@mestreyoda/fabrica 0.2.40 → 0.2.42

package/README.md

@@ -203,6 +203,27 @@ tail -f ~/.openclaw/workspace/logs/genesis.log
 openclaw fabrica metrics
 ```
 
+This command now includes convergence-oriented telemetry such as:
+- cause counts (for example `qa_missing_required_gates`, `qa_sanitization_failed`)
+- human escalations
+- average dispatch → first PR timing
+- per-stack breakdowns
+
+**11. Inspect a live issue/run**:
+
+```bash
+openclaw fabrica doctor issue --project <slug> --issue <id>
+```
+
+Use this when a project is looping or stuck. It shows:
+- current PR / artifact state
+- progress state
+- convergence cause + QA subcause
+- missing QA gates, when applicable
+- recommended next action
+
+For deferred, non-blocking ideas after this milestone, see `FUTURE_IMPROVEMENTS.md`.
+
 ## Configuration
 
 ### Minimal (gh CLI only)

package/dist/index.js

@@ -113905,8 +113905,8 @@ import fsSync from "node:fs";
 import path5 from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 function getCurrentVersion() {
-  if ("0.2.40") {
-    return "0.2.40";
+  if ("0.2.42") {
+    return "0.2.42";
   }
   try {
     const pkgPath = path5.join(THIS_DIR, "..", "..", "package.json");
@@ -126576,6 +126576,32 @@ function sanitizePublicOutput(input) {
 }
 
 // lib/tools/tasks/qa-evidence.ts
+function normalizeQaEvidenceForFingerprint(text) {
+  return text.toLowerCase().replace(/\r/g, "").replace(/exit code:\s*-?\d+/gi, "exit code").replace(/\d+(?:\.\d+)?%/g, "<percent>").replace(/\s+/g, " ").trim();
+}
+function computeQaFingerprint(text) {
+  const normalized = normalizeQaEvidenceForFingerprint(text);
+  if (!normalized) return null;
+  let hash2 = 2166136261;
+  for (let i2 = 0; i2 < normalized.length; i2 += 1) {
+    hash2 ^= normalized.charCodeAt(i2);
+    hash2 = Math.imul(hash2, 16777619);
+  }
+  return `fnv1a:${(hash2 >>> 0).toString(16)}`;
+}
+function classifyQaEvidenceSubcause(validation) {
+  if (validation.errors.includes("qa_evidence_missing")) return "qa_schema_missing";
+  if (validation.sectionCount > 1) return "qa_section_count_invalid";
+  if (validation.problems.some((problem) => problem.includes("host-system paths") || problem.includes("secrets") || problem.includes("environment dump"))) {
+    return "qa_sanitization_failed";
+  }
+  if (validation.problems.some((problem) => problem.includes("Exit code: <number>"))) return "qa_exit_code_missing";
+  if (validation.exitCode !== null && validation.exitCode !== 0) return "qa_exit_code_nonzero";
+  if (validation.errors.includes("qa_evidence_only_exit_codes")) return "qa_exit_codes_only";
+  if (validation.errors.some((error48) => error48.startsWith("qa_gate_missing_"))) return "qa_missing_required_gates";
+  if (validation.errors.some((error48) => error48.startsWith("qa_coverage_below_threshold_"))) return "qa_coverage_below_threshold";
+  return validation.errors.length || validation.problems.length ? "qa_unknown" : null;
+}
 function validateQaEvidence(body) {
   const text = body ?? "";
   const headings = [...text.matchAll(/^## QA Evidence\b[\t ]*$/gim)];
@@ -126624,9 +126650,11 @@ function validateQaEvidence(body) {
     tests: ["tests", "pytest", "jest", "vitest", "go test", "test session"],
     coverage: ["coverage"]
   };
+  const missingGates = [];
   for (const [gate, aliases] of Object.entries(GATE_ALIASES)) {
     const found = aliases.some((alias) => new RegExp(alias, "i").test(section));
     if (!found) {
+      missingGates.push(gate);
       errors.push(`qa_gate_missing_${gate}`);
     }
   }
@@ -126643,26 +126671,86 @@ function validateQaEvidence(body) {
       errors.push(`qa_coverage_below_threshold_${Math.floor(cov)}`);
     }
   }
+  const primarySubcause = classifyQaEvidenceSubcause({
+    sectionCount,
+    exitCode,
+    problems,
+    errors
+  });
   return {
     valid: problems.length === 0 && errors.length === 0,
     sectionCount,
     exitCode,
     problems,
-    errors
+    errors,
+    missingGates,
+    primarySubcause,
+    fingerprint: computeQaFingerprint(section)
   };
 }
 function validateCanonicalQaEvidence(body) {
   return validateQaEvidence(body);
 }
+function buildQaRepairGuidance(validation, actor) {
+  const base = actor === "developer" ? [
+    'Run `scripts/qa.sh` again and replace the existing "## QA Evidence" section with the fresh sanitized output.',
+    "Keep the canonical lint/types/security/tests/coverage gates intact.",
+    "Do not rewrite or weaken `scripts/qa.sh` into ad-hoc scenario checks."
+  ] : [
+    "Reject the PR and ask the developer to rerun `scripts/qa.sh`.",
+    'Require the PR body to contain one fresh sanitized "## QA Evidence" section.',
+    "Do not accept ad-hoc scenario scripts or weakened QA gates in place of the canonical contract."
+  ];
+  switch (validation.primarySubcause) {
+    case "qa_schema_missing":
+    case "qa_section_count_invalid":
+      return [
+        ...base,
+        "Ensure the PR body contains exactly one `## QA Evidence` section."
+      ];
+    case "qa_exit_code_missing":
+      return [
+        ...base,
+        "The QA Evidence must include an explicit `Exit code: 0` line."
+      ];
+    case "qa_exit_code_nonzero":
+      return [
+        ...base,
+        "The QA command failed. Fix the underlying lint/type/security/test/coverage problem before calling work_finish again."
+      ];
+    case "qa_sanitization_failed":
+      return [
+        ...base,
+        "Sanitize host paths, environment dumps, and secrets before updating the PR body."
+      ];
+    case "qa_missing_required_gates":
+      return [
+        ...base,
+        `Missing gates: ${validation.missingGates.join(", ") || "unknown"}. Include all required gates in the canonical QA output.`
+      ];
+    case "qa_exit_codes_only":
+      return [
+        ...base,
+        "Do not paste exit codes alone. Include the actual lint/types/security/tests/coverage output summary."
+      ];
+    case "qa_coverage_below_threshold":
+      return [
+        ...base,
+        "Coverage is below the required threshold. Fix the underlying tests or implementation before retrying."
+      ];
+    default:
+      return base;
+  }
+}
 function formatQaEvidenceValidationFailure(validation, actor) {
   const intro = actor === "developer" ? "Cannot mark work_finish(done) with invalid QA Evidence in the PR body." : "Cannot approve review with invalid QA Evidence in the PR body.";
-  const guidance = actor === "developer" ? 'Replace the existing "## QA Evidence" section with fresh sanitized output from scripts/qa.sh (exactly one section, Exit code: 0), then call work_finish again. Do not rewrite or weaken scripts/qa.sh into ad-hoc scenario checks \u2014 preserve the canonical lint/types/security/tests/coverage gates and fix the underlying code or project setup instead.' : 'Reject the PR and instruct the developer to replace the existing "## QA Evidence" section in the PR body with fresh sanitized output from scripts/qa.sh (exactly one section, Exit code: 0). Do not accept ad-hoc scenario scripts or weakened QA gates in place of the canonical lint/types/security/tests/coverage contract.';
   const allIssues = [...validation.problems, ...validation.errors];
+  const guidance = buildQaRepairGuidance(validation, actor);
   return `${intro}
 
 ${allIssues.map((issue2) => `- ${issue2}`).join("\n")}
 
-${guidance}`;
+${guidance.map((line) => `- ${line}`).join("\n")}`;
 }
 
 // lib/tools/worker/work-finish.ts
@@ -126968,6 +127056,10 @@ function shouldAutoRecoverToFeedback(summary) {
   const text = summary.toLowerCase();
   return /retarget/.test(text) || /mismatch de escopo/.test(text) || /mismatch de escopo\/rastreabilidade/.test(text) || /new pr/.test(text) || /novo pr/.test(text) || /não pode satisfazer a issue/.test(text) || /cannot satisfy issue/.test(text);
 }
+async function getCanonicalQaEvidenceValidationForPr(provider, issueId, selector) {
+  const prStatus = await provider.getPrStatus(issueId, selector);
+  return validateCanonicalQaEvidence(prStatus.body);
+}
 function createWorkFinishTool(ctx) {
   return (toolCtx) => ({
     name: "work_finish",
@@ -130507,6 +130599,8 @@ async function runIssueDoctor(opts) {
     issue2 = null;
   }
   const convergenceCause = issueRuntime?.lastConvergenceCause ?? null;
+  const convergenceQaSubcause = issueRuntime?.lastQaSubcause ?? null;
+  const convergenceQaMissingGates = issueRuntime?.lastQaMissingGates ?? [];
   const convergenceAction = issueRuntime?.lastConvergenceAction ?? null;
   const retryCount = issueRuntime?.lastConvergenceRetryCount ?? 0;
   const convergenceReason = issueRuntime?.lastConvergenceReason ?? issueRuntime?.inconclusiveCompletionReason ?? null;
@@ -130523,7 +130617,18 @@ async function runIssueDoctor(opts) {
   ];
   const likelyNextAction = (() => {
     if (convergenceAction === "escalate_human") return "human_intervention";
-    if (convergenceCause === "invalid_qa_evidence") return "repair_qa_evidence";
+    if ([
+      "invalid_qa_evidence",
+      "qa_schema_missing",
+      "qa_section_count_invalid",
+      "qa_exit_code_missing",
+      "qa_exit_code_nonzero",
+      "qa_sanitization_failed",
+      "qa_missing_required_gates",
+      "qa_exit_codes_only",
+      "qa_coverage_below_threshold",
+      "qa_stale_or_unchanged"
+    ].includes(convergenceCause ?? "")) return "repair_qa_evidence";
     if (convergenceCause === "merge_conflict") return "repair_merge_conflict";
     if (convergenceCause === "stalled_with_artifact") return "force_convergence_review";
     if (hasArtifact) return "post_pr_convergence";
@@ -130532,6 +130637,7 @@ async function runIssueDoctor(opts) {
   return {
     projectSlug: project.slug,
     projectName: project.name,
+    stack: project.stack ?? project.environment?.stack ?? null,
     issueId: opts.issueId,
     issueRuntime,
     hasArtifact,
@@ -130545,6 +130651,8 @@ async function runIssueDoctor(opts) {
     },
     convergence: {
       cause: convergenceCause,
+      qaSubcause: convergenceQaSubcause,
+      qaMissingGates: convergenceQaMissingGates,
       action: convergenceAction,
       retryCount,
       reason: convergenceReason,
@@ -130575,6 +130683,7 @@ async function runIssueDoctor(opts) {
 function formatIssueDoctor(result) {
   const lines = [
     `Issue run doctor \u2014 ${result.projectSlug}#${result.issueId}`,
+    `  Stack: ${result.stack ?? "unknown"}`,
     `  Artifact: ${result.hasArtifact ? "yes" : "no"}`,
     `  PR: ${result.pr?.url ?? "n/a"} (${result.pr?.state ?? "unknown"})`,
     `  Issue: ${result.issue?.url ?? "n/a"} (${result.issue?.state ?? "unknown"})`,
@@ -130586,6 +130695,8 @@ function formatIssueDoctor(result) {
     `  First worker activity: ${result.lifecycle.firstWorkerActivityAt ?? "n/a"}`,
     `  Session completed: ${result.lifecycle.sessionCompletedAt ?? "n/a"}`,
     `  Convergence cause: ${result.convergence.cause ?? "none"}`,
+    `  QA subcause: ${result.convergence.qaSubcause ?? "n/a"}`,
+    `  Missing QA gates: ${result.convergence.qaMissingGates.length ? result.convergence.qaMissingGates.join(", ") : "n/a"}`,
     `  Convergence action: ${result.convergence.action ?? "none"}`,
     `  Retry count: ${result.convergence.retryCount}`,
     `  Convergence head SHA: ${result.convergence.headSha ?? "n/a"}`,
@@ -131407,6 +131518,7 @@ async function captureIssueDoctorSnapshot(opts) {
       trigger: opts.trigger,
       summary: result.recommendation.summary,
       likelyNextAction: result.recommendation.likelyNextAction,
+      stack: result.stack,
       doctor: {
         artifact: result.hasArtifact,
         progressState: result.lifecycle.progressState,
@@ -131416,6 +131528,8 @@ async function captureIssueDoctorSnapshot(opts) {
         prState: result.pr?.state ?? null,
         labels: result.issue?.labels ?? [],
         convergenceCause: result.convergence.cause,
+        qaSubcause: result.convergence.qaSubcause,
+        qaMissingGates: result.convergence.qaMissingGates,
         convergenceAction: result.convergence.action,
         convergenceRetryCount: result.convergence.retryCount,
         convergenceHeadSha: result.convergence.headSha,
@@ -131440,7 +131554,16 @@ init_types3();
 function classifyConvergenceCause(reason) {
   const text = String(reason ?? "").toLowerCase();
   if (!text) return "other";
-  if (text.includes("qa_gate_missing_") || text.includes("invalid qa evidence")) return "invalid_qa_evidence";
+  if (text.includes("qa_evidence_missing")) return "qa_schema_missing";
+  if (text.includes("exactly one `## qa evidence` section") || text.includes("qa_section_count_invalid")) return "qa_section_count_invalid";
+  if (text.includes("exit code: <number>") || text.includes("qa_exit_code_missing")) return "qa_exit_code_missing";
+  if (text.includes("exit code must be 0") || text.includes("qa_exit_code_nonzero")) return "qa_exit_code_nonzero";
+  if (text.includes("host-system paths") || text.includes("secrets or environment values") || text.includes("environment dump") || text.includes("qa_sanitization_failed")) return "qa_sanitization_failed";
+  if (text.includes("qa_evidence_only_exit_codes") || text.includes("qa_exit_codes_only")) return "qa_exit_codes_only";
+  if (text.includes("qa_coverage_below_threshold") || text.includes("coverage below threshold")) return "qa_coverage_below_threshold";
+  if (text.includes("qa_stale_or_unchanged")) return "qa_stale_or_unchanged";
+  if (text.includes("qa_gate_missing_") || text.includes("missing required gates")) return "qa_missing_required_gates";
+  if (text.includes("invalid qa evidence")) return "invalid_qa_evidence";
   if (text.includes("merge conflict") || text.includes("pr_still_conflicting")) return "merge_conflict";
   if (text.includes("stalled_with_artifact")) return "stalled_with_artifact";
   if (text.includes("stalled_without_artifact")) return "stalled_without_artifact";
@@ -131462,6 +131585,17 @@ function getConvergenceRetryBudget(cause) {
   switch (cause) {
     case "invalid_qa_evidence":
       return 2;
+    case "qa_schema_missing":
+    case "qa_section_count_invalid":
+    case "qa_exit_code_missing":
+    case "qa_missing_required_gates":
+      return 2;
+    case "qa_exit_code_nonzero":
+    case "qa_exit_codes_only":
+    case "qa_coverage_below_threshold":
+    case "qa_stale_or_unchanged":
+    case "qa_sanitization_failed":
+      return 1;
     case "merge_conflict":
     case "stalled_with_artifact":
     case "stale_pr_target":
@@ -131943,20 +132077,50 @@ async function defaultValidateDeveloperDone(opts) {
     return { ok: true, prStatus };
   } catch (error48) {
     let prStatus;
+    let qaEvidence;
     try {
       const fallbackPr = await opts.provider.getPrStatus(opts.issueId);
       if (fallbackPr.url && fallbackPr.state !== "merged" && fallbackPr.state !== "closed") {
         prStatus = fallbackPr;
+        qaEvidence = await getCanonicalQaEvidenceValidationForPr(opts.provider, opts.issueId).catch(() => void 0);
       }
     } catch {
     }
     return {
       ok: false,
       reason: error48 instanceof Error ? error48.message : "developer_validation_failed",
-      prStatus
+      prStatus,
+      qaEvidence
     };
   }
 }
+function extractQaMissingGatesFromReason(reason) {
+  return [...String(reason ?? "").matchAll(/qa_gate_missing_([a-z_]+)/gi)].map((match) => match[1] ?? "").filter(Boolean);
+}
+function inferQaSubcauseFromReason(reason) {
+  const text = String(reason ?? "").toLowerCase();
+  if (!text) return null;
+  if (text.includes("qa_evidence_missing")) return "qa_schema_missing";
+  if (text.includes("exactly one `## qa evidence` section") || text.includes("qa_section_count_invalid")) return "qa_section_count_invalid";
+  if (text.includes("exit code: <number>") || text.includes("qa_exit_code_missing")) return "qa_exit_code_missing";
+  if (text.includes("exit code must be 0") || text.includes("qa_exit_code_nonzero")) return "qa_exit_code_nonzero";
+  if (text.includes("host-system paths") || text.includes("secrets or environment values") || text.includes("environment dump") || text.includes("qa_sanitization_failed")) return "qa_sanitization_failed";
+  if (text.includes("qa_evidence_only_exit_codes") || text.includes("qa_exit_codes_only")) return "qa_exit_codes_only";
+  if (text.includes("qa_coverage_below_threshold") || text.includes("coverage below threshold")) return "qa_coverage_below_threshold";
+  if (text.includes("qa_gate_missing_")) return "qa_missing_required_gates";
+  if (text.includes("invalid qa evidence")) return "invalid_qa_evidence";
+  return null;
+}
+function computeStringFingerprint(text) {
+  const normalized = String(text ?? "").trim().toLowerCase().replace(/\s+/g, " ");
+  if (!normalized) return null;
+  let hash2 = 2166136261;
+  for (let i2 = 0; i2 < normalized.length; i2 += 1) {
+    hash2 ^= normalized.charCodeAt(i2);
+    hash2 = Math.imul(hash2, 16777619);
+  }
+  return `fnv1a:${(hash2 >>> 0).toString(16)}`;
+}
 async function persistDeveloperPrBinding(opts) {
   const prStatus = opts.prStatus;
   if (!prStatus) return;
@@ -132045,11 +132209,22 @@ async function applyWorkerResult(opts) {
     if (!validation.ok) {
       const validationReason = validation.reason ?? "developer_validation_failed";
       const feedbackQueueLabel = getQueueLabels(workflow, "developer").find((label) => isFeedbackState(workflow, label)) ?? "To Improve";
+      const qaMissingGates = validation.qaEvidence?.missingGates ?? extractQaMissingGatesFromReason(validationReason);
+      const qaSubcause = validation.qaEvidence?.primarySubcause ?? inferQaSubcauseFromReason(validationReason);
+      const qaObservedHeadSha = context2.issueRuntime?.currentPrHeadSha ?? context2.issueRuntime?.lastHeadSha ?? null;
+      const qaEvidenceFingerprint = validation.qaEvidence?.fingerprint ?? computeStringFingerprint([qaSubcause, ...qaMissingGates].join("|"));
+      const qaUnchanged = Boolean(
+        context2.issueRuntime?.lastQaEvidenceHash && qaEvidenceFingerprint && context2.issueRuntime.lastQaEvidenceHash === qaEvidenceFingerprint && context2.issueRuntime.lastQaObservedHeadSha && qaObservedHeadSha && context2.issueRuntime.lastQaObservedHeadSha === qaObservedHeadSha
+      );
+      const convergenceReason = qaUnchanged ? `qa_stale_or_unchanged
+
+${validationReason}` : validationReason;
       const convergenceIssueRuntime = validation.prStatus ? {
         ...context2.issueRuntime,
         currentPrNumber: validation.prStatus.number ?? context2.issueRuntime?.currentPrNumber ?? null,
         currentPrUrl: validation.prStatus.url ?? context2.issueRuntime?.currentPrUrl ?? null,
-        currentPrState: validation.prStatus.state ?? context2.issueRuntime?.currentPrState ?? null
+        currentPrState: validation.prStatus.state ?? context2.issueRuntime?.currentPrState ?? null,
+        currentPrHeadSha: context2.issueRuntime?.currentPrHeadSha ?? null
       } : context2.issueRuntime;
       if (validation.prStatus) {
         await persistDeveloperPrBinding({
@@ -132063,7 +132238,7 @@ async function applyWorkerResult(opts) {
       const convergence = decidePostPrConvergence({
         workflow,
         issueRuntime: convergenceIssueRuntime,
-        reason: validationReason,
+        reason: convergenceReason,
         feedbackQueueLabel
       });
       const blockedSummary = convergence.action === "escalate_human" ? [
@@ -132082,10 +132257,16 @@ ${validationReason}`;
         issueId: context2.issueId,
         role: context2.parsed.role,
         result: opts.result.value,
+        stack: context2.project.stack ?? context2.project.environment?.stack ?? null,
         reason: validationReason,
         convergenceCause: convergence.cause,
         convergenceAction: convergence.action,
-        convergenceRetryCount: convergence.retryCount
+        convergenceRetryCount: convergence.retryCount,
+        qaSubcause,
+        qaMissingGates,
+        qaObservedHeadSha,
+        qaEvidenceFingerprint,
+        qaUnchanged
       }).catch(() => {
       });
       await updateIssueRuntime(opts.workspaceDir, context2.projectSlug, context2.issueId, {
@@ -132094,9 +132275,15 @@ ${validationReason}`;
         lastConvergenceCause: convergence.cause,
         lastConvergenceAction: convergence.action,
         lastConvergenceRetryCount: convergence.retryCount,
-        lastConvergenceReason: validationReason,
+        lastConvergenceReason: convergenceReason,
         lastConvergenceAt: (/* @__PURE__ */ new Date()).toISOString(),
-        lastConvergenceHeadSha: convergence.progressHeadSha
+        lastConvergenceHeadSha: convergence.progressHeadSha,
+        lastQaEvidenceAt: (/* @__PURE__ */ new Date()).toISOString(),
+        lastQaExitCode: validationReason.includes("Exit code must be 0") ? 1 : null,
+        lastQaMissingGates: qaMissingGates,
+        lastQaEvidenceHash: qaEvidenceFingerprint,
+        lastQaObservedHeadSha: qaObservedHeadSha,
+        lastQaSubcause: qaSubcause
       }).catch(() => {
       });
       if (convergenceIssueRuntime?.currentPrUrl || convergence.action === "escalate_human") {
@@ -132240,7 +132427,13 @@ ${validationReason}`;
       lastConvergenceRetryCount: 0,
       lastConvergenceReason: null,
       lastConvergenceAt: null,
-      lastConvergenceHeadSha: null
+      lastConvergenceHeadSha: null,
+      lastQaEvidenceAt: null,
+      lastQaExitCode: null,
+      lastQaMissingGates: null,
+      lastQaEvidenceHash: null,
+      lastQaObservedHeadSha: null,
+      lastQaSubcause: null
     }).catch(() => {
     });
   } else {
@@ -132252,7 +132445,13 @@ ${validationReason}`;
       lastConvergenceRetryCount: 0,
       lastConvergenceReason: null,
       lastConvergenceAt: null,
-      lastConvergenceHeadSha: null
+      lastConvergenceHeadSha: null,
+      lastQaEvidenceAt: null,
+      lastQaExitCode: null,
+      lastQaMissingGates: null,
+      lastQaEvidenceHash: null,
+      lastQaObservedHeadSha: null,
+      lastQaSubcause: null
     }).catch(() => {
     });
   }
@@ -149231,8 +149430,21 @@ function keyFor(entry) {
   return `${projectSlug}:${issueId}`;
 }
 function normalizeCause(entry) {
+  const explicitQaSubcause = entry.qaSubcause ?? null;
+  if (explicitQaSubcause) return String(explicitQaSubcause);
   const cause = entry.convergenceCause ?? entry.reason ?? null;
-  return cause ? String(cause) : null;
+  if (!cause) return null;
+  const text = String(cause).toLowerCase();
+  if (text.includes("qa_stale_or_unchanged")) return "qa_stale_or_unchanged";
+  if (text.includes("qa_gate_missing_")) return "qa_missing_required_gates";
+  if (text.includes("qa_evidence_missing")) return "qa_schema_missing";
+  if (text.includes("exactly one `## qa evidence` section") || text.includes("qa_section_count_invalid")) return "qa_section_count_invalid";
+  if (text.includes("exit code must be 0") || text.includes("qa_exit_code_nonzero")) return "qa_exit_code_nonzero";
+  if (text.includes("exit code: <number>") || text.includes("qa_exit_code_missing")) return "qa_exit_code_missing";
+  if (text.includes("qa_evidence_only_exit_codes") || text.includes("qa_exit_codes_only")) return "qa_exit_codes_only";
+  if (text.includes("qa_coverage_below_threshold") || text.includes("coverage below threshold")) return "qa_coverage_below_threshold";
+  if (text.includes("host-system paths") || text.includes("secrets or environment values") || text.includes("environment dump") || text.includes("qa_sanitization_failed")) return "qa_sanitization_failed";
+  return String(cause);
 }
 async function computeMetrics(workspaceDir) {
   const auditLogPath = join4(workspaceDir, DATA_DIR, "log", "audit.log");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mestreyoda/fabrica",
-  "version": "0.2.40",
+  "version": "0.2.42",
   "description": "Autonomous software engineering pipeline for OpenClaw. Turns ideas into deployed code via intake, dispatch, review, test, and merge.",
   "type": "module",
   "main": "./dist/index.js",