192 ").substring(0,500),n=await Ie({doc_type:"PROCESS",title:`Flujo exitoso: ${h.substring(0,100)}`,content:s||h.substring(0,500)});n?console.log(`\u{1F9E0} [COLLECTIVE MEMORY] \u2705 Knowledge guardado: ${n}`):console.warn("[CollectiveMemory] \u26A0\uFE0F pushKnowledge retorn\xF3 null (revisar HTTP status arriba)");let r=[...new Set(b.map(c=>c.url).filter(Boolean))];if(r.length>1){let c=await le({rule_type:"NAVIGATION",title:`Flujo de navegaci\xF3n: ${h.substring(0,80)}`,description:`Agente naveg\xF3 ${r.length} p\xE1ginas: ${r.join(" \u2192 ").substring(0,400)}`,severity:"suggestion"});c&&console.log(`\u{1F9E0} [COLLECTIVE MEMORY] \u2705 Regla NAVIGATION guardada: ${c}`)}if(b.find(c=>c.action_data?.action==="click"&&(c.componentName?.toLowerCase().includes("guardar")||c.componentName?.toLowerCase().includes("save")||c.componentName?.toLowerCase().includes("crear")||c.componentName?.toLowerCase().includes("registrar")))){let c=await le({rule_type:"UI_UX",title:`Patr\xF3n de guardado: ${h.substring(0,60)}`,description:`Flujo exitoso incluy\xF3 guardado/creaci\xF3n. Pasos: ${s.substring(0,400)}`,severity:"important"});c&&console.log(`\u{1F9E0} [COLLECTIVE MEMORY] \u2705 Regla UI_UX guardada: ${c}`)}}catch(s){console.warn(`[CollectiveMemory] \u274C Error inesperado en persistCollectiveMemory: ${s?.message}`)}};console.log(`
-\u{1F916} [AGENTE] Iniciando misi\xF3n: "${h}"`);let B=process.env.BASE_URL||"",O=process.env.TARGET_PATH||"/";if(process.env.LOGIN_USER&&process.env.LOGIN_PASSWORD){console.log(">>ARCALITY_STATUS>> \u{1F511} Realizando login autom\xE1tico...");let t=B+"/login";if(!t.startsWith("http"))throw new Error(`URL Inv\xE1lida: "${t}". Aseg\xFArate de configurar la Base URL con http://`);await o.goto(t);try{let p=o.locator('input[type="email"], input[name="email"], input[name="username"], [placeholder*="usuario" i], [placeholder*="correo" i], [placeholder*="email" i]').first();await p.waitFor({state:"visible",timeout:1e4});let u=o.locator('input[type="password"], input[name="password"], [placeholder*="contrase\xF1a" i]').first(),s=o.locator('button[type="submit"], button:has-text("Login"), button:has-text("Entrar"), [role="button"]:has-text("Entrar")').first();await p.click(),await p.fill(process.env.LOGIN_USER||""),await u.click(),await u.fill(process.env.LOGIN_PASSWORD||""),await o.waitForTimeout(500),await s.click(),await o.waitForURL(n=>!n.href.includes("/login"),{timeout:15e3}).catch(()=>{}),await o.waitForLoadState("networkidle").catch(()=>{})}catch{console.warn("    \u26A0\uFE0F Login autom\xE1tico omitido o ya autenticado.")}if(O!=="/"&&!o.url().includes(O)){let p=O.startsWith("http")?O:B+O;if(!p.startsWith("http"))throw new Error(`URL Inv\xE1lida: "${p}"`);await o.goto(p).catch(()=>{})}}else{let t=O.startsWith("http")?O:B+O;if(!t.startsWith("http"))throw new Error(`URL Inv\xE1lida: "${t}". Por favor proporciona una URL v\xE1lida incluyendo http:// o https://`);await o.goto(t)}await o.waitForLoadState("networkidle"),o.on("download",async t=>{E=!0,A=!0,q()});let T=C+50,F=0;for(;!A&&d<C;){if(F++,F>T){console.error(`>>ARCALITY_STATUS>> \u{1F6D1} Safety limit: ${F} iteraciones totales alcanzadas. Abortando.`),U=!0;break}let t=!1;await o.waitForTimeout(1e3);let p=o.url(),u=w.join(" ").toLowerCase(),s=u.includes("guardar")||u.includes("save")||u.includes("registrar"),n=h.toLowerCase().match(/después|luego|posteriormente|pestaña|tabla|doble clic|arrastra|paso|sección|modal|etapa/i),r=h.toLowerCase().match(/modal|varias|distintos|diferentes|repetir|guardar dos veces/i)||n;if(d>4&&s&&!n){let g=!p.includes("/new")&&!p.includes("/create")&&!p.includes("/edit")&&!p.includes("/details")&&!p.includes("/alta");if((u.includes("nueva")||u.includes("crear")||u.includes("alta")||u.includes("/new")||u.includes("/create"))&&g){let S=await o.locator('.toast, .alert, [role="status"], [role="alert"], .snackbar, .notification, .success-message, .mat-snack-bar-container').all(),I=!1;for(let ee of S)if(await ee.isVisible().catch(()=>!1)){let J=await ee.innerText().catch(()=>"");if(j.test(J.toLowerCase())){I=!0,console.log(`>>ARCALITY_STATUS>> \u2728 Auto-Success: Toast de \xE9xito detectado: "${J.substring(0,60)}"`);break}}if(I){console.log(">>ARCALITY_STATUS>> \u2728 Auto-Success: Regreso a lista Y mensaje de \xE9xito detectado."),E=!0,A=!0,q();break}}}if(d===1){let g=await o.locator('.toast, .alert, [role="status"], [role="alert"]').all();for(let v of g)await v.isVisible().catch(()=>!1)&&(L=await v.innerText().catch(()=>""),L&&console.log(`>>ARCALITY_STATUS>> \u{1F4A1} Nota: Ignorando mensaje preexistente: "${L.substring(0,30)}..."`))}let c=(await o.innerText("body").catch(()=>"")).toLowerCase(),m=N.test(c),y=null;if(m?(console.log(">>ARCALITY_STATUS>> \u26A0\uFE0F Error detectado en pantalla. Saltando Gu\xEDa para priorizar correcci\xF3n."),b.length>0&&(_=[...b],b.length=0)):y=await l.getActionFromGuia(h,b.length),y){let g=y.actions?.[0]?`${y.actions[0].action} en "${y.actions[0].description||""}"`.toLowerCase():"",v=w.slice(-4).map(I=>I.toLowerCase());g&&v.some(I=>I.includes(g.substring(0,30)))?(console.log(`>>ARCALITY_STATUS>> \u26A0\uFE0F Gu\xEDa invalidada: la acci\xF3n "${g.substring(0,50)}" ya fue intentada. Delegando a IA.`),y=null):(k++,console.log(`>>ARCALITY_STATUS>> \u2728 Gu\xEDa de \xE9xito: Paso validado (Gu\xEDa #${k}, NO consume turno IA)`))}if(y||(d++,console.log(`>>ARCALITY_STATUS>> \u23F3 Turno IA ${d} de ${C} (Gu\xEDa us\xF3 ${k} turnos gratis)...`),y=await l.askIA(h,w,d)),console.log(`\u{1F9E0} Pensamiento: ${y.thought}`),!y.finish&&w.length>=6){let g=w.slice(-6),v=g.filter(x=>x.includes("click en")),S=g.filter(x=>x.includes("fill en")),I=new Set(v),ee=new Set(S),J=v.length>=4&&I.size<=2,de=S.length>=4&&ee.size<=2;if(J||de){let x=J?"click":"fill",z=J?I:ee;console.warn(`
-\u26A0\uFE0F [LOOP DETECTOR] Patr\xF3n repetitivo de ${x} detectado:`),console.warn(`   \xDAltimas acciones: ${g.join(" \u2192 ")}`),console.warn("   El agente est\xE1 atrapado. Forzando terminaci\xF3n con sugerencia."),y.thought=`\u{1F6D1} ERROR: Me he quedado atrapado en un bucle repetitivo intentando interactuar con: ${Array.from(z).join(", ")}. No puedo continuar la misi\xF3n de forma aut\xF3noma.
-
-\u{1F4A1} REGLA DE QA: He detectado que mi acci\xF3n de ${x} no est\xE1 cambiando el estado de la p\xE1gina como esperaba. Esto podr\xEDa ser un bug de la aplicaci\xF3n o una limitaci\xF3n de mi percepci\xF3n actual.`,y.finish=!0,y.actions=[],E=!1,U=!0}}if(y.actions&&y.actions.length>0)for(let g of y.actions){console.log(`>>ARCALITY_STATUS>> \u{1F3AF} Acci\xF3n: ${g.action} en "${g.description||g.selector}"`);try{let v=g.frameIdx!==void 0&&o.frames()[g.frameIdx]?o.frames()[g.frameIdx]:o,S=g.selector?v.locator(g.selector).first():null,I=o.url();if((g.action==="click"||g.action==="double_click")&&S){let x=(g.description||"").toLowerCase(),z=x.includes("more_vert")||x.includes("menu")||x.includes("icono :")||x.includes("dots")||x.includes("opciones");if(x.includes("guardar")||x.includes("save")||x.includes("crear")||x.includes("registrar")||x.includes("enviar")||x.includes("aceptar")||x.includes("confirmar")||x.includes("update")){let D=(await o.innerText("body").catch(()=>"")).toLowerCase(),W=D.includes("error")||D.includes("fall\xF3")||D.includes("no se puede")||D.includes("ya existe")||D.includes("existe")||D.includes("inv\xE1lido")||D.includes("incorrecto")||D.includes("ligado")||D.includes("depende")||D.includes("duplicado")||D.includes("repetido")||D.includes("no encontrado")||D.includes("no existe")||D.includes("obligatorio")||D.includes("required"),ne=D.includes("exitosamente")||D.includes("guardado")||D.includes("creado")||D.includes("success")||D.includes("correctamente")||D.includes("misi\xF3n cumplida");if(!(W||ne)&&g.type&&["span","p","label","i","svg","img"].includes(g.type)){let oe=(await S.innerText().catch(()=>"")).toLowerCase();if(N.test(oe)){console.log(`>>ARCALITY_STATUS>> \u26A0\uFE0F Feedback de ERROR en elemento peque\xF1o: "${oe.substring(0,50)}..."`),E=!1,U=!0,A=!0,q();break}else if(j.test(oe)){console.log(`>>ARCALITY_STATUS>> \u2728 \xC9xito visual en elemento peque\xF1o: "${oe.substring(0,50)}..."`),E=!0,A=!0,U=!1,q();break}}w.find(G=>G.toLowerCase().includes("click")&&(G.toLowerCase().includes("guardar")||G.toLowerCase().includes("save")||G.toLowerCase().includes("crear")||G.toLowerCase().includes("registrar")))&&!r&&(console.log(">>ARCALITY_STATUS>> \u{1F6D1} Advertencia: Click persistente en bot\xF3n de acci\xF3n."),w.push(`Turno ${d}: Intentaste hacer click en "${x}" nuevamente, pero la p\xE1gina sigue mostrando el mismo estado. \xBFHay alg\xFAn error visible que debas corregir antes?`),await o.waitForTimeout(1e3))}let Te=w[w.length-1];if(Te&&Te.includes(`click en "${x}"`)){let te=x.includes("dots")||x.includes("vert")||x.includes("menu")||x.includes("opciones"),D=w.filter(ne=>ne.includes(`click en "${x}"`)).length,W=r?3:1;if(te&&D<2)console.log(`    \u26A0\uFE0F Re-intentando click en men\xFA "${x}"...`);else if(r&&D<W)console.log(`    \u26A0\uFE0F Click repetido permitido por contexto de misi\xF3n en "${x}"...`);else{if((await o.innerText("body").catch(()=>"")).match(/ligado|depende|no se puede/i)){console.log(`
-\u2728 [ESTANCADO] El agente repite click pero el error ya es visible. Finalizando.`),A=!0,E=!0;break}console.log(`
-\u{1F6D1} [AUTO-STOP] Bloqueando click duplicado en "${x}". Forzando re-evaluaci\xF3n.`),w.push(`Turno ${d}: Bloqueado click repetido en "${x}" (Evitando bucle)`),await o.waitForTimeout(1e3);break}}if(z&&w.some(te=>te.includes(x)&&te.includes("click"))&&(console.log(`    \u26A0\uFE0F El disparador "${x}" ya fue clicado. Esperando estabilidad extra...`),await o.waitForTimeout(1500)),await S.scrollIntoViewIfNeeded({timeout:5e3}).catch(()=>{}),g.action==="double_click"?await S.dblclick({timeout:1e4,force:!0}):x.includes("toast")||x.includes("close")?await S.click({timeout:2e3,force:!0}).catch(()=>console.log("    \u26A0\uFE0F No se pudo cerrar toast, ignorando...")):await S.click({timeout:1e4,force:!0}),z&&(console.log("    \u23F3 Abriendo men\xFA, esperando 1.5s para renderizado..."),await o.waitForTimeout(1500)),x.includes("guardar")||x.includes("save")||x.includes("crear")||x.includes("registrar")){console.log("    \u23F3 Esperando transici\xF3n post-guardado...");try{await o.waitForLoadState("networkidle",{timeout:8e3})}catch{console.log("    \u26A0\uFE0F Timeout esperando red, continuando...")}let te=await o.locator('.toast, .alert, [role="status"], [role="alert"], .snackbar, .notification, .success-message, .mat-snack-bar-container').all(),D=!1;for(let se of te)if(await se.isVisible().catch(()=>!1)){let X=await se.innerText().catch(()=>"");if(/exitosamente|creado correctamente|guardado correctamente|operación exitosa|registro guardado|saved successfully|created successfully/i.test(X)){console.log(`>>ARCALITY_STATUS>> \u2728 \xC9xito visual detectado en toast: "${X.substring(0,60)}"`),E=!0,A=!0,q(),D=!0;break}else N.test(X.toLowerCase())&&(console.log(`>>ARCALITY_STATUS>> \u{1F4DA} [BUSINESS RULE] Error de validaci\xF3n capturado: "${X.substring(0,80)}"`),Le(X.trim(),`Acci\xF3n: click en "${x}" en ${o.url()}`))}if(D)break;let W=o.url();if(I!==W&&!W.includes("/new")&&!W.includes("/edit")&&!W.includes("/create")){console.log(`
-\u2728 [AUTO-SUCCESS] Navegaci\xF3n detectada tras guardar (${I} -> ${W}). Confirmando...`),await o.waitForTimeout(2e3);let se=await o.locator('.toast, .alert, [role="status"], [role="alert"], .snackbar, .notification, .error-message, .mat-snack-bar-container').all(),X=!1;for(let G of se)if(await G.isVisible().catch(()=>!1)){let oe=await G.innerText().catch(()=>"");if(N.test(oe.toLowerCase())){X=!0,console.log(`>>ARCALITY_STATUS>> \u26A0\uFE0F Error en alerta post-guardado: "${oe.substring(0,60)}"`);break}}if(X)console.log(">>ARCALITY_STATUS>> \u26A0\uFE0F Se detect\xF3 navegaci\xF3n pero hay un ERROR en alerta/toast visible.");else{E=!0,A=!0,await Y(),q();break}}}else x.includes("siguiente")||x.includes("next")?await o.waitForTimeout(1e3):await o.waitForTimeout(500)}else if(g.action==="fill"&&S&&g.value){if(await S.evaluate(z=>z.tagName==="INPUT"&&z.type==="file").catch(()=>!1)){console.log(`    \u{1F4C2} Detectado input de archivo. Subiendo: "${g.value}"`);let z=g.value.replace(/^"|"$/g,"").trim();await S.setInputFiles(z)}else await S.click({timeout:5e3}).catch(()=>{}),await S.fill(g.value,{timeout:1e4,force:!0}),await S.press("Tab").catch(()=>{});await o.waitForTimeout(500)}else g.action==="wait"&&await o.waitForTimeout(3e3);let ee=(g.description||g.selector||"").substring(0,80),J=g.value?` con valor "${g.value}"`:"";w.push(`Turno ${d}: ${g.action} en "${ee}"${J}`),R.push(o.url());let de=(g.description||"").substring(0,80);de.length<100&&b.push({url:I,url_normalized:I.replace(/\/[a-z]{2}-[A-Z]{2}\//g,"/{locale}/").replace(/\/[a-z]{2}\//g,"/{lang}/"),componentName:de,componentType:g.type,action_data:{action:g.action,value:g.value},finish:y.finish})}catch(v){if(console.warn(`  \u26A0\uFE0F Acci\xF3n fallida: ${v.message}`),w.push(`Turno ${d}: \u274C FALL\xD3 ${g.action} en "${g.description}" - Error: ${v.message}. REGLA MANDATORIA: Debes investigar la causa usando 'inspect_element_details' o 'capture_console_errors' antes de cualquier otro paso.`),t=!0,w.filter(I=>I.includes("FALL\xD3")&&I.includes(g.description)).length>=2){console.error(`>>ARCALITY_STATUS>> \u{1F6D1} Demasiados fallos t\xE9cnicos en este elemento "${g.description}". Abortando misi\xF3n.`),U=!0,A=!0;break}}}if(y.finish)if(t)console.warn(">>ARCALITY_STATUS>> \u26A0\uFE0F El agente intent\xF3 finalizar pero hubo fallos en el turno. Continuando para investigaci\xF3n..."),A=!1;else{console.log(">>ARCALITY_STATUS>> \u2705 El agente solicit\xF3 finalizar misi\xF3n."),A=!0,!y.actions||y.actions.length===0?b.push({url:o.url(),url_normalized:o.url().replace(/\/[a-z]{2}-[A-Z]{2}\//g,"/{locale}/").replace(/\/[a-z]{2}\//g,"/{lang}/"),componentName:"MISSION_END",componentType:"FINISH_SIGNAL",action_data:{action:"finish"},finish:!0}):b.length>0&&(b[b.length-1].finish=!0);let g=await o.locator('.toast, .alert, [role="status"], [role="alert"], .snackbar, .notification, .mat-snack-bar-container, .error-message').all(),v=!1;for(let S of g)if(await S.isVisible().catch(()=>!1)){let I=await S.innerText().catch(()=>"");if(N.test(I.toLowerCase())){v=!0,console.log(`>>ARCALITY_STATUS>> \u26A0\uFE0F Error detectado en toast/alerta: "${I.substring(0,60)}"`);break}}v?(console.log(">>ARCALITY_STATUS>> \u26A0\uFE0F El agente intent\xF3 finalizar pero se detect\xF3 un ERROR en alert/toast."),E=!1,A=!1,w.push(`Turno ${d}: El agente intent\xF3 finalizar pero el sistema detect\xF3 un error en un toast/alerta visible.`)):(E=!0,U=!1,q(),b.length===0&&_.length>0&&(b.push(..._),console.log(`>>ARCALITY_STATUS>> \u{1F504} Gu\xEDa de \xC9xito restaurada (${_.length} pasos recuperados).`)),await Y())}let P=o.locator('.toast, .alert, .message, div[role="status"], .error-message, [class*="alert"], [class*="toast"], .status-message');if(d>2){let g=await P.all();for(let v of g)if(await v.isVisible()){let S=await v.innerText(),I=S.toLowerCase();if(N.test(I))console.log(`>>ARCALITY_STATUS>> \u26A0\uFE0F Feedback de ERROR detectado: "${S.substring(0,60)}..."`),E=!1,Le(S.trim(),`URL: ${o.url()}`),b.length>0&&(console.log(">>ARCALITY_STATUS>> \u{1F504} Invalidando Gu\xEDa de \xC9xito por feedback de error."),_=[...b],b.length=0);else if(j.test(I))if(I!==L){console.log(`>>ARCALITY_STATUS>> \u2728 \xC9xito visual detectado: "${I.substring(0,50)}..."`),E=!0,A=!0,U=!1,await Y(),q();break}else console.log(">>ARCALITY_STATUS>> \u{1F4A1} Mensaje de \xE9xito persistente ignorado.")}}}if(E){U=!1,await Y(),console.log("\u270D\uFE0F [HUMANIZANDO] Generando resumen de \xE9xito para el reporte...");let t=await l.humanizeMissionResult(h,w);t&&await e.attach("success_summary",{body:Buffer.from(t,"utf-8"),contentType:"text/plain"}),console.log("\u{1F916} [SMART-YAML] Generating mission card...");let p=await l.summarizeMissionToYaml(h,w,O);if(p){let u=ye.join(i,"last-mission-smart.yaml");H.writeFileSync(u,p),console.log(">>ARCALITY_STATUS>> \u{1F4DD} Smart Mission Card generated."),await e.attach("smart_mission_card",{body:Buffer.from(p,"utf-8"),contentType:"text/yaml"})}}try{let p=await new fe(o).runAllScans();if(p&&p.length>0){await e.attach("security_report",{body:JSON.stringify(p,null,2),contentType:"application/json"}),console.log(`>>ARCALITY_STATUS>> \u{1F6E1}\uFE0F Escaneo de seguridad completado. ${p.length} problemas encontrados.`);try{for(let u of p){let s=u.severity||"Info",n=s==="Critical"?"critical":s==="High"?"important":"suggestion";await le({rule_type:"SECURITY",title:`Security: ${u.category} (${u.severity})`,description:`${u.description}
-Evidence: ${JSON.stringify(u.evidence).substring(0,400)}`,severity:n}).catch(()=>{})}}catch{console.warn(">>ARCALITY_STATUS>> \u26A0\uFE0F Fall\xF3 persistir hallazgos de seguridad en Memoria Colectiva.")}}else console.log(">>ARCALITY_STATUS>> \u{1F6E1}\uFE0F Escaneo de seguridad completado. No se encontraron problemas.")}catch(t){console.error("Error in Security Scan:",t.message)}if(q(),!E)throw new Error("Misi\xF3n no completada o finalizada con errores.")});
+${historyStr}` }
+          ],
+          temperature: 0.1
+        })
+      });
+      const data = await response.json();
+      let yaml = data.content?.[0]?.text || null;
+      if (yaml) {
+        yaml = yaml.replace(/```yaml\n?/g, "").replace(/```/g, "").trim();
+      }
+      return yaml;
+    } catch (e) {
+      console.error("Error generating Smart YAML:", e);
+      return null;
+    }
+  }
+};
+
+// src/services/securityScanner.ts
+var SecurityScanner = class {
+  page;
+  report = [];
+  constructor(page) {
+    this.page = page;
+  }
+  /**
+   * Runs a series of automated scans against the current state of the page.
+   * This is intended to be called at the end of a test run to aggregate findings.
+   * @returns A promise that resolves to an array of found vulnerabilities.
+   */
+  async runAllScans() {
+    console.log("[QA-SEC] Starting comprehensive security scan...");
+    const headerVulnerabilities = await audit_http_headers(this.page);
+    this.report.push(...headerVulnerabilities);
+    const storageVulnerabilities = await scan_sensitive_data_exposure(this.page);
+    this.report.push(...storageVulnerabilities);
+    await this.testOpenRedirect();
+    console.log(`[QA-SEC] Comprehensive scan finished. Found ${this.report.length} potential vulnerabilities.`);
+    return this.getReport();
+  }
+  /**
+   * A basic test for open redirect vulnerabilities on the current URL.
+   */
+  async testOpenRedirect() {
+    const url = new URL(this.page.url());
+    const redirectParams = ["redirect", "next", "url", "returnTo", "dest"];
+    for (const param of redirectParams) {
+      if (url.searchParams.has(param)) {
+        const originalValue = url.searchParams.get(param);
+        const payload = "https://www.evil-redirect.com";
+        url.searchParams.set(param, payload);
+        console.log(`[QA-SEC] Testing Open Redirect on param: ${param}`);
+        try {
+          await this.page.goto(url.toString(), { waitUntil: "networkidle" });
+          if (this.page.url().startsWith(payload)) {
+            const vulnerability = {
+              type: "confirmed_vulnerability",
+              category: "Open Redirect",
+              severity: "Medium",
+              confidence: "High",
+              exploitability: "confirmed",
+              status: "detected",
+              description: `The application is vulnerable to Open Redirect. The '${param}' parameter was manipulated to redirect the user to an external, malicious site.`,
+              impact: "Attackers can use this to craft phishing links that appear to come from the trusted domain but redirect to malicious sites.",
+              evidence: {
+                vulnerableUrl: url.toString(),
+                parameter: param,
+                payload
+              },
+              reproductionSteps: [
+                `Navigate to: ${url.toString()}`,
+                "Observe that the page redirects to the payload domain."
+              ],
+              remediation: "Validate all redirection URLs against a whitelist of allowed domains. Do not blindly redirect to user-supplied URLs.",
+              classification: {
+                cwe: "CWE-601"
+              }
+            };
+            this.report.push(vulnerability);
+            await this.page.goBack();
+          }
+        } catch (error) {
+          console.log(`[QA-SEC] Error during open redirect test, this might be expected if the navigation was blocked. Continuing scan.`);
+          await this.page.goBack();
+        }
+      }
+    }
+  }
+  /**
+   * Adds a vulnerability to the report. Can be used by other parts of the system
+   * to feed into this scanner's report.
+   * @param vuln - The vulnerability to add.
+   */
+  addVulnerability(vuln) {
+    this.report.push(vuln);
+  }
+  /**
+   * Returns the final list of vulnerabilities.
+   */
+  getReport() {
+    const uniqueReport = [];
+    const seen = /* @__PURE__ */ new Set();
+    for (const vuln of this.report) {
+      const key = `${vuln.category}|${vuln.description}|${vuln.evidence.selector || ""}`;
+      if (!seen.has(key)) {
+        uniqueReport.push(vuln);
+        seen.add(key);
+      }
+    }
+    return uniqueReport;
+  }
+};
+
+// tests/_helpers/agentic-runner.spec.ts
+var import_config = require("dotenv/config");
+var fs2 = __toESM(require("fs"));
+var path2 = __toESM(require("path"));
+var _sessionRuleCache = /* @__PURE__ */ new Set();
+function captureValidationRule(errorMessage, context) {
+  const key = errorMessage.substring(0, 80).toLowerCase().trim();
+  if (_sessionRuleCache.has(key))
+    return;
+  _sessionRuleCache.add(key);
+  pushRule({
+    rule_type: "VALIDATION",
+    title: `Restricci\xF3n detectada: ${errorMessage.substring(0, 80)}`,
+    description: `La aplicaci\xF3n rechaz\xF3 la acci\xF3n con el mensaje: "${errorMessage.substring(0, 300)}". Contexto: ${context.substring(0, 150)}`,
+    severity: "important"
+  }).catch(() => {
+  });
+}
+(0, import_test.test)("Arcality AI Runner", async ({ page }, testInfo) => {
+  import_test.test.setTimeout(12e5);
+  const contextDir = process.env.CONTEXT_DIR || "out";
+  const activeConfig = process.env.ACTIVE_CONFIG || "Default";
+  if (!process.env.BASE_URL && process.env[`${activeConfig}_URL`])
+    process.env.BASE_URL = process.env[`${activeConfig}_URL`];
+  if (!process.env.LOGIN_USER && process.env[`${activeConfig}_USER`])
+    process.env.LOGIN_USER = process.env[`${activeConfig}_USER`];
+  if (!process.env.LOGIN_PASSWORD && process.env[`${activeConfig}_PASS`])
+    process.env.LOGIN_PASSWORD = process.env[`${activeConfig}_PASS`];
+  await page.context().grantPermissions(["geolocation"]);
+  await page.context().setGeolocation({ latitude: 19.4326, longitude: -99.1332 });
+  const agent = new AIAgentHelper(page, contextDir, testInfo);
+  const prompt = process.env.SMART_PROMPT || "Navega al inicio y verifica que el sitio cargue";
+  const history = [];
+  const urlHistory = [];
+  const stepsData = [];
+  const successKeywords = /exitosamente|creado correctamente|guardado correctamente|misión cumplida|registered successfully|created successfully|saved successfully|operación exitosa|registro guardado|successfully|correctly/i;
+  const failureKeywords = /\berror\b|falló|failed|no se puede|cannot|unable|ya existe|already exists|inválido|invalid|incorrecto|incorrect|ligado|linked|depende|depends|duplicado|duplicate|repetido|repeated|reintentar|retry|missing|required|obligatorio|bad request|400|500/i;
+  let aiMarkedSuccess = false;
+  let hasCriticalError = false;
+  let resultsSaved = false;
+  let isFinished = false;
+  let stepCount = 0;
+  let guideStepCount = 0;
+  let stepsDataBackup = [];
+  const maxSteps = 30;
+  let lastSeenSuccessToast = "";
+  const saveMissionResults = () => {
+    if (resultsSaved)
+      return;
+    resultsSaved = true;
+    if (!fs2.existsSync(contextDir))
+      fs2.mkdirSync(contextDir, { recursive: true });
+    const finalSuccess = aiMarkedSuccess && !hasCriticalError;
+    try {
+      const memoryFile = path2.join(contextDir, "memoria-agente.json");
+      let memories = [];
+      if (fs2.existsSync(memoryFile)) {
+        const content = fs2.readFileSync(memoryFile, "utf8").trim();
+        if (content) {
+          try {
+            memories = JSON.parse(content);
+          } catch (e) {
+            console.warn("\u26A0\uFE0F Memoria corrupta, reiniciando...");
+            memories = [];
+          }
+        }
+      }
+      const missionData = {
+        prompt,
+        steps: history,
+        steps_data: stepsData,
+        success: finalSuccess,
+        error: hasCriticalError,
+        timestamp: Date.now()
+      };
+      memories.push(missionData);
+      fs2.writeFileSync(memoryFile, JSON.stringify(memories, null, 2));
+      console.log(`>>ARCALITY_STATUS>> \u{1F9E0} Memoria guardada: ${stepsData.length} pasos nuevos`);
+    } catch (err) {
+      console.error("\u274C Fall\xF3 al guardar memoria:", err);
+    }
+    try {
+      const logPath = path2.join(contextDir, `agent-log-${Date.now()}.json`);
+      fs2.writeFileSync(logPath, JSON.stringify({ prompt, history, steps: stepCount, success: finalSuccess, error: hasCriticalError }, null, 2));
+    } catch (err) {
+    }
+  };
+  let collectiveMemoryPersisted = false;
+  const persistCollectiveMemory = async () => {
+    if (collectiveMemoryPersisted)
+      return;
+    collectiveMemoryPersisted = true;
+    const pid = process.env.ARCALITY_PROJECT_ID || "";
+    const apiUrl = process.env.ARCALITY_API_URL || "";
+    const apiKey = process.env.ARCALITY_API_KEY || "";
+    if (!pid || !apiUrl || !apiKey) {
+      console.warn(`[CollectiveMemory] \u26A0\uFE0F Vars faltantes \u2014 project_id='${pid}' api_url='${apiUrl}' api_key='${apiKey ? "OK" : "MISSING"}'`);
+      return;
+    }
+    console.log(`\u{1F9E0} [COLLECTIVE MEMORY] Persistiendo conocimiento (project: ${pid})...`);
+    try {
+      const stepsNarrative = stepsData.map((s) => `${s.action_data?.action || "action"} "${s.componentName}" en ${s.url}`).join(" \u2192 ").substring(0, 500);
+      const knowledgeId = await pushKnowledge({
+        doc_type: "PROCESS",
+        title: `Flujo exitoso: ${prompt.substring(0, 100)}`,
+        content: stepsNarrative || prompt.substring(0, 500)
+      });
+      if (knowledgeId)
+        console.log(`\u{1F9E0} [COLLECTIVE MEMORY] \u2705 Knowledge guardado: ${knowledgeId}`);
+      else
+        console.warn(`[CollectiveMemory] \u26A0\uFE0F pushKnowledge retorn\xF3 null (revisar HTTP status arriba)`);
+      const uniqueUrls = [...new Set(stepsData.map((s) => s.url).filter(Boolean))];
+      if (uniqueUrls.length > 1) {
+        const ruleId = await pushRule({
+          rule_type: "NAVIGATION",
+          title: `Flujo de navegaci\xF3n: ${prompt.substring(0, 80)}`,
+          description: `Agente naveg\xF3 ${uniqueUrls.length} p\xE1ginas: ${uniqueUrls.join(" \u2192 ").substring(0, 400)}`,
+          severity: "suggestion"
+        });
+        if (ruleId)
+          console.log(`\u{1F9E0} [COLLECTIVE MEMORY] \u2705 Regla NAVIGATION guardada: ${ruleId}`);
+      }
+      const submitStep = stepsData.find(
+        (s) => s.action_data?.action === "click" && (s.componentName?.toLowerCase().includes("guardar") || s.componentName?.toLowerCase().includes("save") || s.componentName?.toLowerCase().includes("crear") || s.componentName?.toLowerCase().includes("registrar"))
+      );
+      if (submitStep) {
+        const ruleId2 = await pushRule({
+          rule_type: "UI_UX",
+          title: `Patr\xF3n de guardado: ${prompt.substring(0, 60)}`,
+          description: `Flujo exitoso incluy\xF3 guardado/creaci\xF3n. Pasos: ${stepsNarrative.substring(0, 400)}`,
+          severity: "important"
+        });
+        if (ruleId2)
+          console.log(`\u{1F9E0} [COLLECTIVE MEMORY] \u2705 Regla UI_UX guardada: ${ruleId2}`);
+      }
+    } catch (err) {
+      console.warn(`[CollectiveMemory] \u274C Error inesperado en persistCollectiveMemory: ${err?.message}`);
+    }
+  };
+  console.log(`
+\u{1F916} [AGENTE] Iniciando misi\xF3n: "${prompt}"`);
+  const base = process.env.BASE_URL || "";
+  const target = process.env.TARGET_PATH || "/";
+  if (process.env.LOGIN_USER && process.env.LOGIN_PASSWORD) {
+    console.log(">>ARCALITY_STATUS>> \u{1F511} Realizando login autom\xE1tico...");
+    const loginUrl = base + "/login";
+    if (!loginUrl.startsWith("http"))
+      throw new Error(`URL Inv\xE1lida: "${loginUrl}". Aseg\xFArate de configurar la Base URL con http://`);
+    await page.goto(loginUrl);
+    try {
+      const userInp = page.locator('input[type="email"], input[name="email"], input[name="username"], [placeholder*="usuario" i], [placeholder*="correo" i], [placeholder*="email" i]').first();
+      await userInp.waitFor({ state: "visible", timeout: 1e4 });
+      const passInp = page.locator('input[type="password"], input[name="password"], [placeholder*="contrase\xF1a" i]').first();
+      const subBtn = page.locator('button[type="submit"], button:has-text("Login"), button:has-text("Entrar"), [role="button"]:has-text("Entrar")').first();
+      await userInp.click();
+      await userInp.fill(process.env.LOGIN_USER || "");
+      await passInp.click();
+      await passInp.fill(process.env.LOGIN_PASSWORD || "");
+      await page.waitForTimeout(500);
+      await subBtn.click();
+      await page.waitForURL((u) => !u.href.includes("/login"), { timeout: 15e3 }).catch(() => {
+      });
+      await page.waitForLoadState("networkidle").catch(() => {
+      });
+    } catch (e) {
+      console.warn(`    \u26A0\uFE0F Login autom\xE1tico omitido o ya autenticado.`);
+    }
+    if (target !== "/" && !page.url().includes(target)) {
+      const tgtUrl = target.startsWith("http") ? target : base + target;
+      if (!tgtUrl.startsWith("http"))
+        throw new Error(`URL Inv\xE1lida: "${tgtUrl}"`);
+      await page.goto(tgtUrl).catch(() => {
+      });
+    }
+  } else {
+    const tgtUrl = target.startsWith("http") ? target : base + target;
+    if (!tgtUrl.startsWith("http"))
+      throw new Error(`URL Inv\xE1lida: "${tgtUrl}". Por favor proporciona una URL v\xE1lida incluyendo http:// o https://`);
+    await page.goto(tgtUrl);
+  }
+  await page.waitForLoadState("networkidle");
+  page.on("download", async (download) => {
+    aiMarkedSuccess = true;
+    isFinished = true;
+    saveMissionResults();
+  });
+  const maxTotalIterations = maxSteps + 50;
+  let totalIterations = 0;
+  while (!isFinished && stepCount < maxSteps) {
+    totalIterations++;
+    if (totalIterations > maxTotalIterations) {
+      console.error(`>>ARCALITY_STATUS>> \u{1F6D1} Safety limit: ${totalIterations} iteraciones totales alcanzadas. Abortando.`);
+      hasCriticalError = true;
+      break;
+    }
+    let containsError = false;
+    await page.waitForTimeout(1e3);
+    const currentUrl = page.url();
+    const historyStr = history.join(" ").toLowerCase();
+    const hadSubmitAction = historyStr.includes("guardar") || historyStr.includes("save") || historyStr.includes("registrar");
+    const isMultiStep = prompt.toLowerCase().match(/después|luego|posteriormente|pestaña|tabla|doble clic|arrastra|paso|sección|modal|etapa/i);
+    const allowRepeatedNames = prompt.toLowerCase().match(/modal|varias|distintos|diferentes|repetir|guardar dos veces/i) || isMultiStep;
+    if (stepCount > 4 && hadSubmitAction && !isMultiStep) {
+      const isNowOnList = !currentUrl.includes("/new") && !currentUrl.includes("/create") && !currentUrl.includes("/edit") && !currentUrl.includes("/details") && !currentUrl.includes("/alta");
+      const wasInForm = historyStr.includes("nueva") || historyStr.includes("crear") || historyStr.includes("alta") || historyStr.includes("/new") || historyStr.includes("/create");
+      if (wasInForm && isNowOnList) {
+        const feedbackEls = await page.locator('.toast, .alert, [role="status"], [role="alert"], .snackbar, .notification, .success-message, .mat-snack-bar-container').all();
+        let foundSuccessToast = false;
+        for (const el of feedbackEls) {
+          if (await el.isVisible().catch(() => false)) {
+            const txt = await el.innerText().catch(() => "");
+            if (successKeywords.test(txt.toLowerCase())) {
+              foundSuccessToast = true;
+              console.log(`>>ARCALITY_STATUS>> \u2728 Auto-Success: Toast de \xE9xito detectado: "${txt.substring(0, 60)}"`);
+              break;
+            }
+          }
+        }
+        if (foundSuccessToast) {
+          console.log(`>>ARCALITY_STATUS>> \u2728 Auto-Success: Regreso a lista Y mensaje de \xE9xito detectado.`);
+          aiMarkedSuccess = true;
+          isFinished = true;
+          saveMissionResults();
+          break;
+        }
+      }
+    }
+    if (stepCount === 1) {
+      const initialToasts = await page.locator('.toast, .alert, [role="status"], [role="alert"]').all();
+      for (const t of initialToasts) {
+        if (await t.isVisible().catch(() => false)) {
+          lastSeenSuccessToast = await t.innerText().catch(() => "");
+          if (lastSeenSuccessToast)
+            console.log(`>>ARCALITY_STATUS>> \u{1F4A1} Nota: Ignorando mensaje preexistente: "${lastSeenSuccessToast.substring(0, 30)}..."`);
+        }
+      }
+    }
+    const rawBody = await page.innerText("body").catch(() => "");
+    const bodyTxt = rawBody.toLowerCase();
+    const hasVisibleError = failureKeywords.test(bodyTxt);
+    let response = null;
+    if (!hasVisibleError) {
+      response = await agent.getActionFromGuia(prompt, stepsData.length);
+    } else {
+      console.log(`>>ARCALITY_STATUS>> \u26A0\uFE0F Error detectado en pantalla. Saltando Gu\xEDa para priorizar correcci\xF3n.`);
+      if (stepsData.length > 0) {
+        stepsDataBackup = [...stepsData];
+        stepsData.length = 0;
+      }
+    }
+    if (response) {
+      const guideActionDesc = response.actions?.[0] ? `${response.actions[0].action} en "${response.actions[0].description || ""}"`.toLowerCase() : "";
+      const recentHistory = history.slice(-4).map((h) => h.toLowerCase());
+      const isGuideRepeating = guideActionDesc && recentHistory.some((h) => h.includes(guideActionDesc.substring(0, 30)));
+      if (isGuideRepeating) {
+        console.log(`>>ARCALITY_STATUS>> \u26A0\uFE0F Gu\xEDa invalidada: la acci\xF3n "${guideActionDesc.substring(0, 50)}" ya fue intentada. Delegando a IA.`);
+        response = null;
+      } else {
+        guideStepCount++;
+        console.log(`>>ARCALITY_STATUS>> \u2728 Gu\xEDa de \xE9xito: Paso validado (Gu\xEDa #${guideStepCount}, NO consume turno IA)`);
+      }
+    }
+    if (!response) {
+      stepCount++;
+      console.log(`>>ARCALITY_STATUS>> \u23F3 Turno IA ${stepCount} de ${maxSteps} (Gu\xEDa us\xF3 ${guideStepCount} turnos gratis)...`);
+      response = await agent.askIA(prompt, history, stepCount);
+    }
+    console.log(`\u{1F9E0} Pensamiento: ${response.thought}`);
+    if (!response.finish && history.length >= 6) {
+      const lastSixActions = history.slice(-6);
+      const clickActions = lastSixActions.filter((h) => h.includes("click en"));
+      const fillActions = lastSixActions.filter((h) => h.includes("fill en"));
+      const uniqueClicks = new Set(clickActions);
+      const uniqueFills = new Set(fillActions);
+      const isClickLoop = clickActions.length >= 4 && uniqueClicks.size <= 2;
+      const isFillLoop = fillActions.length >= 4 && uniqueFills.size <= 2;
+      if (isClickLoop || isFillLoop) {
+        const loopType = isClickLoop ? "click" : "fill";
+        const uniqueTargets = isClickLoop ? uniqueClicks : uniqueFills;
+        console.warn(`
+\u26A0\uFE0F [LOOP DETECTOR] Patr\xF3n repetitivo de ${loopType} detectado:`);
+        console.warn(`   \xDAltimas acciones: ${lastSixActions.join(" \u2192 ")}`);
+        console.warn(`   El agente est\xE1 atrapado. Forzando terminaci\xF3n con sugerencia.`);
+        response.thought = `\u{1F6D1} ERROR: Me he quedado atrapado en un bucle repetitivo intentando interactuar con: ${Array.from(uniqueTargets).join(", ")}. No puedo continuar la misi\xF3n de forma aut\xF3noma.
+
+\u{1F4A1} REGLA DE QA: He detectado que mi acci\xF3n de ${loopType} no est\xE1 cambiando el estado de la p\xE1gina como esperaba. Esto podr\xEDa ser un bug de la aplicaci\xF3n o una limitaci\xF3n de mi percepci\xF3n actual.`;
+        response.finish = true;
+        response.actions = [];
+        aiMarkedSuccess = false;
+        hasCriticalError = true;
+      }
+    }
+    if (response.actions && response.actions.length > 0) {
+      for (const step of response.actions) {
+        console.log(`>>ARCALITY_STATUS>> \u{1F3AF} Acci\xF3n: ${step.action} en "${step.description || step.selector}"`);
+        try {
+          const frame = step.frameIdx !== void 0 && page.frames()[step.frameIdx] ? page.frames()[step.frameIdx] : page;
+          const loc = step.selector ? frame.locator(step.selector).first() : null;
+          const urlBeforeAction = page.url();
+          if ((step.action === "click" || step.action === "double_click") && loc) {
+            const desc = (step.description || "").toLowerCase();
+            const isMenuTrigger = desc.includes("more_vert") || desc.includes("menu") || desc.includes("icono :") || desc.includes("dots") || desc.includes("opciones");
+            const isSubmitAction = desc.includes("guardar") || desc.includes("save") || desc.includes("crear") || desc.includes("registrar") || desc.includes("enviar") || desc.includes("aceptar") || desc.includes("confirmar") || desc.includes("update");
+            if (isSubmitAction) {
+              const rawBodyText = await page.innerText("body").catch(() => "");
+              const textLower = rawBodyText.toLowerCase();
+              const isCriticalFailure = textLower.includes("error") || textLower.includes("fall\xF3") || textLower.includes("no se puede") || textLower.includes("ya existe") || textLower.includes("existe") || textLower.includes("inv\xE1lido") || textLower.includes("incorrecto") || textLower.includes("ligado") || textLower.includes("depende") || textLower.includes("duplicado") || textLower.includes("repetido") || textLower.includes("no encontrado") || textLower.includes("no existe") || textLower.includes("obligatorio") || textLower.includes("required");
+              const isCriticalSuccess = textLower.includes("exitosamente") || textLower.includes("guardado") || textLower.includes("creado") || textLower.includes("success") || textLower.includes("correctamente") || textLower.includes("misi\xF3n cumplida");
+              const isCriticalFeedback = isCriticalFailure || isCriticalSuccess;
+              if (!isCriticalFeedback && step.type && ["span", "p", "label", "i", "svg", "img"].includes(step.type)) {
+                const elementText = await loc.innerText().catch(() => "");
+                const elementTextLower = elementText.toLowerCase();
+                if (failureKeywords.test(elementTextLower)) {
+                  console.log(`>>ARCALITY_STATUS>> \u26A0\uFE0F Feedback de ERROR en elemento peque\xF1o: "${elementTextLower.substring(0, 50)}..."`);
+                  aiMarkedSuccess = false;
+                  hasCriticalError = true;
+                  isFinished = true;
+                  saveMissionResults();
+                  break;
+                } else {
+                  const isSuccessMatch = successKeywords.test(elementTextLower);
+                  if (isSuccessMatch) {
+                    console.log(`>>ARCALITY_STATUS>> \u2728 \xC9xito visual en elemento peque\xF1o: "${elementTextLower.substring(0, 50)}..."`);
+                    aiMarkedSuccess = true;
+                    isFinished = true;
+                    hasCriticalError = false;
+                    saveMissionResults();
+                    break;
+                  }
+                }
+              }
+              const previousSubmit = history.find(
+                (h) => h.toLowerCase().includes("click") && (h.toLowerCase().includes("guardar") || h.toLowerCase().includes("save") || h.toLowerCase().includes("crear") || h.toLowerCase().includes("registrar"))
+              );
+              if (previousSubmit && !allowRepeatedNames) {
+                console.log(`>>ARCALITY_STATUS>> \u{1F6D1} Advertencia: Click persistente en bot\xF3n de acci\xF3n.`);
+                history.push(`Turno ${stepCount}: Intentaste hacer click en "${desc}" nuevamente, pero la p\xE1gina sigue mostrando el mismo estado. \xBFHay alg\xFAn error visible que debas corregir antes?`);
+                await page.waitForTimeout(1e3);
+              }
+            }
+            const lastAction = history[history.length - 1];
+            if (lastAction && lastAction.includes(`click en "${desc}"`)) {
+              const isDotsTrigger = desc.includes("dots") || desc.includes("vert") || desc.includes("menu") || desc.includes("opciones");
+              const sameActionCount = history.filter((h) => h.includes(`click en "${desc}"`)).length;
+              const toleranceLimit = allowRepeatedNames ? 3 : 1;
+              if (isDotsTrigger && sameActionCount < 2) {
+                console.log(`    \u26A0\uFE0F Re-intentando click en men\xFA "${desc}"...`);
+              } else if (allowRepeatedNames && sameActionCount < toleranceLimit) {
+                console.log(`    \u26A0\uFE0F Click repetido permitido por contexto de misi\xF3n en "${desc}"...`);
+              } else {
+                const bodyText = await page.innerText("body").catch(() => "");
+                if (bodyText.match(/ligado|depende|no se puede/i)) {
+                  console.log(`
+\u2728 [ESTANCADO] El agente repite click pero el error ya es visible. Finalizando.`);
+                  isFinished = true;
+                  aiMarkedSuccess = true;
+                  break;
+                }
+                console.log(`
+\u{1F6D1} [AUTO-STOP] Bloqueando click duplicado en "${desc}". Forzando re-evaluaci\xF3n.`);
+                history.push(`Turno ${stepCount}: Bloqueado click repetido en "${desc}" (Evitando bucle)`);
+                await page.waitForTimeout(1e3);
+                break;
+              }
+            }
+            if (isMenuTrigger && history.some((h) => h.includes(desc) && h.includes("click"))) {
+              console.log(`    \u26A0\uFE0F El disparador "${desc}" ya fue clicado. Esperando estabilidad extra...`);
+              await page.waitForTimeout(1500);
+            }
+            await loc.scrollIntoViewIfNeeded({ timeout: 5e3 }).catch(() => {
+            });
+            if (step.action === "double_click") {
+              await loc.dblclick({ timeout: 1e4, force: true });
+            } else {
+              if (desc.includes("toast") || desc.includes("close")) {
+                await loc.click({ timeout: 2e3, force: true }).catch(() => console.log("    \u26A0\uFE0F No se pudo cerrar toast, ignorando..."));
+              } else {
+                await loc.click({ timeout: 1e4, force: true });
+              }
+            }
+            if (isMenuTrigger) {
+              console.log("    \u23F3 Abriendo men\xFA, esperando 1.5s para renderizado...");
+              await page.waitForTimeout(1500);
+            }
+            const actsLikeSubmit = desc.includes("guardar") || desc.includes("save") || desc.includes("crear") || desc.includes("registrar");
+            if (actsLikeSubmit) {
+              console.log("    \u23F3 Esperando transici\xF3n post-guardado...");
+              try {
+                await page.waitForLoadState("networkidle", { timeout: 8e3 });
+              } catch (e) {
+                console.log("    \u26A0\uFE0F Timeout esperando red, continuando...");
+              }
+              const postSubmitFeedback = await page.locator('.toast, .alert, [role="status"], [role="alert"], .snackbar, .notification, .success-message, .mat-snack-bar-container').all();
+              let foundSuccessPost = false;
+              for (const fb of postSubmitFeedback) {
+                if (await fb.isVisible().catch(() => false)) {
+                  const fbText = await fb.innerText().catch(() => "");
+                  const postSuccessKw = /exitosamente|creado correctamente|guardado correctamente|operación exitosa|registro guardado|saved successfully|created successfully/i;
+                  if (postSuccessKw.test(fbText)) {
+                    console.log(`>>ARCALITY_STATUS>> \u2728 \xC9xito visual detectado en toast: "${fbText.substring(0, 60)}"`);
+                    aiMarkedSuccess = true;
+                    isFinished = true;
+                    saveMissionResults();
+                    foundSuccessPost = true;
+                    break;
+                  } else if (failureKeywords.test(fbText.toLowerCase())) {
+                    console.log(`>>ARCALITY_STATUS>> \u{1F4DA} [BUSINESS RULE] Error de validaci\xF3n capturado: "${fbText.substring(0, 80)}"`);
+                    captureValidationRule(fbText.trim(), `Acci\xF3n: click en "${desc}" en ${page.url()}`);
+                  }
+                }
+              }
+              if (foundSuccessPost)
+                break;
+              const currentUrl2 = page.url();
+              const isBackOnList = urlBeforeAction !== currentUrl2 && !currentUrl2.includes("/new") && !currentUrl2.includes("/edit") && !currentUrl2.includes("/create");
+              if (isBackOnList) {
+                console.log(`
+\u2728 [AUTO-SUCCESS] Navegaci\xF3n detectada tras guardar (${urlBeforeAction} -> ${currentUrl2}). Confirmando...`);
+                await page.waitForTimeout(2e3);
+                const postNavAlerts = await page.locator(
+                  '.toast, .alert, [role="status"], [role="alert"], .snackbar, .notification, .error-message, .mat-snack-bar-container'
+                ).all();
+                let hasPostNavError = false;
+                for (const alertEl of postNavAlerts) {
+                  if (await alertEl.isVisible().catch(() => false)) {
+                    const alertTxt = await alertEl.innerText().catch(() => "");
+                    if (failureKeywords.test(alertTxt.toLowerCase())) {
+                      hasPostNavError = true;
+                      console.log(`>>ARCALITY_STATUS>> \u26A0\uFE0F Error en alerta post-guardado: "${alertTxt.substring(0, 60)}"`);
+                      break;
+                    }
+                  }
+                }
+                if (!hasPostNavError) {
+                  aiMarkedSuccess = true;
+                  isFinished = true;
+                  await persistCollectiveMemory();
+                  saveMissionResults();
+                  break;
+                } else {
+                  console.log(`>>ARCALITY_STATUS>> \u26A0\uFE0F Se detect\xF3 navegaci\xF3n pero hay un ERROR en alerta/toast visible.`);
+                }
+              }
+            } else if (desc.includes("siguiente") || desc.includes("next")) {
+              await page.waitForTimeout(1e3);
+            } else {
+              await page.waitForTimeout(500);
+            }
+          } else if (step.action === "fill" && loc && step.value) {
+            const isFile = await loc.evaluate((el) => el.tagName === "INPUT" && el.type === "file").catch(() => false);
+            if (isFile) {
+              console.log(`    \u{1F4C2} Detectado input de archivo. Subiendo: "${step.value}"`);
+              const filePath = step.value.replace(/^"|"$/g, "").trim();
+              await loc.setInputFiles(filePath);
+            } else {
+              await loc.click({ timeout: 5e3 }).catch(() => {
+              });
+              await loc.fill(step.value, { timeout: 1e4, force: true });
+              await loc.press("Tab").catch(() => {
+              });
+            }
+            await page.waitForTimeout(500);
+          } else if (step.action === "wait") {
+            await page.waitForTimeout(3e3);
+          }
+          const descForHistory = (step.description || step.selector || "").substring(0, 80);
+          const valStr = step.value ? ` con valor "${step.value}"` : "";
+          history.push(`Turno ${stepCount}: ${step.action} en "${descForHistory}"${valStr}`);
+          urlHistory.push(page.url());
+          const compName = (step.description || "").substring(0, 80);
+          if (compName.length < 100) {
+            stepsData.push({
+              url: urlBeforeAction,
+              // USAR URL CAPTURADA ANTES
+              url_normalized: urlBeforeAction.replace(/\/[a-z]{2}-[A-Z]{2}\//g, "/{locale}/").replace(/\/[a-z]{2}\//g, "/{lang}/"),
+              componentName: compName,
+              componentType: step.type,
+              action_data: { action: step.action, value: step.value },
+              finish: response.finish
+            });
+          }
+        } catch (e) {
+          console.warn(`  \u26A0\uFE0F Acci\xF3n fallida: ${e.message}`);
+          history.push(`Turno ${stepCount}: \u274C FALL\xD3 ${step.action} en "${step.description}" - Error: ${e.message}. REGLA MANDATORIA: Debes investigar la causa usando 'inspect_element_details' o 'capture_console_errors' antes de cualquier otro paso.`);
+          containsError = true;
+          const errorCount = history.filter((h) => h.includes("FALL\xD3") && h.includes(step.description)).length;
+          if (errorCount >= 2) {
+            console.error(`>>ARCALITY_STATUS>> \u{1F6D1} Demasiados fallos t\xE9cnicos en este elemento "${step.description}". Abortando misi\xF3n.`);
+            hasCriticalError = true;
+            isFinished = true;
+            break;
+          }
+        }
+      }
+    }
+    if (response.finish) {
+      if (!containsError) {
+        console.log(">>ARCALITY_STATUS>> \u2705 El agente solicit\xF3 finalizar misi\xF3n.");
+        isFinished = true;
+        if (!response.actions || response.actions.length === 0) {
+          stepsData.push({
+            url: page.url(),
+            url_normalized: page.url().replace(/\/[a-z]{2}-[A-Z]{2}\//g, "/{locale}/").replace(/\/[a-z]{2}\//g, "/{lang}/"),
+            componentName: "MISSION_END",
+            componentType: "FINISH_SIGNAL",
+            action_data: { action: "finish" },
+            finish: true
+          });
+        } else {
+          if (stepsData.length > 0) {
+            stepsData[stepsData.length - 1].finish = true;
+          }
+        }
+        const finishFeedbackEls = await page.locator('.toast, .alert, [role="status"], [role="alert"], .snackbar, .notification, .mat-snack-bar-container, .error-message').all();
+        let hasVisibleFailure = false;
+        for (const el of finishFeedbackEls) {
+          if (await el.isVisible().catch(() => false)) {
+            const txt = await el.innerText().catch(() => "");
+            if (failureKeywords.test(txt.toLowerCase())) {
+              hasVisibleFailure = true;
+              console.log(`>>ARCALITY_STATUS>> \u26A0\uFE0F Error detectado en toast/alerta: "${txt.substring(0, 60)}"`);
+              break;
+            }
+          }
+        }
+        if (!hasVisibleFailure) {
+          aiMarkedSuccess = true;
+          hasCriticalError = false;
+          saveMissionResults();
+          if (stepsData.length === 0 && stepsDataBackup.length > 0) {
+            stepsData.push(...stepsDataBackup);
+            console.log(`>>ARCALITY_STATUS>> \u{1F504} Gu\xEDa de \xC9xito restaurada (${stepsDataBackup.length} pasos recuperados).`);
+          }
+          await persistCollectiveMemory();
+        } else {
+          console.log(`>>ARCALITY_STATUS>> \u26A0\uFE0F El agente intent\xF3 finalizar pero se detect\xF3 un ERROR en alert/toast.`);
+          aiMarkedSuccess = false;
+          isFinished = false;
+          history.push(`Turno ${stepCount}: El agente intent\xF3 finalizar pero el sistema detect\xF3 un error en un toast/alerta visible.`);
+        }
+      } else {
+        console.warn(">>ARCALITY_STATUS>> \u26A0\uFE0F El agente intent\xF3 finalizar pero hubo fallos en el turno. Continuando para investigaci\xF3n...");
+        isFinished = false;
+      }
+    }
+    const feedbackSelector = '.toast, .alert, .message, div[role="status"], .error-message, [class*="alert"], [class*="toast"], .status-message';
+    const feedbackLocator = page.locator(feedbackSelector);
+    if (stepCount > 2) {
+      const allFeedback = await feedbackLocator.all();
+      for (const fb of allFeedback) {
+        if (await fb.isVisible()) {
+          const rawTxt = await fb.innerText();
+          const txt = rawTxt.toLowerCase();
+          if (failureKeywords.test(txt)) {
+            console.log(`>>ARCALITY_STATUS>> \u26A0\uFE0F Feedback de ERROR detectado: "${rawTxt.substring(0, 60)}..."`);
+            aiMarkedSuccess = false;
+            captureValidationRule(rawTxt.trim(), `URL: ${page.url()}`);
+            if (stepsData.length > 0) {
+              console.log(`>>ARCALITY_STATUS>> \u{1F504} Invalidando Gu\xEDa de \xC9xito por feedback de error.`);
+              stepsDataBackup = [...stepsData];
+              stepsData.length = 0;
+            }
+          } else if (successKeywords.test(txt)) {
+            if (txt !== lastSeenSuccessToast) {
+              console.log(`>>ARCALITY_STATUS>> \u2728 \xC9xito visual detectado: "${txt.substring(0, 50)}..."`);
+              aiMarkedSuccess = true;
+              isFinished = true;
+              hasCriticalError = false;
+              await persistCollectiveMemory();
+              saveMissionResults();
+              break;
+            } else {
+              console.log(`>>ARCALITY_STATUS>> \u{1F4A1} Mensaje de \xE9xito persistente ignorado.`);
+            }
+          }
+        }
+      }
+    }
+  }
+  if (aiMarkedSuccess) {
+    hasCriticalError = false;
+    await persistCollectiveMemory();
+    console.log("\u270D\uFE0F [HUMANIZANDO] Generando resumen de \xE9xito para el reporte...");
+    const summary = await agent.humanizeMissionResult(prompt, history);
+    if (summary) {
+      await testInfo.attach("success_summary", {
+        body: Buffer.from(summary, "utf-8"),
+        contentType: "text/plain"
+      });
+    }
+    console.log("\u{1F916} [SMART-YAML] Generating mission card...");
+    const smartYaml = await agent.summarizeMissionToYaml(prompt, history, target);
+    if (smartYaml) {
+      const yamlPath = path2.join(contextDir, "last-mission-smart.yaml");
+      fs2.writeFileSync(yamlPath, smartYaml);
+      console.log(`>>ARCALITY_STATUS>> \u{1F4DD} Smart Mission Card generated.`);
+      await testInfo.attach("smart_mission_card", {
+        body: Buffer.from(smartYaml, "utf-8"),
+        contentType: "text/yaml"
+      });
+    }
+  }
+  try {
+    const scanner = new SecurityScanner(page);
+    const securityReport = await scanner.runAllScans();
+    if (securityReport && securityReport.length > 0) {
+      await testInfo.attach("security_report", {
+        body: JSON.stringify(securityReport, null, 2),
+        contentType: "application/json"
+      });
+      console.log(`>>ARCALITY_STATUS>> \u{1F6E1}\uFE0F Escaneo de seguridad completado. ${securityReport.length} problemas encontrados.`);
+      try {
+        for (const v of securityReport) {
+          const sev = v.severity || "Info";
+          const mappedSeverity = sev === "Critical" ? "critical" : sev === "High" ? "important" : "suggestion";
+          await pushRule({
+            rule_type: "SECURITY",
+            title: `Security: ${v.category} (${v.severity})`,
+            description: `${v.description}
+Evidence: ${JSON.stringify(v.evidence).substring(0, 400)}`,
+            severity: mappedSeverity
+          }).catch(() => {
+          });
+        }
+      } catch (e) {
+        console.warn(">>ARCALITY_STATUS>> \u26A0\uFE0F Fall\xF3 persistir hallazgos de seguridad en Memoria Colectiva.");
+      }
+    } else {
+      console.log(`>>ARCALITY_STATUS>> \u{1F6E1}\uFE0F Escaneo de seguridad completado. No se encontraron problemas.`);
+    }
+  } catch (e) {
+    console.error("Error in Security Scan:", e.message);
+  }
+  saveMissionResults();
+  if (!aiMarkedSuccess) {
+    throw new Error("Misi\xF3n no completada o finalizada con errores.");
+  }
+});