@arcadialdev/arcality 2.6.6 → 3.0.0

package/src/arcalityClient.mjs

@@ -93,6 +93,16 @@ function getEffectiveApiKey() {
     return key;
 }
 
+/**
+ * Gets the effective Project ID.
+ * Priority: arcality.config > ARCALITY_PROJECT_ID env var
+ */
+function loadProjectId() {
+    const localConfig = loadArcalityConfig();
+    if (localConfig?.projectId) return localConfig.projectId;
+    return process.env.ARCALITY_PROJECT_ID || null;
+}
+
 // ═══════════════════════════════════════════════════════
 // PUBLIC API
 // ═══════════════════════════════════════════════════════
@@ -244,6 +254,54 @@ export async function startMission(prompt, targetUrl) {
     };
 }
 
+/**
+ * Fetches missions from the backend API.
+ * @param {string} projectId 
+ * @param {string} tags - Comma separated tags (optional)
+ * @returns {Promise<Object>} Contains success flag and missions array
+ */
+export async function fetchMissions(projectId, tags) {
+    const key = getEffectiveApiKey();
+    if (!key) return { success: false, error: 'no_api_key', missions: [] };
+
+    const apiBase = getEffectiveApiBase();
+    if (!apiBase) {
+        // MOCK MODE: Return empty array for now since there's no backend
+        return { success: true, mode: 'mock', missions: [] };
+    }
+
+    try {
+        const url = new URL(`${apiBase}/api/v1/projects/${projectId}/missions`);
+        if (tags) {
+            url.searchParams.append('tags', tags);
+        }
+
+        const controller = new AbortController();
+        const timeout = setTimeout(() => controller.abort(), 10000);
+        const res = await fetch(url.toString(), {
+            method: 'GET',
+            headers: {
+                'x-api-key': key
+            },
+            signal: controller.signal
+        });
+        clearTimeout(timeout);
+
+        if (!res.ok) {
+            const errText = await res.text();
+            console.warn(`[DEBUG] fetchMissions failed: ${res.status} - ${errText}`);
+            return { success: false, error: 'server_error', missions: [] };
+        }
+
+        const data = await res.json();
+        return { success: true, missions: data.missions || [] };
+    } catch (e) {
+        const reason = e?.name === 'AbortError' ? 'timeout (10s)' : (e?.message || 'unknown');
+        console.warn(`⚠️  fetchMissions failed (${apiBase}): ${reason}.`);
+        return { success: false, error: reason, missions: [] };
+    }
+}
+
 /**
  * Marks a mission as completed.
  * @param {string} missionId
@@ -281,6 +339,75 @@ function simpleHash(str) {
     return 'ph_' + Math.abs(hash).toString(36);
 }
 
+/**
+ * Crea una Task en Azure DevOps cuando se detecta un bug en el portal.
+ * Si la organización no tiene la integración configurada (HTTP 400) se registra
+ * sólo en modo DEBUG y NO interrumpe el flujo del test runner.
+ *
+ * @param {string} title       - Título de la tarea (generalmente la descripción corta del bug)
+ * @param {string} description - Descripción detallada del bug detectado
+ * @returns {Promise<{success: boolean, taskUrl?: string, error?: string}>}
+ */
+export async function createAdoTask(title, description) {
+    const apiBase = getEffectiveApiBase();
+    if (!apiBase) {
+        if (process.env.DEBUG) console.log(`[ADO] No hay ARCALITY_API_URL configurado. Omitiendo creación de Task en Azure DevOps.`);
+        return { success: false, error: 'no_api_url' };
+    }
+
+    const projectId = loadProjectId();
+    if (!projectId) {
+        if (process.env.DEBUG) console.log(`[ADO] No hay Project ID configurado. Omitiendo creación de Task en Azure DevOps.`);
+        return { success: false, error: 'no_project_id' };
+    }
+
+    const key = getEffectiveApiKey();
+    if (!key) {
+        if (process.env.DEBUG) console.log(`[ADO] No hay API key configurada. Omitiendo creación de Task en Azure DevOps.`);
+        return { success: false, error: 'no_api_key' };
+    }
+
+    try {
+        const controller = new AbortController();
+        const timeout = setTimeout(() => controller.abort(), 15000);
+
+        const res = await fetch(`${apiBase}/api/v1/integrations/azuredevops/task`, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+                'x-api-key': key
+            },
+            body: JSON.stringify({ project_id: projectId, title, description }),
+            signal: controller.signal
+        });
+        clearTimeout(timeout);
+
+        if (res.status === 400) {
+            const data = await res.json().catch(() => ({}));
+            // La organización no tiene la integración de ADO configurada — no es un error crítico
+            if (data?.error === 'create_task_failed') {
+                if (process.env.DEBUG) console.log(`[ADO] Integración no configurada para esta organización: ${data.message}`);
+            } else {
+                console.warn(`⚠️ [ADO] Error al crear Task en Azure DevOps: ${data?.message || 'Bad Request'}`);
+            }
+            return { success: false, error: data?.message || 'create_task_failed' };
+        }
+
+        if (!res.ok) {
+            console.warn(`⚠️ [ADO] Error HTTP ${res.status} al crear Task en Azure DevOps.`);
+            return { success: false, error: `http_${res.status}` };
+        }
+
+        const data = await res.json();
+        console.log(`✅ [ADO] Task creada en Azure DevOps: ${data.task_url || '(sin URL)'}`);
+        return { success: true, taskUrl: data.task_url };
+    } catch (e) {
+        const reason = e?.name === 'AbortError' ? 'timeout (15s)' : (e?.message || 'unknown');
+        console.warn(`⚠️ [ADO] No se pudo crear la Task en Azure DevOps: ${reason}`);
+        return { success: false, error: reason };
+    }
+}
+
 /**
  * Obtiene el Token SAS y el path base para subir evidencias.
  * @param {string} missionId
@@ -309,7 +436,7 @@ export async function getEvidenceSasToken(missionId, projectId) {
             console.log(`[DEBUG] SAS Token API Failed: ${res.status} - ${txt}`);
             return null;
         }
-        
+
         const data = await res.json();
         return data;
     } catch (e) {

package/src/configLoader.mjs

@@ -18,8 +18,7 @@ export const CONFIG_FILE = path.join(CONFIG_DIR, 'config.json');
  * @returns {string}
  */
 export function getApiUrl() {
-    // return 'https://arcalityqadev.arcadial.lat';
-    return 'https://arcalityqadev.arcadial.lat';
+     return 'https://arcalityqadev.arcadial.lat';
 }
 
 /**
@@ -66,6 +65,11 @@ export function loadConfig() {
     return config;
 }
 
+export function loadProjectId() {
+    const localConfig = loadLocalArcalityConfig();
+    return localConfig?.projectId || process.env.ARCALITY_PROJECT_ID;
+}
+
 
 /**
  * Reads the user's global config (~/.arcality/config.json)

package/src/configManager.mjs

@@ -127,7 +127,7 @@ export function injectConfigToEnv(config) {
 
     if (config.apiKey) process.env.ARCALITY_API_KEY = config.apiKey;
     if (config.projectId) process.env.ARCALITY_PROJECT_ID = config.projectId;
-    if (config.project?.baseUrl) {
+    if (config.project?.baseUrl && !process.env.BASE_URL) {
         process.env.BASE_URL = config.project.baseUrl;
     }
     if (config.auth?.username) process.env.LOGIN_USER = config.auth.username;

package/src/services/securityScanner.ts

@@ -23,6 +23,10 @@ export class SecurityScanner {
    * @returns A promise that resolves to an array of found vulnerabilities.
    */
   async runAllScans(): Promise<SecurityFinding[]> {
+    if (this.page.isClosed()) {
+      if (process.env.DEBUG) console.log('[QA-SEC] Security scan skipped because page is closed.');
+      return [];
+    }
     if (process.env.DEBUG) console.log('[QA-SEC] Starting comprehensive security scan...');
     
     // Scan 1: Audit HTTP Security Headers
@@ -46,6 +50,7 @@ export class SecurityScanner {
    * A basic test for open redirect vulnerabilities on the current URL.
    */
   async testOpenRedirect(): Promise<void> {
+    if (this.page.isClosed()) return;
     const url = new URL(this.page.url());
     const redirectParams = ['redirect', 'next', 'url', 'returnTo', 'dest'];