@arcadialdev/arcality 2.6.0 → 2.6.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arcadialdev/arcality",
-  "version": "2.6.0",
+  "version": "2.6.2",
   "description": "El primer ingeniero QA Autónomo integrado al CI/CD. Creado por Arcadial.",
   "main": "index.js",
   "scripts": {

package/scripts/gen-and-run.mjs

@@ -740,19 +740,51 @@ async function main() {
 
             const finalProjectId = process.env.ARCALITY_PROJECT_ID || selectedProjectId;
 
-            // ── SIGINT Handler: Cancelación manual (Ctrl+C / ESC) ──
-            // Se registra AQUÍ, justo antes del spawn, para que solo aplique durante la ejecución.
-            // Al cancelar: mata el proceso hijo, guarda estado "canceled", llama endMission y genera reporte.
-            let activeChildProcess = null;  // Referencia al proceso hijo de Playwright
+            // ── Cancelación Manual (Ctrl+C) — Estrategia bulletproof ──
+            // El problema: @clack/prompts registra su propio SIGINT handler cada tick del spinner,
+            // que llama a process.exit(0) directamente. removeAllListeners() no es suficiente porque
+            // Clack lo re-registra en cada frame de animación.
+            //
+            // La solución: interceptar process.exit() antes de que Clack lo llame,
+            // y usar prependListener para que NUESTRO handler siempre se ejecute primero.
+
+            let activeChildProcess = null;
             let userCanceledMission = false;
-            const cancelHandler = async () => {
-                if (userCanceledMission) return; // Evitar doble disparo
+            let sigintCount = 0;
+            let _missionActive = true;  // Mientras true, bloqueamos el process.exit de Clack
+
+            // Guardar el process.exit original y reemplazarlo temporalmente
+            const _origProcessExit = process.exit.bind(process);
+            process.exit = (code) => {
+                if (_missionActive) {
+                    // Clack (u otra lib) está intentando matar el proceso — lo bloqueamos.
+                    // Nuestro cancelHandler ya habrá sido invocado vía prependListener.
+                    // El proceso se cerrará naturalmente cuando el child process termine.
+                    return;
+                }
+                _origProcessExit(code);
+            };
+
+            const cancelHandler = () => {
+                sigintCount++;
+                if (sigintCount > 3) {
+                    console.log(chalk.red('\n🛑 Forzando salida inmediata...'));
+                    _missionActive = false;
+                    _origProcessExit(1);
+                    return;
+                }
+
+                if (userCanceledMission) {
+                    console.log(chalk.yellow('\n⏳ Cancelación en progreso, esperando reporte... (Ctrl+C x4 para forzar cierre)'));
+                    return;
+                }
                 userCanceledMission = true;
 
                 console.log(chalk.yellow('\n\n⚠️  [ARCALITY] Misión cancelada por el usuario.'));
-                if (!process.argv.includes('--debug')) s.stop(chalk.yellow('⚠️  Misión cancelada por el usuario.'));
+                if (!process.argv.includes('--debug')) {
+                    try { s.stop(chalk.yellow('⚠️  Misión cancelada.')); } catch { /* ignore */ }
+                }
 
-                // 1. Escribir un agent-log de cancelación para que el reporte lo refleje
                 try {
                     const ctxDir = process.env.CONTEXT_DIR;
                     if (ctxDir && fs.existsSync(ctxDir)) {
@@ -770,28 +802,15 @@ async function main() {
                     }
                 } catch { /* silencioso */ }
 
-                // 2. Registraremos la misión como 'canceled' en el bloque finally
-                console.log(chalk.gray('   >> Registrando misión como "cancelada"...'));
-
-                // 3. Matar el proceso hijo de Playwright — hacerlo AL FINAL para dar tiempo
-                //    a que el agente-log y endMission terminen antes del kill.
-                //    NO llamar process.exit() aquí: el finally del try/catch principal
-                //    se encarga de generar el reporte visual y abrirlo en el browser.
-                if (activeChildProcess) {
-                    try {
-                        if (process.platform === 'win32') {
-                            spawn('taskkill', ['/pid', activeChildProcess.pid, '/f', '/t'], { stdio: 'ignore', windowsHide: true });
-                        } else {
-                            activeChildProcess.kill('SIGTERM');
-                        }
-                    } catch { /* silencioso */ }
-                }
-                // El bloque finally del try/catch de run() tomará el control
-                // a partir de aquí (el proceso hijo ya terminó → run() rechaza → catch → finally).
+                console.log(chalk.gray('   >> Esperando que Playwright cierre y genere el reporte...'));
+                // Playwright también recibe el SIGINT nativamente desde la terminal Windows
+                // y cerrará su proceso limpiamente, lo que resolverá la Promise del run() → finally
             };
 
-            process.once('SIGINT', cancelHandler);
-            process.once('SIGTERM', cancelHandler);
+            // prependListener asegura que nuestro handler se ejecuta ANTES que el de Clack
+            process.prependListener('SIGINT', cancelHandler);
+            process.prependListener('SIGTERM', cancelHandler);
+
 
             // Build env for the runner — merge arcality.config values.
             // ARCALITY_API_URL must be explicit — it comes from the library's internal config,
@@ -831,23 +850,55 @@ async function main() {
             const testFile = path.join(PROJECT_ROOT, 'tests', '_helpers', 'agentic-runner.spec.ts');
             const configFile = path.join(PROJECT_ROOT, 'playwright.config.js');
 
-            // Resolve playwright CLI relative to PROJECT_ROOT exactly as Node handles module resolution.
-            // This prevents the "did not expect test() to be called here" singleton duplication error.
+            // Resolve playwright CLI — CRITICAL: must use the same @playwright/test instance
+            // that the agentic-runner.bundle.spec.js was compiled against. If the user's project
+            // has its own @playwright/test, we must use THAT one to avoid the singleton conflict
+            // ("Playwright Test did not expect test() to be called here").
+            //
+            // Resolution order:
+            //   1. ORIGINAL_CWD (user's project) — preferred, avoids singleton mismatch
+            //   2. PROJECT_ROOT (arcality package) — fallback for clean installs
             let playwrightCli;
             try {
-                // Find the core @playwright/test that the local project uses
-                const testRunnerPath = require.resolve('@playwright/test', { paths: [PROJECT_ROOT] });
-                // Target the cli.js file strictly inside its parallel playwright dependency
+                const searchPaths = [ORIGINAL_CWD, PROJECT_ROOT];
+                let testRunnerPath = null;
+                let resolveError = null;
+
+                for (const searchPath of searchPaths) {
+                    try {
+                        testRunnerPath = require.resolve('@playwright/test', { paths: [searchPath] });
+                        break;
+                    } catch (e) {
+                        resolveError = e;
+                    }
+                }
+
+                if (!testRunnerPath) throw resolveError;
+
+                // Navigate from @playwright/test/index.js → playwright/cli.js (sibling package)
                 playwrightCli = path.join(testRunnerPath, '..', '..', '..', 'playwright', 'cli.js');
+
+                // Some versions nest it differently — try alternate location
                 if (!fs.existsSync(playwrightCli)) {
-                    throw new Error(`CLI not found exactly at: ${playwrightCli}`);
+                    const alt = path.join(testRunnerPath, '..', '..', 'playwright', 'cli.js');
+                    if (fs.existsSync(alt)) playwrightCli = alt;
+                    else throw new Error(`Playwright CLI not found. Tried:\n  ${playwrightCli}\n  ${alt}`);
+                }
+
+                if (process.argv.includes('--debug')) {
+                    console.log(chalk.gray(`[DEBUG] Using playwright CLI: ${playwrightCli}`));
                 }
             } catch (e) {
-                console.error(chalk.red('\n[FATAL] Playwright core not found! Make sure playwright is properly installed.'));
+                console.error(chalk.red('\n[FATAL] Playwright core not found. Make sure @playwright/test is installed.'));
                 console.error(chalk.red(e.message));
+                console.error(chalk.yellow('\nTip: Run `npm install @playwright/test` in your project directory.'));
+                _missionActive = false;
+                process.exit = _origProcessExit;
                 process.exit(1);
             }
 
+
+            const postProcessSigint = () => console.log(chalk.yellow('\n⏳ Finalizando tareas de reporte, por favor espera...'));
             let missionResult = null;
             let finalFailReason = null;
             let finalUsageData = undefined;
@@ -869,9 +920,10 @@ async function main() {
                     onSpawn: (child) => { activeChildProcess = child; }  // ← Capturar referencia para cancelHandler
                 });
 
-                // Eliminar handlers SIGINT ahora que el proceso terminó normalmente
-                process.off('SIGINT', cancelHandler);
-                process.off('SIGTERM', cancelHandler);
+                process.removeAllListeners('SIGINT');
+                process.removeAllListeners('SIGTERM');
+                process.on('SIGINT', postProcessSigint);
+                process.on('SIGTERM', postProcessSigint);
 
                 if (userCanceledMission) {
                     missionResult = 'canceled';
@@ -932,15 +984,10 @@ async function main() {
                     }
                 }
             } catch (e) {
-                // Eliminar handlers SIGINT en el path de error también
-                process.off('SIGINT', cancelHandler);
-                process.off('SIGTERM', cancelHandler);
-
+                // SIGINT ya fue manejado por cancelHandler — solo clasificamos el resultado
                 if (userCanceledMission) {
                     missionResult = 'canceled';
                     finalFailReason = 'user_canceled';
-                    // El cancelHandler ya registró la cancelación en el servidor.
-                    // Solo mostramos un mensaje y dejamos que el finally genere el reporte.
                     console.log(chalk.yellow('\n⚠️  Misión cancelada — generando reporte de evidencia...'));
                 } else {
                     missionResult = 'failed';
@@ -952,20 +999,34 @@ async function main() {
                     }
                 }
             } finally {
+                // Desactivar el bloqueo de process.exit y restaurar el original
+                _missionActive = false;
+                process.exit = _origProcessExit;
+                process.removeListener('SIGINT', cancelHandler);
+                process.removeListener('SIGTERM', cancelHandler);
+
                 if (userCanceledMission) {
                     missionResult = 'canceled';
                     finalFailReason = 'user_canceled';
                     await new Promise(r => setTimeout(r, 800));
                 }
 
+                process.on('SIGINT', postProcessSigint);
+                process.on('SIGTERM', postProcessSigint);
+
                 const sRep = spinner();
-                sRep.start('📊 Generating report...');
+                if (!process.argv.includes('--debug')) {
+                    sRep.start('📊 Generating report...');
+                } else {
+                    console.log('📊 Generating report...');
+                }
+
                 await run("node", [path.join(PROJECT_ROOT, "scripts/rebrand-report.mjs")]).catch(() => { });
 
                 const reportDir = process.env.REPORTS_DIR || 'tests-report';
                 const arcalityPath = path.resolve(reportDir, 'index.html');
 
-                sRep.stop(chalk.cyan('Report process initialized.'));
+                sRep.stop();
 
                 // Read final usage and failReason from agent-log
                 try {
@@ -990,14 +1051,20 @@ async function main() {
                     const { uploadEvidence } = await import('../src/EvidenceUploader.mjs');
 
                     const sasData = await getEvidenceSasToken(mission.mission_id, finalProjectId);
-                    console.log(`[DEBUG] sasData received:`, sasData);
+                    if (process.argv.includes('--debug')) console.log(`[DEBUG] sasData received:`, sasData);
                     
                     // Soporte para camelCase y snake_case debido al serializador JSON del backend
                     const actualSasUrl = sasData?.sasTokenUrl || sasData?.sasUrl || sasData?.sas_url;
                     const actualBasePath = sasData?.basePath || sasData?.base_path;
 
                     if (sasData && actualSasUrl && actualBasePath) {
-                        if (!process.argv.includes('--debug')) sRep.start('☁️  Uploading evidence to Azure...');
+                        if (!process.argv.includes('--debug')) {
+                            sRep.start('☁️  Uploading evidence to Azure...');
+                        }
+                        process.removeAllListeners('SIGINT');
+                        process.removeAllListeners('SIGTERM');
+                        process.on('SIGINT', postProcessSigint);
+                        process.on('SIGTERM', postProcessSigint);
                         
                         await uploadEvidence(reportDir, actualSasUrl, actualBasePath);
                         
@@ -1040,7 +1107,6 @@ async function main() {
                 }
 
                 await new Promise(resolve => setTimeout(resolve, 2000));
-                sRep.stop(chalk.cyan('Report process initialized.'));
 
                 // Ping project after report
                 await pingProject(
@@ -1061,6 +1127,10 @@ async function main() {
                 agentMode = false;
                 prompt = "";
                 firstRun = false;
+
+                // Limpiar handlers del post-proceso
+                process.removeListener('SIGINT', postProcessSigint);
+                process.removeListener('SIGTERM', postProcessSigint);
             }
         }
         firstRun = false;

package/src/KnowledgeService.ts

@@ -144,7 +144,7 @@ export class KnowledgeService {
                 if (data.status === 'skipped_duplicate_dom') {
                     // console.log(chalk.gray(`[Knowledge] Ingesta omitida (Duplicado).`));
                 } else {
-                    console.log(chalk.cyan(`[Knowledge] Ingesta exitosa (Project: ${payload.project_id})`));
+                    if (process.env.DEBUG) console.log(chalk.cyan(`[Knowledge] Ingesta exitosa (Project: ${payload.project_id})`));
                 }
             }
         } catch (e: any) {

package/src/services/collectiveMemoryService.ts

@@ -73,15 +73,15 @@ export async function pushRule(rule: {
         });
 
         if (!res.ok) {
-            console.warn(`[CollectiveMemory] pushRule HTTP ${res.status}: ${await res.text().catch(() => '')}`);
+            if (process.env.DEBUG) console.warn(`[CollectiveMemory] pushRule HTTP ${res.status}: ${await res.text().catch(() => '')}`);
             return null;
         }
 
         const data = await res.json();
-        console.log(`\x1b[32m[CollectiveMemory] ✅ Regla guardada: "${rule.title}"\x1b[0m`);
+        if (process.env.DEBUG) console.log(`\x1b[32m[CollectiveMemory] ✅ Regla guardada: "${rule.title}"\x1b[0m`);
         return data.id ?? null;
     } catch (err: any) {
-        console.warn(`[CollectiveMemory] pushRule error: ${err?.message}`);
+        if (process.env.DEBUG) console.warn(`[CollectiveMemory] pushRule error: ${err?.message}`);
         return null;
     }
 }
@@ -164,15 +164,15 @@ export async function pushKnowledge(knowledge: {
         });
 
         if (!res.ok) {
-            console.warn(`[CollectiveMemory] pushKnowledge HTTP ${res.status}: ${await res.text().catch(() => '')}`);
+            if (process.env.DEBUG) console.warn(`[CollectiveMemory] pushKnowledge HTTP ${res.status}: ${await res.text().catch(() => '')}`);
             return null;
         }
 
         const data = await res.json();
-        console.log(`\x1b[32m[CollectiveMemory] ✅ Conocimiento guardado: "${knowledge.title}"\x1b[0m`);
+        if (process.env.DEBUG) console.log(`\x1b[32m[CollectiveMemory] ✅ Conocimiento guardado: "${knowledge.title}"\x1b[0m`);
         return data.id ?? null;
     } catch (err: any) {
-        console.warn(`[CollectiveMemory] pushKnowledge error: ${err?.message}`);
+        if (process.env.DEBUG) console.warn(`[CollectiveMemory] pushKnowledge error: ${err?.message}`);
         return null;
     }
 }
@@ -228,7 +228,7 @@ export async function savePromptPattern(patternData: any): Promise<boolean> {
             mission_id: getMissionId(),
             ...patternData
         };
-        console.log(`[PatternSave] 📤 POST ${apiUrl} | org=${payload.organization_id} proj=${payload.project_id} mission=${payload.mission_id}`);
+        if (process.env.DEBUG) console.log(`[PatternSave] 📤 POST ${apiUrl} | org=${payload.organization_id} proj=${payload.project_id} mission=${payload.mission_id}`);
 
         const res = await fetch(apiUrl, {
             method: 'POST',
@@ -240,13 +240,13 @@ export async function savePromptPattern(patternData: any): Promise<boolean> {
         });
 
         if (!res.ok) {
-            console.warn(`[PatternSave] ⚠️ HTTP ${res.status} al guardar patrón en ${apiUrl}: ${await res.text().catch(() => '')}`);
+            if (process.env.DEBUG) console.warn(`[PatternSave] ⚠️ HTTP ${res.status} al guardar patrón en ${apiUrl}: ${await res.text().catch(() => '')}`);
         } else {
-            console.log(`[PatternSave] ✅ Patrón guardado exitosamente.`);
+            if (process.env.DEBUG) console.log(`[PatternSave] ✅ Patrón guardado exitosamente.`);
         }
         return res.ok;
     } catch (err: any) {
-        console.warn(`[PatternSave] ⚠️ Error guardando patrón: ${err?.message || 'unknown'}`);
+        if (process.env.DEBUG) console.warn(`[PatternSave] ⚠️ Error guardando patrón: ${err?.message || 'unknown'}`);
         return false;
     }
 }

package/src/services/securityScanner.ts

@@ -23,7 +23,7 @@ export class SecurityScanner {
    * @returns A promise that resolves to an array of found vulnerabilities.
    */
   async runAllScans(): Promise<SecurityFinding[]> {
-    console.log('[QA-SEC] Starting comprehensive security scan...');
+    if (process.env.DEBUG) console.log('[QA-SEC] Starting comprehensive security scan...');
     
     // Scan 1: Audit HTTP Security Headers
     const headerVulnerabilities = await audit_http_headers(this.page);
@@ -38,7 +38,7 @@ export class SecurityScanner {
 
     // More scans like auth bypass for known admin URLs could be added here.
 
-    console.log(`[QA-SEC] Comprehensive scan finished. Found ${this.report.length} potential vulnerabilities.`);
+    if (process.env.DEBUG) console.log(`[QA-SEC] Comprehensive scan finished. Found ${this.report.length} potential vulnerabilities.`);
     return this.getReport();
   }
 
@@ -55,7 +55,7 @@ export class SecurityScanner {
             const payload = 'https://www.evil-redirect.com';
             url.searchParams.set(param, payload);
 
-            console.log(`[QA-SEC] Testing Open Redirect on param: ${param}`);
+            if (process.env.DEBUG) console.log(`[QA-SEC] Testing Open Redirect on param: ${param}`);
             
             try {
                 await this.page.goto(url.toString(), { waitUntil: 'networkidle' });
@@ -89,7 +89,7 @@ export class SecurityScanner {
                     await this.page.goBack();
                 }
             } catch (error) {
-                console.log(`[QA-SEC] Error during open redirect test, this might be expected if the navigation was blocked. Continuing scan.`);
+                if (process.env.DEBUG) console.log(`[QA-SEC] Error during open redirect test, this might be expected if the navigation was blocked. Continuing scan.`);
                 // It's possible the navigation to the evil site fails, which is good.
                 // We should ensure we can recover and continue.
                 await this.page.goBack(); // Try to recover state

package/tests/_helpers/agentic-runner.bundle.spec.js

@@ -305,7 +305,8 @@ var qaAdvancedTools = [
 
 // tests/_helpers/qa-security-tools.ts
 async function audit_http_headers(page) {
-  console.log(`[QA-SEC] Auditing HTTP Headers for: ${page.url()}`);
+  if (process.env.DEBUG)
+    console.log(`[QA-SEC] Auditing HTTP Headers for: ${page.url()}`);
   const response = await page.reload({ waitUntil: "domcontentloaded" });
   const headers = response?.headers();
   const vulnerabilities = [];
@@ -364,11 +365,13 @@ async function audit_http_headers(page) {
       });
     }
   }
-  console.log(`[QA-SEC] Found ${vulnerabilities.length} missing security headers.`);
+  if (process.env.DEBUG)
+    console.log(`[QA-SEC] Found ${vulnerabilities.length} missing security headers.`);
   return vulnerabilities;
 }
 async function scan_sensitive_data_exposure(page) {
-  console.log(`[QA-SEC] Scanning localStorage and sessionStorage for sensitive data.`);
+  if (process.env.DEBUG)
+    console.log(`[QA-SEC] Scanning localStorage and sessionStorage for sensitive data.`);
   const vulnerabilities = [];
   const sensitiveKeywords = ["token", "password", "secret", "key", "jwt", "auth"];
   const storages = {
@@ -406,7 +409,8 @@ async function scan_sensitive_data_exposure(page) {
       }
     }
   }
-  console.log(`[QA-SEC] Found ${vulnerabilities.length} instances of sensitive data in browser storage.`);
+  if (process.env.DEBUG)
+    console.log(`[QA-SEC] Found ${vulnerabilities.length} instances of sensitive data in browser storage.`);
   return vulnerabilities;
 }
 
@@ -516,7 +520,8 @@ var KnowledgeService = class _KnowledgeService {
         const data = await res.json();
         if (data.status === "skipped_duplicate_dom") {
         } else {
-          console.log(import_chalk.default.cyan(`[Knowledge] Ingesta exitosa (Project: ${payload.project_id})`));
+          if (process.env.DEBUG)
+            console.log(import_chalk.default.cyan(`[Knowledge] Ingesta exitosa (Project: ${payload.project_id})`));
         }
       }
     } catch (e) {
@@ -691,14 +696,17 @@ async function pushRule(rule) {
       })
     });
     if (!res.ok) {
-      console.warn(`[CollectiveMemory] pushRule HTTP ${res.status}: ${await res.text().catch(() => "")}`);
+      if (process.env.DEBUG)
+        console.warn(`[CollectiveMemory] pushRule HTTP ${res.status}: ${await res.text().catch(() => "")}`);
       return null;
     }
     const data = await res.json();
-    console.log(`\x1B[32m[CollectiveMemory] \u2705 Regla guardada: "${rule.title}"\x1B[0m`);
+    if (process.env.DEBUG)
+      console.log(`\x1B[32m[CollectiveMemory] \u2705 Regla guardada: "${rule.title}"\x1B[0m`);
     return data.id ?? null;
   } catch (err) {
-    console.warn(`[CollectiveMemory] pushRule error: ${err?.message}`);
+    if (process.env.DEBUG)
+      console.warn(`[CollectiveMemory] pushRule error: ${err?.message}`);
     return null;
   }
 }
@@ -755,14 +763,17 @@ async function pushKnowledge(knowledge) {
       })
     });
     if (!res.ok) {
-      console.warn(`[CollectiveMemory] pushKnowledge HTTP ${res.status}: ${await res.text().catch(() => "")}`);
+      if (process.env.DEBUG)
+        console.warn(`[CollectiveMemory] pushKnowledge HTTP ${res.status}: ${await res.text().catch(() => "")}`);
       return null;
     }
     const data = await res.json();
-    console.log(`\x1B[32m[CollectiveMemory] \u2705 Conocimiento guardado: "${knowledge.title}"\x1B[0m`);
+    if (process.env.DEBUG)
+      console.log(`\x1B[32m[CollectiveMemory] \u2705 Conocimiento guardado: "${knowledge.title}"\x1B[0m`);
     return data.id ?? null;
   } catch (err) {
-    console.warn(`[CollectiveMemory] pushKnowledge error: ${err?.message}`);
+    if (process.env.DEBUG)
+      console.warn(`[CollectiveMemory] pushKnowledge error: ${err?.message}`);
     return null;
   }
 }
@@ -811,7 +822,8 @@ async function savePromptPattern(patternData) {
       mission_id: getMissionId(),
       ...patternData
     };
-    console.log(`[PatternSave] \u{1F4E4} POST ${apiUrl} | org=${payload.organization_id} proj=${payload.project_id} mission=${payload.mission_id}`);
+    if (process.env.DEBUG)
+      console.log(`[PatternSave] \u{1F4E4} POST ${apiUrl} | org=${payload.organization_id} proj=${payload.project_id} mission=${payload.mission_id}`);
     const res = await fetch(apiUrl, {
       method: "POST",
       headers: {
@@ -821,13 +833,16 @@ async function savePromptPattern(patternData) {
       body: JSON.stringify(payload)
     });
     if (!res.ok) {
-      console.warn(`[PatternSave] \u26A0\uFE0F HTTP ${res.status} al guardar patr\xF3n en ${apiUrl}: ${await res.text().catch(() => "")}`);
+      if (process.env.DEBUG)
+        console.warn(`[PatternSave] \u26A0\uFE0F HTTP ${res.status} al guardar patr\xF3n en ${apiUrl}: ${await res.text().catch(() => "")}`);
     } else {
-      console.log(`[PatternSave] \u2705 Patr\xF3n guardado exitosamente.`);
+      if (process.env.DEBUG)
+        console.log(`[PatternSave] \u2705 Patr\xF3n guardado exitosamente.`);
     }
     return res.ok;
   } catch (err) {
-    console.warn(`[PatternSave] \u26A0\uFE0F Error guardando patr\xF3n: ${err?.message || "unknown"}`);
+    if (process.env.DEBUG)
+      console.warn(`[PatternSave] \u26A0\uFE0F Error guardando patr\xF3n: ${err?.message || "unknown"}`);
     return false;
   }
 }
@@ -987,7 +1002,8 @@ ${content}
         }
       }
       if (loadedCount > 0) {
-        console.log(`>> \u{1F4D1} ${loadedCount} habilidades QA inyectadas al cerebro.`);
+        if (process.env.DEBUG)
+          console.log(`>> \u{1F4D1} ${loadedCount} habilidades QA inyectadas al cerebro.`);
         return skillsContext;
       }
     } catch (e) {
@@ -2659,13 +2675,15 @@ var SecurityScanner = class {
    * @returns A promise that resolves to an array of found vulnerabilities.
    */
   async runAllScans() {
-    console.log("[QA-SEC] Starting comprehensive security scan...");
+    if (process.env.DEBUG)
+      console.log("[QA-SEC] Starting comprehensive security scan...");
     const headerVulnerabilities = await audit_http_headers(this.page);
     this.report.push(...headerVulnerabilities);
     const storageVulnerabilities = await scan_sensitive_data_exposure(this.page);
     this.report.push(...storageVulnerabilities);
     await this.testOpenRedirect();
-    console.log(`[QA-SEC] Comprehensive scan finished. Found ${this.report.length} potential vulnerabilities.`);
+    if (process.env.DEBUG)
+      console.log(`[QA-SEC] Comprehensive scan finished. Found ${this.report.length} potential vulnerabilities.`);
     return this.getReport();
   }
   /**
@@ -2679,7 +2697,8 @@ var SecurityScanner = class {
         const originalValue = url.searchParams.get(param);
         const payload = "https://www.evil-redirect.com";
         url.searchParams.set(param, payload);
-        console.log(`[QA-SEC] Testing Open Redirect on param: ${param}`);
+        if (process.env.DEBUG)
+          console.log(`[QA-SEC] Testing Open Redirect on param: ${param}`);
         try {
           await this.page.goto(url.toString(), { waitUntil: "networkidle" });
           if (this.page.url().startsWith(payload)) {
@@ -2710,7 +2729,8 @@ var SecurityScanner = class {
             await this.page.goBack();
           }
         } catch (error) {
-          console.log(`[QA-SEC] Error during open redirect test, this might be expected if the navigation was blocked. Continuing scan.`);
+          if (process.env.DEBUG)
+            console.log(`[QA-SEC] Error during open redirect test, this might be expected if the navigation was blocked. Continuing scan.`);
           await this.page.goBack();
         }
       }
@@ -2906,11 +2926,13 @@ function captureValidationRule(errorMessage, context) {
     const apiUrl = process.env.ARCALITY_API_URL || "";
     const apiKey = process.env.ARCALITY_API_KEY || "";
     if (!pid || !apiUrl || !apiKey) {
-      console.warn(`[CollectiveMemory] \u26A0\uFE0F Vars faltantes \u2014 project_id='${pid}' api_url='${apiUrl}' api_key='${apiKey ? "OK" : "MISSING"}' \u2192 NO persiste.`);
+      if (process.env.DEBUG)
+        console.warn(`[CollectiveMemory] \u26A0\uFE0F Vars faltantes \u2014 project_id='${pid}' api_url='${apiUrl}' api_key='${apiKey ? "OK" : "MISSING"}' \u2192 NO persiste.`);
       return;
     }
     if (collectiveMemoryPersisted && !isFailed) {
-      console.log(`[CollectiveMemory] \u2139\uFE0F Ya persistido como \xE9xito. Skip duplicado.`);
+      if (process.env.DEBUG)
+        console.log(`[CollectiveMemory] \u2139\uFE0F Ya persistido como \xE9xito. Skip duplicado.`);
       return;
     }
     if (!isFailed && stepsData.length === 0 && stepsDataBackup.length === 0) {
@@ -3907,7 +3929,8 @@ ${patternContext}` : prompt;
         const stepsToSave = stepsData.length > 0 ? stepsData : stepsDataBackup;
         const hasCompleteSteps = stepsToSave.length >= stepsDataBackup.length;
         if (!isDuplicate && hasCompleteSteps) {
-          console.log(`>>ARCALITY_STATUS>> \u{1F4BE} Guardando nuevo patr\xF3n de ejecuci\xF3n (${stepsToSave.length} pasos, pattern_saved: true)...`);
+          if (process.env.DEBUG)
+            console.log(`>>ARCALITY_STATUS>> \u{1F4BE} Guardando nuevo patr\xF3n de ejecuci\xF3n (${stepsToSave.length} pasos, pattern_saved: true)...`);
           const sanitizedSteps = stepsToSave.map((step, idx) => {
             const s = JSON.parse(JSON.stringify(step));
             s.step_index = idx;
@@ -3940,7 +3963,8 @@ ${patternContext}` : prompt;
         }
       }
     }
-    console.log("\u270D\uFE0F [HUMANIZANDO] Generando resumen de \xE9xito para el reporte...");
+    if (process.env.DEBUG)
+      console.log("\u270D\uFE0F [HUMANIZANDO] Generando resumen de \xE9xito para el reporte...");
     const summary = await agent.humanizeMissionResult(prompt, history);
     if (summary) {
       await testInfo.attach("success_summary", {
@@ -3948,7 +3972,8 @@ ${patternContext}` : prompt;
         contentType: "text/plain"
       });
     }
-    console.log("\u{1F916} [SMART-YAML] Generating mission card...");
+    if (process.env.DEBUG)
+      console.log("\u{1F916} [SMART-YAML] Generating mission card...");
     const smartYaml = await agent.summarizeMissionToYaml(prompt, history, target);
     if (smartYaml) {
       const yamlPath = path2.join(contextDir, "last-mission-smart.yaml");