@arcadialdev/arcality 2.6.4 → 2.6.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arcadialdev/arcality",
-  "version": "2.6.4",
+  "version": "2.6.7",
   "description": "El primer ingeniero QA Autónomo integrado al CI/CD. Creado por Arcadial.",
   "main": "index.js",
   "scripts": {

package/scripts/gen-and-run.mjs

@@ -795,6 +795,17 @@ async function main() {
                 _origProcessExit(code);
             };
 
+            // ── RESTORE RAW MODE FOR WINDOWS FIX ──
+            // @clack/prompts pausea stdin y desactiva raw mode al terminar un menú.
+            // Debemos reactivarlo aquí para que nuestro interceptor global de Ctrl+C
+            // siga funcionando durante toda la misión.
+            if (process.stdin.isTTY && process.stdin.setRawMode) {
+                try {
+                    process.stdin.setRawMode(true);
+                    process.stdin.resume();
+                } catch(e) {}
+            }
+
             const cancelHandler = () => {
                 sigintCount++;
                 if (sigintCount > 3) {
@@ -1192,12 +1203,31 @@ async function main() {
                 console.log(chalk.gray('\n   Press Enter to return to menu...'));
                 await new Promise(resolve => {
                     const onKey = (key) => {
-                        if (key === '\r' || key === '\n' || key === '\u0003') {
+                        const keyStr = String(key);
+                        if (keyStr.includes('\r') || keyStr.includes('\n') || keyStr === '\u0003') {
                             process.stdin.off('data', onKey);
-                            if (key === '\u0003') process.emit('SIGINT'); // Ctrl+C = salir
+
+                            // Restaurar stdin en modo normal para @clack/prompts
+                            if (process.stdin.isTTY && process.stdin.setRawMode) {
+                                process.stdin.setRawMode(false);
+                            }
+                            process.stdin.pause();
+
+                            if (keyStr === '\u0003') process.emit('SIGINT'); // Ctrl+C = salir
                             else resolve();
                         }
                     };
+
+                    // ── BUGFIX: @clack/prompts llama explícitamente a process.stdin.pause()
+                    // al terminar cada select()/text(). En Node.js, agregar un listener 'data'
+                    // a un stream EXPLÍCITAMENTE pausado NO lo reactiva automáticamente.
+                    // Resultado: el event loop queda vacío y el proceso termina antes de que
+                    // el usuario pueda presionar Enter.
+                    // Solución: llamar resume() explícitamente antes de registrar el listener.
+                    if (process.stdin.isTTY && process.stdin.setRawMode) {
+                        process.stdin.setRawMode(true); // raw mode para capturar Enter inmediatamente
+                    }
+                    process.stdin.resume(); // ← CRÍTICO: reactiva stdin para mantener el event loop vivo
                     process.stdin.on('data', onKey);
                 });
 

package/src/services/securityScanner.ts

@@ -23,6 +23,10 @@ export class SecurityScanner {
    * @returns A promise that resolves to an array of found vulnerabilities.
    */
   async runAllScans(): Promise<SecurityFinding[]> {
+    if (this.page.isClosed()) {
+      if (process.env.DEBUG) console.log('[QA-SEC] Security scan skipped because page is closed.');
+      return [];
+    }
     if (process.env.DEBUG) console.log('[QA-SEC] Starting comprehensive security scan...');
     
     // Scan 1: Audit HTTP Security Headers
@@ -46,6 +50,7 @@ export class SecurityScanner {
    * A basic test for open redirect vulnerabilities on the current URL.
    */
   async testOpenRedirect(): Promise<void> {
+    if (this.page.isClosed()) return;
     const url = new URL(this.page.url());
     const redirectParams = ['redirect', 'next', 'url', 'returnTo', 'dest'];
     

package/tests/_helpers/agentic-runner.bundle.spec.js

@@ -2675,6 +2675,11 @@ var SecurityScanner = class {
    * @returns A promise that resolves to an array of found vulnerabilities.
    */
   async runAllScans() {
+    if (this.page.isClosed()) {
+      if (process.env.DEBUG)
+        console.log("[QA-SEC] Security scan skipped because page is closed.");
+      return [];
+    }
     if (process.env.DEBUG)
       console.log("[QA-SEC] Starting comprehensive security scan...");
     const headerVulnerabilities = await audit_http_headers(this.page);
@@ -2690,6 +2695,8 @@ var SecurityScanner = class {
    * A basic test for open redirect vulnerabilities on the current URL.
    */
   async testOpenRedirect() {
+    if (this.page.isClosed())
+      return;
     const url = new URL(this.page.url());
     const redirectParams = ["redirect", "next", "url", "returnTo", "dest"];
     for (const param of redirectParams) {
@@ -4017,36 +4024,40 @@ Acci\xF3n bloqueada: Bucle de tipo ${loopType} sobre los elementos ${Array.from(
       });
     }
   }
-  try {
-    const scanner = new SecurityScanner(page);
-    const securityReport = await scanner.runAllScans();
-    if (securityReport && securityReport.length > 0) {
-      await testInfo.attach("security_report", {
-        body: JSON.stringify(securityReport, null, 2),
-        contentType: "application/json"
-      });
-      console.log(`>>ARCALITY_STATUS>> \u{1F6E1}\uFE0F Escaneo de seguridad completado. ${securityReport.length} problemas encontrados.`);
-      try {
-        for (const v of securityReport) {
-          const sev = v.severity || "Info";
-          const mappedSeverity = sev === "Critical" ? "critical" : sev === "High" ? "important" : "suggestion";
-          await pushRule({
-            rule_type: "SECURITY",
-            title: `Security: ${v.category} (${v.severity})`,
-            description: `${v.description}
+  if (!page.isClosed()) {
+    try {
+      const scanner = new SecurityScanner(page);
+      const securityReport = await scanner.runAllScans();
+      if (securityReport && securityReport.length > 0) {
+        await testInfo.attach("security_report", {
+          body: JSON.stringify(securityReport, null, 2),
+          contentType: "application/json"
+        });
+        console.log(`>>ARCALITY_STATUS>> \u{1F6E1}\uFE0F Escaneo de seguridad completado. ${securityReport.length} problemas encontrados.`);
+        try {
+          for (const v of securityReport) {
+            const sev = v.severity || "Info";
+            const mappedSeverity = sev === "Critical" ? "critical" : sev === "High" ? "important" : "suggestion";
+            await pushRule({
+              rule_type: "SECURITY",
+              title: `Security: ${v.category} (${v.severity})`,
+              description: `${v.description}
 Evidence: ${JSON.stringify(v.evidence).substring(0, 400)}`,
-            severity: mappedSeverity
-          }).catch(() => {
-          });
+              severity: mappedSeverity
+            }).catch(() => {
+            });
+          }
+        } catch (e) {
+          console.warn(">>ARCALITY_STATUS>> \u26A0\uFE0F Fall\xF3 persistir hallazgos de seguridad en Memoria Colectiva.");
         }
-      } catch (e) {
-        console.warn(">>ARCALITY_STATUS>> \u26A0\uFE0F Fall\xF3 persistir hallazgos de seguridad en Memoria Colectiva.");
+      } else {
+        console.log(`>>ARCALITY_STATUS>> \u{1F6E1}\uFE0F Escaneo de seguridad completado. No se encontraron problemas.`);
       }
-    } else {
-      console.log(`>>ARCALITY_STATUS>> \u{1F6E1}\uFE0F Escaneo de seguridad completado. No se encontraron problemas.`);
+    } catch (e) {
+      console.error("Error in Security Scan:", e.message);
     }
-  } catch (e) {
-    console.error("Error in Security Scan:", e.message);
+  } else {
+    console.warn(">>ARCALITY_STATUS>> \u{1F6E1}\uFE0F Escaneo de seguridad omitido porque el navegador o la pesta\xF1a colaps\xF3/cerr\xF3.");
   }
   if (!aiMarkedSuccess && !failReason) {
     if (stepCount >= maxSteps)