loki-mode 8.36.0 → 8.38.0

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: Autonomous spec-driven build system with a built-in trust layer. It does not call work done until it is verified (RARV-C closure loop, 8 quality gates, completion council, verified-completion evidence gate). Triggers on "Loki Mode". Takes a spec (PRD, GitHub issue, OpenAPI doc, etc.) to deployed product with minimal human intervention. Provider-agnostic. Requires --dangerously-skip-permissions flag.
 ---
 
-# Loki Mode v8.36.0
+# Loki Mode v8.38.0
 
 **You are an autonomous agent. You make decisions. You do not ask questions. You do not stop.**
 
@@ -469,4 +469,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v8.36.0 | [Autonomi](https://www.autonomi.dev/) flagship product | ~410 lines core**
+**v8.38.0 | [Autonomi](https://www.autonomi.dev/) flagship product | ~410 lines core**

package/VERSION

@@ -1 +1 @@
-8.36.0
+8.38.0

package/dashboard/__init__.py

@@ -7,7 +7,7 @@ Modules:
     control: Session control API (start/stop/pause/resume)
 """
 
-__version__ = "8.36.0"
+__version__ = "8.38.0"
 
 # Expose the control app for easy import
 try:

package/loki-ts/dist/loki.js

@@ -1,5 +1,5 @@
 // @bun
-var h_=Object.create;var{getPrototypeOf:v_,defineProperty:rK,getOwnPropertyNames:g_}=Object;var m_=Object.prototype.hasOwnProperty;function u_(Z){return this[Z]}var p_,d_,c_=(Z,X,Q)=>{var Y=Z!=null&&typeof Z==="object";if(Y){var J=X?p_??=new WeakMap:d_??=new WeakMap,z=J.get(Z);if(z)return z}Q=Z!=null?h_(v_(Z)):{};let K=X||!Z||!Z.__esModule?rK(Q,"default",{value:Z,enumerable:!0}):Q;for(let $ of g_(Z))if(!m_.call(K,$))rK(K,$,{get:u_.bind(Z,$),enumerable:!0});if(Y)J.set(Z,K);return K};var qQ=(Z,X)=>()=>(X||Z((X={exports:{}}).exports,X),X.exports);var l_=(Z)=>Z;function i_(Z,X){this[Z]=l_.bind(null,X)}var l0=(Z,X)=>{for(var Q in X)rK(Z,Q,{get:X[Q],enumerable:!0,configurable:!0,set:i_.bind(X,Q)})};var p=(Z,X)=>()=>(Z&&(X=Z(Z=0)),X);var e0=import.meta.require;var kO={};l0(kO,{lokiDir:()=>j0,homeLokiDir:()=>P4,findRepoRootForVersion:()=>eK,REPO_ROOT:()=>r0});import{resolve as n7,dirname as tK}from"path";import{fileURLToPath as a_}from"url";import{existsSync as GQ}from"fs";import{homedir as s_}from"os";function n_(){let Z=RO;for(let X=0;X<6;X++){if(GQ(n7(Z,"VERSION"))&&GQ(n7(Z,"autonomy/run.sh")))return Z;let Q=tK(Z);if(Q===Z)break;Z=Q}return n7(RO,"..","..","..")}function eK(Z){let X=Z;for(let Q=0;Q<6;Q++){if(GQ(n7(X,"VERSION"))&&GQ(n7(X,"autonomy/run.sh")))return X;let Y=tK(X);if(Y===X)break;X=Y}return n7(Z,"..","..","..")}function j0(){return process.env.LOKI_DIR??n7(process.cwd(),".loki")}function P4(){return n7(s_(),".loki")}var RO,r0;var G8=p(()=>{RO=tK(a_(import.meta.url));r0=n_()});import{readFileSync as o_}from"fs";import{resolve as r_,dirname as t_}from"path";import{fileURLToPath as e_}from"url";function f3(){if(h5!==null)return h5;let Z="8.36.0";if(typeof Z==="string"&&Z.length>0)return h5=Z,h5;try{let X=t_(e_(import.meta.url)),Q=eK(X);h5=o_(r_(Q,"VERSION"),"utf-8").trim()}catch{h5="unknown"}return h5}var h5=null;var HQ=p(()=>{G8()});var bO={};l0(bO,{runOrThrow:()=>Of,run:()=>E0,readStreamCapped:()=>UQ,commandVersion:()=>Af,commandExists:()=>X9,ShellError:()=>Z$,MAX_STDOUT_BYTES:()=>yO});async function UQ(Z,X=yO){let Q=Z.getReader(),Y=new TextDecoder,J="",z=0;try{while(z<X){let{done:K,value:$}=await Q.read();if(K)break;if(!$)continue;if(z+=$.byteLength,z>X){let W=$.byteLength-(z-X);J+=Y.decode($.subarray(0,W),{stream:!0});break}J+=Y.decode($,{stream:!0})}J+=Y.decode()}finally{try{await Q.cancel()}catch{}Q.releaseLock()}return J}async function E0(Z,X={}){let Q=Bun.spawn({cmd:[...Z],stdout:"pipe",stderr:"pipe",env:X.env?{...process.env,...X.env}:process.env,cwd:X.cwd}),Y,J;if(X.timeoutMs&&X.timeoutMs>0)Y=setTimeout(()=>{try{Q.kill("SIGTERM")}catch{}J=setTimeout(()=>{try{Q.kill("SIGKILL")}catch{}},2000)},X.timeoutMs);try{let[z,K,$]=await Promise.all([UQ(Q.stdout),new Response(Q.stderr).text(),Q.exited]);return{stdout:z,stderr:K,exitCode:$}}finally{if(Y)clearTimeout(Y);if(J)clearTimeout(J)}}async function Of(Z,X={}){let Q=await E0(Z,X);if(Q.exitCode!==0)throw new Z$(`command failed (${Q.exitCode}): ${Z.join(" ")}`,Q.exitCode,Q.stdout,Q.stderr);return Q}async function X9(Z){let X=Lf(Z),Q=await E0(["sh","-c",`command -v ${X}`],{timeoutMs:5000});if(Q.exitCode===0)return Q.stdout.trim()||null;return null}function Lf(Z){if(!/^[A-Za-z0-9._/-]+$/.test(Z))throw Error(`refused to shell-escape suspect token: ${Z}`);return Z}async function Af(Z,X="--version"){if(!await X9(Z))return null;let Y=await E0([Z,X],{timeoutMs:5000});if(Y.exitCode!==0)return null;return((Y.stdout||Y.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var yO=16777216,Z$;var x9=p(()=>{Z$=class Z$ extends Error{message;exitCode;stdout;stderr;constructor(Z,X,Q,Y){super(Z);this.message=Z;this.exitCode=X;this.stdout=Q;this.stderr=Y;this.name="ShellError"}}});function o7(Z){return jf?"":Z}var jf,L0,k8,p0,ZV0,i0,H8,Q9,v;var S6=p(()=>{jf=(process.env.NO_COLOR??"").length>0;L0=o7("\x1B[0;31m"),k8=o7("\x1B[0;32m"),p0=o7("\x1B[1;33m"),ZV0=o7("\x1B[0;34m"),i0=o7("\x1B[0;36m"),H8=o7("\x1B[1m"),Q9=o7("\x1B[2m"),v=o7("\x1B[0m")});import{existsSync as xf}from"fs";async function E7(){if(k4!==void 0)return k4;let Z="/opt/homebrew/bin/python3.12";if(xf(Z))return k4=Z,Z;let X=await X9("python3.12");if(X)return k4=X,X;let Q=await X9("python3");return k4=Q,Q}async function Y7(Z,X={}){let Q=await E7();if(!Q)return{stdout:"",stderr:"python3 not found",exitCode:127};return E0([Q,"-c",Z],X)}var k4;var r7=p(()=>{x9()});var ZL={};l0(ZL,{runStatus:()=>Yh});import{existsSync as Y9,readFileSync as v3,readdirSync as iO,statSync as aO}from"fs";import{resolve as h8,basename as sf}from"path";import{homedir as nf}from"os";function sO(Z){let X=Math.trunc(Z);if(X>=1e6)return`${(Math.trunc(X/1e6*10)/10).toFixed(1)}M`;if(X>=1000)return`${(Math.trunc(X/1000*10)/10).toFixed(1)}K`;return String(X)}function nO(Z,X,Q){if(X===0)return null;let Y=Math.trunc(Z*100/X),J=Math.trunc(Z*NQ/X);if(J>NQ)J=NQ;let z=NQ-J,K=k8;if(Y>=80)K=L0;else if(Y>=50)K=p0;let $="=".repeat(Math.max(0,J))+" ".repeat(Math.max(0,z)),W=sO(Z),V=sO(X);return`  ${H8}${Q}${v} ${K}[${$}]${v} ${Y}% (${W} / ${V})`}async function rf(){if(await X9("jq"))return!0;return process.stdout.write(`${L0}Error: jq is required but not installed.${v}
+var h_=Object.create;var{getPrototypeOf:v_,defineProperty:rK,getOwnPropertyNames:g_}=Object;var m_=Object.prototype.hasOwnProperty;function u_(Z){return this[Z]}var p_,d_,c_=(Z,X,Q)=>{var Y=Z!=null&&typeof Z==="object";if(Y){var J=X?p_??=new WeakMap:d_??=new WeakMap,z=J.get(Z);if(z)return z}Q=Z!=null?h_(v_(Z)):{};let K=X||!Z||!Z.__esModule?rK(Q,"default",{value:Z,enumerable:!0}):Q;for(let $ of g_(Z))if(!m_.call(K,$))rK(K,$,{get:u_.bind(Z,$),enumerable:!0});if(Y)J.set(Z,K);return K};var qQ=(Z,X)=>()=>(X||Z((X={exports:{}}).exports,X),X.exports);var l_=(Z)=>Z;function i_(Z,X){this[Z]=l_.bind(null,X)}var l0=(Z,X)=>{for(var Q in X)rK(Z,Q,{get:X[Q],enumerable:!0,configurable:!0,set:i_.bind(X,Q)})};var p=(Z,X)=>()=>(Z&&(X=Z(Z=0)),X);var e0=import.meta.require;var kO={};l0(kO,{lokiDir:()=>j0,homeLokiDir:()=>P4,findRepoRootForVersion:()=>eK,REPO_ROOT:()=>r0});import{resolve as n7,dirname as tK}from"path";import{fileURLToPath as a_}from"url";import{existsSync as GQ}from"fs";import{homedir as s_}from"os";function n_(){let Z=RO;for(let X=0;X<6;X++){if(GQ(n7(Z,"VERSION"))&&GQ(n7(Z,"autonomy/run.sh")))return Z;let Q=tK(Z);if(Q===Z)break;Z=Q}return n7(RO,"..","..","..")}function eK(Z){let X=Z;for(let Q=0;Q<6;Q++){if(GQ(n7(X,"VERSION"))&&GQ(n7(X,"autonomy/run.sh")))return X;let Y=tK(X);if(Y===X)break;X=Y}return n7(Z,"..","..","..")}function j0(){return process.env.LOKI_DIR??n7(process.cwd(),".loki")}function P4(){return n7(s_(),".loki")}var RO,r0;var G8=p(()=>{RO=tK(a_(import.meta.url));r0=n_()});import{readFileSync as o_}from"fs";import{resolve as r_,dirname as t_}from"path";import{fileURLToPath as e_}from"url";function f3(){if(h5!==null)return h5;let Z="8.38.0";if(typeof Z==="string"&&Z.length>0)return h5=Z,h5;try{let X=t_(e_(import.meta.url)),Q=eK(X);h5=o_(r_(Q,"VERSION"),"utf-8").trim()}catch{h5="unknown"}return h5}var h5=null;var HQ=p(()=>{G8()});var bO={};l0(bO,{runOrThrow:()=>Of,run:()=>E0,readStreamCapped:()=>UQ,commandVersion:()=>Af,commandExists:()=>X9,ShellError:()=>Z$,MAX_STDOUT_BYTES:()=>yO});async function UQ(Z,X=yO){let Q=Z.getReader(),Y=new TextDecoder,J="",z=0;try{while(z<X){let{done:K,value:$}=await Q.read();if(K)break;if(!$)continue;if(z+=$.byteLength,z>X){let W=$.byteLength-(z-X);J+=Y.decode($.subarray(0,W),{stream:!0});break}J+=Y.decode($,{stream:!0})}J+=Y.decode()}finally{try{await Q.cancel()}catch{}Q.releaseLock()}return J}async function E0(Z,X={}){let Q=Bun.spawn({cmd:[...Z],stdout:"pipe",stderr:"pipe",env:X.env?{...process.env,...X.env}:process.env,cwd:X.cwd}),Y,J;if(X.timeoutMs&&X.timeoutMs>0)Y=setTimeout(()=>{try{Q.kill("SIGTERM")}catch{}J=setTimeout(()=>{try{Q.kill("SIGKILL")}catch{}},2000)},X.timeoutMs);try{let[z,K,$]=await Promise.all([UQ(Q.stdout),new Response(Q.stderr).text(),Q.exited]);return{stdout:z,stderr:K,exitCode:$}}finally{if(Y)clearTimeout(Y);if(J)clearTimeout(J)}}async function Of(Z,X={}){let Q=await E0(Z,X);if(Q.exitCode!==0)throw new Z$(`command failed (${Q.exitCode}): ${Z.join(" ")}`,Q.exitCode,Q.stdout,Q.stderr);return Q}async function X9(Z){let X=Lf(Z),Q=await E0(["sh","-c",`command -v ${X}`],{timeoutMs:5000});if(Q.exitCode===0)return Q.stdout.trim()||null;return null}function Lf(Z){if(!/^[A-Za-z0-9._/-]+$/.test(Z))throw Error(`refused to shell-escape suspect token: ${Z}`);return Z}async function Af(Z,X="--version"){if(!await X9(Z))return null;let Y=await E0([Z,X],{timeoutMs:5000});if(Y.exitCode!==0)return null;return((Y.stdout||Y.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var yO=16777216,Z$;var x9=p(()=>{Z$=class Z$ extends Error{message;exitCode;stdout;stderr;constructor(Z,X,Q,Y){super(Z);this.message=Z;this.exitCode=X;this.stdout=Q;this.stderr=Y;this.name="ShellError"}}});function o7(Z){return jf?"":Z}var jf,L0,k8,p0,ZV0,i0,H8,Q9,v;var S6=p(()=>{jf=(process.env.NO_COLOR??"").length>0;L0=o7("\x1B[0;31m"),k8=o7("\x1B[0;32m"),p0=o7("\x1B[1;33m"),ZV0=o7("\x1B[0;34m"),i0=o7("\x1B[0;36m"),H8=o7("\x1B[1m"),Q9=o7("\x1B[2m"),v=o7("\x1B[0m")});import{existsSync as xf}from"fs";async function E7(){if(k4!==void 0)return k4;let Z="/opt/homebrew/bin/python3.12";if(xf(Z))return k4=Z,Z;let X=await X9("python3.12");if(X)return k4=X,X;let Q=await X9("python3");return k4=Q,Q}async function Y7(Z,X={}){let Q=await E7();if(!Q)return{stdout:"",stderr:"python3 not found",exitCode:127};return E0([Q,"-c",Z],X)}var k4;var r7=p(()=>{x9()});var ZL={};l0(ZL,{runStatus:()=>Yh});import{existsSync as Y9,readFileSync as v3,readdirSync as iO,statSync as aO}from"fs";import{resolve as h8,basename as sf}from"path";import{homedir as nf}from"os";function sO(Z){let X=Math.trunc(Z);if(X>=1e6)return`${(Math.trunc(X/1e6*10)/10).toFixed(1)}M`;if(X>=1000)return`${(Math.trunc(X/1000*10)/10).toFixed(1)}K`;return String(X)}function nO(Z,X,Q){if(X===0)return null;let Y=Math.trunc(Z*100/X),J=Math.trunc(Z*NQ/X);if(J>NQ)J=NQ;let z=NQ-J,K=k8;if(Y>=80)K=L0;else if(Y>=50)K=p0;let $="=".repeat(Math.max(0,J))+" ".repeat(Math.max(0,z)),W=sO(Z),V=sO(X);return`  ${H8}${Q}${v} ${K}[${$}]${v} ${Y}% (${W} / ${V})`}async function rf(){if(await X9("jq"))return!0;return process.stdout.write(`${L0}Error: jq is required but not installed.${v}
 `),process.stdout.write(`Install with:
 `),process.stdout.write(`  brew install jq    (macOS)
 `),process.stdout.write(`  apt install jq     (Debian/Ubuntu)
@@ -1222,4 +1222,4 @@ Set LOKI_LEGACY_BASH=1 to force the bash CLI for every command.
 `),2}case"start":{let{runStart:Y}=await Promise.resolve().then(() => (b_(),y_));return Y(Q)}default:return process.stderr.write(`Unknown command: ${X}
 `),process.stderr.write(__),2}}cO();process.on("SIGINT",()=>process.exit(130));process.on("SIGTERM",()=>process.exit(143));var fW0=await _W0(Bun.argv.slice(2));process.exit(fW0);
 
-//# debugId=71B353EB78588AAE64756E2164756E21
+//# debugId=D3A7B864D186CB7464756E2164756E21

package/mcp/__init__.py

@@ -75,4 +75,4 @@ try:
 except ImportError:
     __all__ = ['mcp']
 
-__version__ = '8.36.0'
+__version__ = '8.38.0'

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "loki-mode",
   "mcpName": "io.github.asklokesh/loki-mode",
-  "version": "8.36.0",
+  "version": "8.38.0",
   "description": "Loki Mode by Autonomi. Autonomous spec-to-product system: takes a PRD, GitHub issue, OpenAPI/JSON/YAML, or one-line brief to a deployed app via the RARV-C closure loop with 8 quality gates. Provider-agnostic (Claude Code, OpenAI Codex, Cline, Aider).",
   "keywords": [
     "agent",
@@ -106,7 +106,11 @@
     "web-app/migrations/",
     "web-app/Dockerfile",
     "web-app/docker-compose.purple-lab.yml",
-    "web-app/deploy/"
+    "web-app/deploy/",
+    "tests/detect-mock-problems.sh",
+    "tests/detect-test-mutations.sh",
+    "tests/detect-semantic-test-problems.sh",
+    "tests/detect-invariant-violations.sh"
   ],
   "scripts": {
     "prepack": "find . -type d -name __pycache__ -exec rm -rf {} + 2>/dev/null; find . -name '*.pyc' -delete 2>/dev/null; if command -v bun >/dev/null 2>&1; then (cd loki-ts && bun install --production && bun run build) || echo 'WARN: loki-ts build failed, using existing dist if present'; else echo 'WARN: bun not on PATH, skipping loki-ts build (using committed dist if present)'; fi; true",

package/plugins/loki-mode/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "loki-mode",
   "displayName": "Loki Mode",
-  "version": "8.36.0",
+  "version": "8.38.0",
   "description": "Autonomous spec-to-product build system with a built-in trust layer (RARV-C closure loop, 8 quality gates, completion council). Ships Loki's spec-hardening, drift-detection, and deterministic PR verification commands plus the Loki MCP server.",
   "author": {
     "name": "Autonomi",

package/tests/detect-invariant-violations.sh

@@ -0,0 +1,359 @@
+#!/usr/bin/env bash
+# Invariant Violation Detector - spec-independent invariant checks
+#
+# Usage: ./tests/detect-invariant-violations.sh [--strict]
+#   --strict: Exit 1 iff CRITICAL or HIGH findings exist (for CI). MEDIUM/LOW
+#             never block. This mirrors the mock-detector --strict contract.
+#
+# WHAT THIS IS
+#   This detector asserts a small set of invariants that are TRUE regardless of
+#   what the spec says. They catch the "spec was silent and the model guessed
+#   wrong" failure mode: code that ships a hardcoded secret, or logs PII, is
+#   wrong no matter what the PRD asked for. These are deterministic, near-zero
+#   false-positive pattern checks over the PRODUCED SOURCE (not test files).
+#
+#   This is NOT a fast-check / hypothesis test generator (the "Kiro Pattern"
+#   documented in skills/testing.md). Generating property-based tests is a
+#   larger feature. This detector instead makes deterministic invariant
+#   ASSERTIONS over the produced code that hold regardless of spec.
+#
+# WHAT IT CATCHES (deterministic, blocking under --strict)
+#   1. Committed secrets in source/logs: known-prefix high-signal credentials
+#      (AWS access keys, private-key PEM blocks, GitHub/Slack/Google/Stripe/
+#      Anthropic tokens). These have near-zero false positives.        [CRITICAL]
+#   2. PII in logs: an email-shaped literal passed to a log/print call.   [HIGH]
+#
+# WHAT IT CATCHES (advisory only, never blocks)
+#   3. Generic "secret-like" var assignment (a var named secret/token/password/
+#      apikey assigned a long opaque literal). FP-prone, so MEDIUM not HIGH.
+#   4. Logging an interpolated email-bearing variable (e.g. user.email).   [LOW]
+#
+# WHAT IT DEFERS (honest: NOT implemented, would be flaky as a static grep)
+#   - Unhandled-error path on the happy route. A grep cannot do control-flow
+#     analysis; a "no try/catch near await" heuristic is noise. Deferred to a
+#     real analysis pass (LSP diagnostics / typed exhaustiveness), not faked here.
+#   - Idempotency / round-trip invariants. Not statically detectable in any
+#     deterministic way worth shipping; it requires executing generated tests
+#     (the larger fast-check/metamorphic feature). Deferred, not faked.
+#
+# PLACEHOLDER SAFETY (false-positive avoidance)
+#   Generated code legitimately contains placeholders: AWS's own documented
+#   AKIAIOSFODNN7EXAMPLE, sk-test-..., your-api-key-here, .env.example samples.
+#   Lines matching the placeholder allowlist (EXAMPLE / your- / xxxx / placeholder
+#   / changeme / redacted / dummy / sample / <...>) are NOT flagged. Files named
+#   *.example / *.sample / *.template and *.md docs are skipped for the secret
+#   checks (they routinely show fake credentials for illustration).
+#
+# SCAN SURFACE
+#   Source files only. Extensions: ts js tsx jsx py go rb java rs php sh env yml
+#   yaml json plus *.log files (the "logs" in "no secrets in source/logs").
+#   node_modules, .git, dist, build, vendor, coverage, Python venvs (.venv /
+#   venv / __pycache__), and Loki's own .loki/ telemetry and .claude/ (agent
+#   worktrees) are excluded. These directories are pruned at the find level so
+#   the scan never descends into them. Test files are
+#   OUT OF SCOPE for all checks (the
+#   invariant is framed for source/logs): the exclusion covers every ecosystem's
+#   convention -- *.test.* / *.spec.*, test_*.py / *_test.py, test-*.sh,
+#   *_test.go, and anything under an anchored tests/ / __tests__/ / spec/ dir.
+#   Security/redaction test fixtures routinely embed fake credentials on purpose.
+#   Comprehensive secret scanning of generated TESTS is a separate feature (P3-4).
+#
+# ----------------------------------------------------------------------------
+# HOW TO WIRE THIS AS A GATE (mirror enforce_mock_integrity in autonomy/run.sh)
+# ----------------------------------------------------------------------------
+# Add a wrapper alongside enforce_mock_integrity() (autonomy/run.sh:7932) and
+# call it where enforce_mock_integrity is called (autonomy/run.sh:14676). The
+# detector honors LOKI_SCAN_DIR (see below), so the wrapper exports it to the
+# target project, exactly like the mock gate. Suggested wrapper:
+#
+#   enforce_invariant_integrity() {
+#       local loki_dir="${TARGET_DIR:-.}/.loki"
+#       local quality_dir="$loki_dir/quality"
+#       mkdir -p "$quality_dir"
+#       local findings_file="$quality_dir/invariant-findings.txt"
+#       local detector="$SCRIPT_DIR/../tests/detect-invariant-violations.sh"
+#       local gate_timeout="${LOKI_GATE_TIMEOUT:-300}"
+#       [ "${LOKI_GATE_INVARIANT:-true}" = "false" ] && return 0
+#       if [ ! -f "$detector" ]; then
+#           log_info "Invariant gate: detector not found, skipping (inconclusive)"
+#           rm -f "$findings_file" 2>/dev/null || true
+#           return 0
+#       fi
+#       local output rc
+#       output=$(cd "${TARGET_DIR:-.}" && LOKI_SCAN_DIR="${TARGET_DIR:-.}" \
+#           timeout "$gate_timeout" bash "$detector" --strict 2>&1)
+#       rc=$?
+#       if [ "$rc" -eq 124 ]; then
+#           log_warn "Invariant gate: detector timed out after ${gate_timeout}s -- inconclusive"
+#           rm -f "$findings_file" 2>/dev/null || true
+#           return 0
+#       fi
+#       if [ "$rc" -ne 0 ]; then
+#           { echo "# Invariant findings (CRITICAL/HIGH block this iteration)"
+#             echo "$output" | grep -E '\[(CRITICAL|HIGH|MEDIUM|LOW)\]' || true
+#           } > "$findings_file"
+#           log_warn "Invariant gate: CRITICAL/HIGH invariant violations detected -- BLOCK"
+#           return 1
+#       fi
+#       local med_low
+#       med_low=$(echo "$output" | grep -E '\[(MEDIUM|LOW)\]' || true)
+#       if [ -n "$med_low" ]; then
+#           { echo "# Invariant advisory findings (MED/LOW, non-blocking)"
+#             echo "$med_low"; } > "$findings_file"
+#       else
+#           rm -f "$findings_file" 2>/dev/null || true
+#       fi
+#       log_info "Invariant gate: PASS"
+#       return 0
+#   }
+#
+# Opt out with LOKI_GATE_INVARIANT=false. Document the new gate row in
+# skills/quality-gates.md and cross-reference it from the Kiro Pattern section
+# of skills/testing.md (which currently documents property testing with zero
+# implementation). Do NOT edit run.sh from this script; the integrator wires it.
+# ============================================================================
+
+set -uo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+# Directory to scan. Defaults to the repo containing this script (so
+# run-all-tests.sh keeps scanning loki-mode unchanged). A run.sh gate wrapper
+# MUST set LOKI_SCAN_DIR to the target project; cwd is NOT used by find here,
+# so `cd TARGET_DIR` alone does not redirect the scan.
+PROJECT_DIR="${LOKI_SCAN_DIR:-$(cd "$SCRIPT_DIR/.." && pwd)}"
+STRICT="${1:-}"
+
+RED='\033[0;31m'
+YELLOW='\033[1;33m'
+GREEN='\033[0;32m'
+CYAN='\033[0;36m'
+NC='\033[0m'
+
+CRITICAL=0
+HIGH=0
+MEDIUM=0
+LOW=0
+
+echo "=========================================="
+echo "Invariant Violation Detector"
+echo "=========================================="
+echo ""
+
+report() {
+    local severity="$1"
+    local file="$2"
+    local line="$3"
+    local message="$4"
+
+    case "$severity" in
+        CRITICAL) echo -e "${RED}[CRITICAL]${NC} $file:$line - $message"; ((CRITICAL++)) ;;
+        HIGH)     echo -e "${RED}[HIGH]${NC}     $file:$line - $message"; ((HIGH++)) ;;
+        MEDIUM)   echo -e "${YELLOW}[MEDIUM]${NC}   $file:$line - $message"; ((MEDIUM++)) ;;
+        LOW)      echo -e "${CYAN}[LOW]${NC}      $file:$line - $message"; ((LOW++)) ;;
+    esac
+}
+
+# Placeholder allowlist: lines matching these are NOT real secrets. Covers AWS's
+# own documented example key, common scaffolding placeholders, and redaction.
+PLACEHOLDER_RE='EXAMPLE|example\.com|your[-_]|xxxx|placeholder|changeme|change-me|REPLACE|<[^>]*>|dummy|sample|redact|sk-test-|test[-_]key|fake|FIXME|TODO|\*\*\*\*'
+
+is_placeholder() {
+    # $1 = the matched line. Returns 0 (true) if it looks like a placeholder.
+    echo "$1" | grep -qiE "$PLACEHOLDER_RE"
+}
+
+# Build the list of source files to scan once. Source extensions only; never
+# *.test.* (that is the mock detector's surface). Exclude vendored/build dirs
+# and Loki's own .loki/ telemetry.
+collect_source_files() {
+    # Prune the heavy/vendored/build directories AT THE FIND LEVEL so find never
+    # descends into them (a post-filter `grep -v` still enumerates every file
+    # under node_modules first -- 100k+ files on a real repo -- and hangs). The
+    # pruned set mirrors the SCAN SURFACE comment: node_modules, .git, dist,
+    # build, vendor, .loki, .claude, coverage, .venv/venv, __pycache__.
+    # (.claude holds Loki's own agent worktrees -- full repo copies -- so it is
+    # excluded like .loki; .venv/venv/__pycache__ are Python vendored deps, the
+    # same category as node_modules.)
+    # Test-file / test-dir exclusion stays as a
+    # post-filter grep below: those are anchored file-name regexes (Test 7 covers
+    # *.test.js / test_*.py at a dir root, not just tests/ subdirs) that -prune
+    # cannot express, and keeping them in one place avoids two sources of truth.
+    find "$PROJECT_DIR" \
+        \( -type d \( -name node_modules -o -name .git -o -name dist \
+            -o -name build -o -name vendor -o -name .loki -o -name .claude \
+            -o -name coverage -o -name .venv -o -name venv \
+            -o -name __pycache__ \) \
+            -prune \) \
+        -o \( -type f \
+        \( -name '*.ts' -o -name '*.tsx' -o -name '*.js' -o -name '*.jsx' \
+        -o -name '*.py' -o -name '*.go' -o -name '*.rb' -o -name '*.java' \
+        -o -name '*.rs' -o -name '*.php' -o -name '*.sh' -o -name '*.env' \
+        -o -name '*.yml' -o -name '*.yaml' -o -name '*.json' -o -name '*.log' \) \
+        -print \) \
+        2>/dev/null \
+        | grep -vE '(^|/)(tests?|__tests__|spec|specs)(/|$)' \
+        | grep -vE '\.(test|spec)\.[a-z]+$' \
+        | grep -vE '(^|/)(test[_-][^/]*|[^/]*[_-]test)\.(py|sh|go|rb|js|ts)$' || true
+}
+
+# ---------------------------------------------------------------------------
+# Invariant 1: committed secrets (known high-signal credential prefixes).
+# Near-zero false positives. CRITICAL because a leaked live credential is the
+# highest-severity spec-independent defect.
+# ---------------------------------------------------------------------------
+echo -e "${CYAN}Scanning for committed secrets (known credential formats)...${NC}"
+
+# Each entry: a PCRE-ish ERE for a credential format with a distinctive prefix.
+SECRET_PATTERNS=(
+    'AKIA[0-9A-Z]{16}'                       # AWS access key id
+    'ASIA[0-9A-Z]{16}'                       # AWS temporary access key id
+    '-----BEGIN[ A-Z]*PRIVATE KEY-----'      # PEM private key block
+    'ghp_[A-Za-z0-9]{36}'                    # GitHub personal access token
+    'gho_[A-Za-z0-9]{36}'                    # GitHub OAuth token
+    'ghs_[A-Za-z0-9]{36}'                    # GitHub server-to-server token
+    'github_pat_[A-Za-z0-9_]{60,}'           # GitHub fine-grained PAT
+    'xox[baprs]-[A-Za-z0-9-]{10,}'           # Slack token
+    'AIza[0-9A-Za-z_-]{35}'                  # Google API key
+    'sk-ant-[A-Za-z0-9-]{20,}'               # Anthropic API key
+    'sk_live_[A-Za-z0-9]{20,}'               # Stripe live secret key
+    'rk_live_[A-Za-z0-9]{20,}'               # Stripe live restricted key
+)
+
+# Combined alternation of every secret pattern, used as a single-grep prefilter.
+# Most files match nothing, so one `grep -qE` per file lets us skip the 12-pattern
+# inner loop entirely except on the rare file that contains a candidate. This is
+# behavior-identical: the inner loop still runs all 12 patterns and reports each
+# match with the exact same /$pat/ message; the prefilter only avoids spawning 12
+# greps per clean file (the dominant cost on a large tree).
+SECRET_COMBINED_RE="$(IFS='|'; printf '%s' "${SECRET_PATTERNS[*]}")"
+
+while IFS= read -r src_file; do
+    [ -z "$src_file" ] && continue
+    rel_path="${src_file#"$PROJECT_DIR"/}"
+    # Skip illustration files for the secret check: docs and *.example/.sample/
+    # .template routinely show fake credentials on purpose.
+    case "$rel_path" in
+        *.md|*.markdown|*.example|*.sample|*.template|*.example.*|*.dist) continue ;;
+    esac
+    # Prefilter: skip files with no candidate at all (the common case).
+    grep -qE -- "$SECRET_COMBINED_RE" "$src_file" 2>/dev/null || continue
+    for pat in "${SECRET_PATTERNS[@]}"; do
+        while IFS=: read -r lineno line; do
+            [ -z "$lineno" ] && continue
+            if is_placeholder "$line"; then
+                continue
+            fi
+            report "CRITICAL" "$rel_path" "$lineno" "Hardcoded secret matching credential format /$pat/"
+        done < <(grep -nE -- "$pat" "$src_file" 2>/dev/null)
+    done
+done < <(collect_source_files)
+
+# ---------------------------------------------------------------------------
+# Invariant 2: PII (email literal) passed to a log/print statement. HIGH.
+# Scoped to log calls only -- an email in a string elsewhere may be legitimate
+# (a sample, a mailto:), but writing one into a log statement is a leak.
+# ---------------------------------------------------------------------------
+echo -e "${CYAN}Scanning for PII (email literals) in log statements...${NC}"
+
+# A log/print call on the line ...
+LOG_CALL_RE='(console\.(log|info|warn|error|debug)|logger?\.(log|info|warn|error|debug|trace)|System\.out\.print|fmt\.(Print|Printf|Println)|\bprint\(|\bprintln!?|\becho\b|log\.(Print|Printf|Println|Info|Error|Warn|Debug))'
+# ... an email-shaped token (local@domain.tld). The email need not be adjacent
+# to the opening quote (it is commonly embedded in a larger message string, e.g.
+# "user logged in: a@b.com"), so we match the email token anywhere on the line.
+EMAIL_TOKEN_RE='[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}'
+# ... and a string quote present on the line (so it is a literal, not a bare
+# variable reference, which is handled by the LOW advisory check below).
+QUOTE_RE='["'"'"'\`]'
+
+while IFS= read -r src_file; do
+    [ -z "$src_file" ] && continue
+    rel_path="${src_file#"$PROJECT_DIR"/}"
+    while IFS=: read -r lineno line; do
+        [ -z "$lineno" ] && continue
+        # Must be a log call, contain an email token, and contain a string quote.
+        if echo "$line" | grep -qE "$LOG_CALL_RE" \
+            && echo "$line" | grep -qE "$QUOTE_RE"; then
+            # Skip placeholder/example emails (your-, example.com via allowlist).
+            if is_placeholder "$line"; then
+                continue
+            fi
+            report "HIGH" "$rel_path" "$lineno" "Email literal written to a log/print statement (PII in logs)"
+        fi
+    done < <(grep -nE "$EMAIL_TOKEN_RE" "$src_file" 2>/dev/null)
+done < <(collect_source_files)
+
+# ---------------------------------------------------------------------------
+# Invariant 3 (advisory, MEDIUM): generic secret-like assignment. A variable
+# named secret/token/password/apikey assigned a long opaque string literal.
+# FP-prone (could be a placeholder or a non-secret), so MEDIUM, never blocks.
+# ---------------------------------------------------------------------------
+echo -e "${CYAN}Scanning for generic secret-like assignments (advisory)...${NC}"
+
+GENERIC_SECRET_RE='(secret|token|passwd|password|api[_-]?key|apikey|access[_-]?key|private[_-]?key|client[_-]?secret)["'"'"']?\s*[:=]\s*["'"'"'][A-Za-z0-9/+_=-]{16,}["'"'"']'
+
+while IFS= read -r src_file; do
+    [ -z "$src_file" ] && continue
+    rel_path="${src_file#"$PROJECT_DIR"/}"
+    case "$rel_path" in
+        *.md|*.markdown|*.example|*.sample|*.template|*.example.*|*.dist) continue ;;
+    esac
+    while IFS=: read -r lineno line; do
+        [ -z "$lineno" ] && continue
+        if is_placeholder "$line"; then
+            continue
+        fi
+        # Skip obvious env-var indirection (not a hardcoded literal value).
+        if echo "$line" | grep -qE 'process\.env|os\.environ|getenv|ENV\[|System\.getenv'; then
+            continue
+        fi
+        report "MEDIUM" "$rel_path" "$lineno" "Secret-like variable assigned an opaque literal -- verify not a hardcoded credential"
+    done < <(grep -niE "$GENERIC_SECRET_RE" "$src_file" 2>/dev/null)
+done < <(collect_source_files)
+
+# ---------------------------------------------------------------------------
+# Invariant 4 (advisory, LOW): logging an interpolated email-bearing variable
+# (e.g. user.email, customerEmail). Cannot prove it is PII statically, so LOW.
+# ---------------------------------------------------------------------------
+echo -e "${CYAN}Scanning for logged email-bearing variables (advisory)...${NC}"
+
+EMAIL_VAR_RE='(\.email\b|[Ee]mailAddress|user[Ee]mail|customer[Ee]mail)'
+
+while IFS= read -r src_file; do
+    [ -z "$src_file" ] && continue
+    rel_path="${src_file#"$PROJECT_DIR"/}"
+    while IFS=: read -r lineno line; do
+        [ -z "$lineno" ] && continue
+        if echo "$line" | grep -qE "$LOG_CALL_RE" && echo "$line" | grep -qE "$EMAIL_VAR_RE"; then
+            report "LOW" "$rel_path" "$lineno" "Email-bearing variable referenced in a log/print statement -- review for PII leak"
+        fi
+    done < <(grep -nE "$EMAIL_VAR_RE" "$src_file" 2>/dev/null)
+done < <(collect_source_files)
+
+# Summary
+echo ""
+echo "=========================================="
+TOTAL=$((CRITICAL + HIGH + MEDIUM + LOW))
+echo "Results: $TOTAL finding(s)"
+echo "  CRITICAL: $CRITICAL"
+echo "  HIGH:     $HIGH"
+echo "  MEDIUM:   $MEDIUM"
+echo "  LOW:      $LOW"
+echo "=========================================="
+echo ""
+echo "Deferred (not implemented -- would be flaky as a static grep):"
+echo "  - Unhandled-error on happy path (needs control-flow / LSP diagnostics)"
+echo "  - Idempotency / round-trip (needs executing generated tests)"
+
+if [ "$STRICT" = "--strict" ]; then
+    if [ $CRITICAL -gt 0 ] || [ $HIGH -gt 0 ]; then
+        echo ""
+        echo -e "${RED}GATE FAILED: $CRITICAL critical + $HIGH high findings${NC}"
+        exit 1
+    fi
+fi
+
+if [ $TOTAL -eq 0 ]; then
+    echo -e "${GREEN}All scanned source passes invariant checks.${NC}"
+fi
+
+exit 0