@neurcode-ai/governance-runtime 0.1.0

package/dist/constraints.d.ts

@@ -0,0 +1,19 @@
+export type DeterministicConstraintSource = 'intent' | 'policy';
+export interface DeterministicConstraintRule {
+    id: string;
+    source: DeterministicConstraintSource;
+    statement: string;
+    displayName: string;
+    pattern: RegExp;
+    matchToken: string;
+}
+export interface DeterministicConstraintCompilation {
+    rules: DeterministicConstraintRule[];
+    unmatchedStatements: string[];
+}
+export interface DeterministicConstraintCompilationInput {
+    intentConstraints?: string;
+    policyRules?: string[];
+}
+export declare function compileDeterministicConstraints(input: DeterministicConstraintCompilationInput): DeterministicConstraintCompilation;
+//# sourceMappingURL=constraints.d.ts.map

package/dist/constraints.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constraints.d.ts","sourceRoot":"","sources":["../src/constraints.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,6BAA6B,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAEhE,MAAM,WAAW,2BAA2B;IAC1C,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,6BAA6B,CAAC;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,kCAAkC;IACjD,KAAK,EAAE,2BAA2B,EAAE,CAAC;IACrC,mBAAmB,EAAE,MAAM,EAAE,CAAC;CAC/B;AAED,MAAM,WAAW,uCAAuC;IACtD,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAoJD,wBAAgB,+BAA+B,CAC7C,KAAK,EAAE,uCAAuC,GAC7C,kCAAkC,CAapC"}

package/dist/constraints.js

@@ -0,0 +1,132 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.compileDeterministicConstraints = compileDeterministicConstraints;
+const PROHIBITIVE_PATTERN = /\b(no|do not|don't|without|avoid|ban|disallow|never|must not)\b/i;
+const CONSTRAINT_TEMPLATES = [
+    {
+        id: 'no_useeffect',
+        displayName: 'No useEffect',
+        triggerTokens: ['useeffect'],
+        pattern: /\buseEffect\s*\(/i,
+        matchToken: 'useeffect',
+    },
+    {
+        id: 'no_console_log',
+        displayName: 'No console.log',
+        triggerTokens: ['console.log', 'console log'],
+        pattern: /\bconsole\.log\s*\(/i,
+        matchToken: 'console.log',
+    },
+    {
+        id: 'no_debugger',
+        displayName: 'No debugger statements',
+        triggerTokens: ['debugger'],
+        pattern: /\bdebugger\b/i,
+        matchToken: 'debugger',
+    },
+    {
+        id: 'no_eval',
+        displayName: 'No eval usage',
+        triggerTokens: ['eval'],
+        pattern: /\beval\s*\(/i,
+        matchToken: 'eval',
+    },
+    {
+        id: 'no_process_env',
+        displayName: 'No process.env access',
+        triggerTokens: ['process.env', 'process env'],
+        pattern: /\bprocess\.env\b/i,
+        matchToken: 'process.env',
+    },
+    {
+        id: 'no_any_type',
+        displayName: 'No any type',
+        triggerTokens: [' any', 'type any', ': any', '<any>'],
+        pattern: /(:\s*any\b|<\s*any\s*>|\bArray<any>\b|\bPromise<any>\b)/i,
+        matchToken: 'any',
+    },
+    {
+        id: 'no_todo_fixme',
+        displayName: 'No TODO/FIXME markers',
+        triggerTokens: ['todo', 'fixme'],
+        pattern: /\b(TODO|FIXME)\b/i,
+        matchToken: 'todo/fixme',
+    },
+];
+function splitStatements(raw) {
+    return raw
+        .split(/[\n;]+/)
+        .map((part) => part.trim())
+        .filter(Boolean);
+}
+function normalizeStatement(statement) {
+    return statement
+        .replace(/\s+/g, ' ')
+        .trim()
+        .toLowerCase();
+}
+function statementMatchesTemplate(normalizedStatement, template) {
+    return template.triggerTokens.some((token) => normalizedStatement.includes(token));
+}
+function createRule(template, source, statement) {
+    return {
+        id: `${source}:${template.id}`,
+        source,
+        statement,
+        displayName: template.displayName,
+        pattern: template.pattern,
+        matchToken: template.matchToken,
+    };
+}
+function compileStatements(statements, source) {
+    const rules = [];
+    const unmatchedStatements = [];
+    for (const rawStatement of statements) {
+        const normalized = normalizeStatement(rawStatement);
+        if (!normalized) {
+            continue;
+        }
+        const requiresProhibitiveLanguage = source === 'intent';
+        if (requiresProhibitiveLanguage && !PROHIBITIVE_PATTERN.test(normalized)) {
+            continue;
+        }
+        const matches = CONSTRAINT_TEMPLATES.filter((template) => statementMatchesTemplate(normalized, template));
+        if (matches.length === 0) {
+            unmatchedStatements.push(rawStatement);
+            continue;
+        }
+        for (const match of matches) {
+            rules.push(createRule(match, source, rawStatement));
+        }
+    }
+    return {
+        rules,
+        unmatchedStatements,
+    };
+}
+function dedupeRules(rules) {
+    const seen = new Set();
+    const deduped = [];
+    for (const rule of rules) {
+        const key = `${rule.id}::${rule.statement.toLowerCase()}`;
+        if (seen.has(key)) {
+            continue;
+        }
+        seen.add(key);
+        deduped.push(rule);
+    }
+    return deduped;
+}
+function compileDeterministicConstraints(input) {
+    const intentStatements = splitStatements(input.intentConstraints || '');
+    const policyStatements = (input.policyRules || [])
+        .map((rule) => String(rule || '').trim())
+        .filter(Boolean);
+    const compiledIntent = compileStatements(intentStatements, 'intent');
+    const compiledPolicy = compileStatements(policyStatements, 'policy');
+    return {
+        rules: dedupeRules([...compiledIntent.rules, ...compiledPolicy.rules]),
+        unmatchedStatements: [...compiledIntent.unmatchedStatements, ...compiledPolicy.unmatchedStatements],
+    };
+}
+//# sourceMappingURL=constraints.js.map

package/dist/constraints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constraints.js","sourceRoot":"","sources":["../src/constraints.ts"],"names":[],"mappings":";;AAuKA,0EAeC;AAzJD,MAAM,mBAAmB,GAAG,kEAAkE,CAAC;AAE/F,MAAM,oBAAoB,GAAyB;IACjD;QACE,EAAE,EAAE,cAAc;QAClB,WAAW,EAAE,cAAc;QAC3B,aAAa,EAAE,CAAC,WAAW,CAAC;QAC5B,OAAO,EAAE,mBAAmB;QAC5B,UAAU,EAAE,WAAW;KACxB;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,WAAW,EAAE,gBAAgB;QAC7B,aAAa,EAAE,CAAC,aAAa,EAAE,aAAa,CAAC;QAC7C,OAAO,EAAE,sBAAsB;QAC/B,UAAU,EAAE,aAAa;KAC1B;IACD;QACE,EAAE,EAAE,aAAa;QACjB,WAAW,EAAE,wBAAwB;QACrC,aAAa,EAAE,CAAC,UAAU,CAAC;QAC3B,OAAO,EAAE,eAAe;QACxB,UAAU,EAAE,UAAU;KACvB;IACD;QACE,EAAE,EAAE,SAAS;QACb,WAAW,EAAE,eAAe;QAC5B,aAAa,EAAE,CAAC,MAAM,CAAC;QACvB,OAAO,EAAE,cAAc;QACvB,UAAU,EAAE,MAAM;KACnB;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,WAAW,EAAE,uBAAuB;QACpC,aAAa,EAAE,CAAC,aAAa,EAAE,aAAa,CAAC;QAC7C,OAAO,EAAE,mBAAmB;QAC5B,UAAU,EAAE,aAAa;KAC1B;IACD;QACE,EAAE,EAAE,aAAa;QACjB,WAAW,EAAE,aAAa;QAC1B,aAAa,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC;QACrD,OAAO,EAAE,0DAA0D;QACnE,UAAU,EAAE,KAAK;KAClB;IACD;QACE,EAAE,EAAE,eAAe;QACnB,WAAW,EAAE,uBAAuB;QACpC,aAAa,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;QAChC,OAAO,EAAE,mBAAmB;QAC5B,UAAU,EAAE,YAAY;KACzB;CACF,CAAC;AAEF,SAAS,eAAe,CAAC,GAAW;IAClC,OAAO,GAAG;SACP,KAAK,CAAC,QAAQ,CAAC;SACf,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,kBAAkB,CAAC,SAAiB;IAC3C,OAAO,SAAS;SACb,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE;SACN,WAAW,EAAE,CAAC;AACnB,CAAC;AAED,SAAS,wBAAwB,CAAC,mBAA2B,EAAE,QAA4B;IACzF,OAAO,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,mBAAmB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;AACrF,CAAC;AAED,SAAS,UAAU,CACjB,QAA4B,EAC5B,MAAqC,EACrC,SAAiB;IAEjB,OAAO;QACL,EAAE,EAAE,GAAG,MAAM,IAAI,QAAQ,CAAC,EAAE,EAAE;QAC9B,MAAM;QACN,SAAS;QACT,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,UAAU,EAAE,QAAQ,CAAC,UAAU;KAChC,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CACxB,UAAoB,EACpB,MAAqC;IAErC,MAAM,KAAK,GAAkC,EAAE,CAAC;IAChD,MAAM,mBAAmB,GAAa,EAAE,CAAC;IAEzC,KAAK,MAAM,YAAY,IAAI,UAAU,EAAE,CAAC;QACtC,MAAM,UAAU,GAAG,kBAAkB,CAAC,YAAY,CAAC,CAAC;QACpD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,SAAS;QACX,CAAC;QAED,MAAM,2BAA2B,GAAG,MAAM,KAAK,QAAQ,CAAC;QACxD,IAAI,2BAA2B,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACzE,SAAS;QACX,CAAC;QAED,MAAM,OAAO,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,wBAAwB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC1G,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,mBAAmB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACvC,SAAS;QACX,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK;QACL,mBAAmB;KACpB,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAAoC;IACvD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,OAAO,GAAkC,EAAE,CAAC;IAElD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC;QAC1D,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAClB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAgB,+BAA+B,CAC7C,KAA8C;IAE9C,MAAM,gBAAgB,GAAG,eAAe,CAAC,KAAK,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;IACxE,MAAM,gBAAgB,GAAG,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC;SAC/C,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;SACxC,MAAM,CAAC,OAAO,CAAC,CAAC;IAEnB,MAAM,cAAc,GAAG,iBAAiB,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;IACrE,MAAM,cAAc,GAAG,iBAAiB,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;IAErE,OAAO;QACL,KAAK,EAAE,WAAW,CAAC,CAAC,GAAG,cAAc,CAAC,KAAK,EAAE,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;QACtE,mBAAmB,EAAE,CAAC,GAAG,cAAc,CAAC,mBAAmB,EAAE,GAAG,cAAc,CAAC,mBAAmB,CAAC;KACpG,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,78 @@
+export type PlanVerdict = 'PASS' | 'FAIL' | 'WARN';
+export { compileDeterministicConstraints, type DeterministicConstraintCompilation, type DeterministicConstraintCompilationInput, type DeterministicConstraintRule, type DeterministicConstraintSource, } from './constraints';
+import { type DeterministicConstraintRule } from './constraints';
+export interface PlanFileScopeItem {
+    path: string;
+    action: string;
+}
+export interface PlanDiffLine {
+    type: 'context' | 'added' | 'removed';
+    content: string;
+    lineNumber?: number;
+}
+export interface PlanDiffHunk {
+    oldStart: number;
+    oldLines: number;
+    newStart: number;
+    newLines: number;
+    lines: PlanDiffLine[];
+}
+export interface PlanDiffFile {
+    path: string;
+    oldPath?: string;
+    changeType: 'add' | 'delete' | 'modify' | 'rename';
+    added: number;
+    removed: number;
+    hunks?: PlanDiffHunk[];
+}
+export interface PlanDiffStats {
+    totalAdded: number;
+    totalRemoved: number;
+    totalFiles: number;
+}
+export interface PlanVerificationInput {
+    planFiles: PlanFileScopeItem[];
+    changedFiles: PlanDiffFile[];
+    diffStats?: PlanDiffStats;
+    intentConstraints?: string;
+    policyRules?: string[];
+    extraConstraintRules?: DeterministicConstraintRule[];
+}
+export interface PlanDiffSummary {
+    added: number;
+    removed: number;
+    files: Array<{
+        path: string;
+        oldPath?: string;
+        changeType: string;
+        added: number;
+        removed: number;
+        hunks: PlanDiffHunk[];
+    }>;
+    bloatFiles: string[];
+    plannedFilesModified: number;
+    totalPlannedFiles: number;
+}
+export interface PlanVerificationResult {
+    adherenceScore: number;
+    bloatCount: number;
+    bloatFiles: string[];
+    plannedFilesModified: number;
+    totalPlannedFiles: number;
+    scopeGuardPassed: boolean;
+    constraintViolations: string[];
+    verdict: PlanVerdict;
+    diffSummary: PlanDiffSummary;
+    message: string;
+}
+export declare function extractPlannedFilePaths(planFiles: PlanFileScopeItem[]): string[];
+export declare function resolvePlanVerdict(input: {
+    bloatCount: number;
+    adherenceScore: number;
+    totalPlannedFiles: number;
+    plannedFilesModified: number;
+    constraintViolations: string[];
+}): PlanVerdict;
+export declare function buildPlanVerificationMessage(result: Pick<PlanVerificationResult, 'constraintViolations' | 'totalPlannedFiles' | 'plannedFilesModified' | 'verdict' | 'adherenceScore' | 'bloatCount'>): string;
+export declare function evaluatePlanVerification(input: PlanVerificationInput): PlanVerificationResult;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AACnD,OAAO,EACL,+BAA+B,EAC/B,KAAK,kCAAkC,EACvC,KAAK,uCAAuC,EAC5C,KAAK,2BAA2B,EAChC,KAAK,6BAA6B,GACnC,MAAM,eAAe,CAAC;AACvB,OAAO,EAAmC,KAAK,2BAA2B,EAAE,MAAM,eAAe,CAAC;AAElG,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,SAAS,GAAG,OAAO,GAAG,SAAS,CAAC;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,YAAY,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,KAAK,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACnD,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,YAAY,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,iBAAiB,EAAE,CAAC;IAC/B,YAAY,EAAE,YAAY,EAAE,CAAC;IAC7B,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,oBAAoB,CAAC,EAAE,2BAA2B,EAAE,CAAC;CACtD;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,KAAK,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,EAAE,YAAY,EAAE,CAAC;KACvB,CAAC,CAAC;IACH,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,sBAAsB;IACrC,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,OAAO,EAAE,WAAW,CAAC;IACrB,WAAW,EAAE,eAAe,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC;CACjB;AAMD,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,iBAAiB,EAAE,GAAG,MAAM,EAAE,CAehF;AAoDD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE;IACxC,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,oBAAoB,EAAE,MAAM,EAAE,CAAC;CAChC,GAAG,WAAW,CAmBd;AAED,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,IAAI,CACvD,sBAAsB,EACtB,sBAAsB,GAAG,mBAAmB,GAAG,sBAAsB,GAAG,SAAS,GAAG,gBAAgB,GAAG,YAAY,CACpH,GAAG,MAAM,CAkBT;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,qBAAqB,GAAG,sBAAsB,CAuF7F"}

package/dist/index.js

@@ -0,0 +1,167 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.compileDeterministicConstraints = void 0;
+exports.extractPlannedFilePaths = extractPlannedFilePaths;
+exports.resolvePlanVerdict = resolvePlanVerdict;
+exports.buildPlanVerificationMessage = buildPlanVerificationMessage;
+exports.evaluatePlanVerification = evaluatePlanVerification;
+var constraints_1 = require("./constraints");
+Object.defineProperty(exports, "compileDeterministicConstraints", { enumerable: true, get: function () { return constraints_1.compileDeterministicConstraints; } });
+const constraints_2 = require("./constraints");
+function normalizeRepoPath(pathValue) {
+    return pathValue.replace(/\\/g, '/').replace(/^\.\//, '').trim();
+}
+function extractPlannedFilePaths(planFiles) {
+    const plannedFilePaths = new Set();
+    for (const file of planFiles) {
+        const normalizedPath = normalizeRepoPath(file.path);
+        if (!normalizedPath) {
+            continue;
+        }
+        if (file.action === 'MODIFY' || file.action === 'CREATE') {
+            plannedFilePaths.add(normalizedPath);
+        }
+    }
+    return Array.from(plannedFilePaths);
+}
+function detectConstraintViolations(intentConstraints, policyRules, extraConstraintRules, changedFiles) {
+    const compiled = (0, constraints_2.compileDeterministicConstraints)({
+        intentConstraints,
+        policyRules,
+    });
+    const rules = [
+        ...compiled.rules,
+        ...(extraConstraintRules || []),
+    ];
+    if (rules.length === 0) {
+        return [];
+    }
+    const violations = [];
+    const seenViolations = new Set();
+    for (const rule of rules) {
+        for (const file of changedFiles) {
+            if (!file.hunks || file.hunks.length === 0) {
+                continue;
+            }
+            for (const hunk of file.hunks) {
+                for (const line of hunk.lines) {
+                    if (line.type !== 'added') {
+                        continue;
+                    }
+                    if (!rule.pattern.test(line.content)) {
+                        continue;
+                    }
+                    const violation = `${rule.matchToken} found in ${file.path} (violates constraint: \"${rule.displayName}\")`;
+                    if (seenViolations.has(violation)) {
+                        continue;
+                    }
+                    seenViolations.add(violation);
+                    violations.push(violation);
+                }
+            }
+        }
+    }
+    return violations;
+}
+function resolvePlanVerdict(input) {
+    if (input.constraintViolations.length > 0) {
+        return 'FAIL';
+    }
+    if (input.totalPlannedFiles === 0 && input.plannedFilesModified === 0) {
+        // 0/0 is treated as incomplete, not perfect adherence.
+        return 'FAIL';
+    }
+    if (input.bloatCount > 0 && input.adherenceScore < 50) {
+        return 'FAIL';
+    }
+    if (input.bloatCount > 0 || input.adherenceScore < 80) {
+        return 'WARN';
+    }
+    return 'PASS';
+}
+function buildPlanVerificationMessage(result) {
+    if (result.constraintViolations.length > 0) {
+        return `❌ Constraint violation: ${result.constraintViolations[0]}${result.constraintViolations.length > 1 ? ` (+${result.constraintViolations.length - 1} more)` : ''}`;
+    }
+    if (result.totalPlannedFiles === 0 && result.plannedFilesModified === 0) {
+        return '❌ Incomplete: No planned files to verify (0/0). Plan may be malformed.';
+    }
+    if (result.verdict === 'PASS') {
+        return `✅ Plan adherence: ${result.adherenceScore}% (${result.plannedFilesModified}/${result.totalPlannedFiles} planned files modified)`;
+    }
+    if (result.verdict === 'WARN') {
+        return `⚠️  Plan adherence: ${result.adherenceScore}% (${result.plannedFilesModified}/${result.totalPlannedFiles} planned files modified)${result.bloatCount > 0 ? `, ${result.bloatCount} unexpected file(s) changed` : ''}`;
+    }
+    return `❌ Plan adherence: ${result.adherenceScore}% (${result.plannedFilesModified}/${result.totalPlannedFiles} planned files modified), ${result.bloatCount} unexpected file(s) changed`;
+}
+function evaluatePlanVerification(input) {
+    const plannedFilePaths = extractPlannedFilePaths(input.planFiles);
+    const plannedSet = new Set(plannedFilePaths);
+    const normalizedChangedFiles = input.changedFiles.map((file) => ({
+        ...file,
+        path: normalizeRepoPath(file.path),
+        oldPath: file.oldPath ? normalizeRepoPath(file.oldPath) : undefined,
+        hunks: file.hunks || [],
+    }));
+    const changedFilePaths = Array.from(new Set(normalizedChangedFiles
+        .map((file) => file.path)
+        .filter(Boolean)));
+    const changedSet = new Set(changedFilePaths);
+    const bloatFiles = changedFilePaths.filter((pathValue) => !plannedSet.has(pathValue));
+    const bloatCount = bloatFiles.length;
+    const totalPlannedFiles = plannedSet.size;
+    const plannedFilesModified = plannedFilePaths.filter((pathValue) => changedSet.has(pathValue)).length;
+    const adherenceScore = totalPlannedFiles > 0
+        ? Math.round((plannedFilesModified / totalPlannedFiles) * 100)
+        : 0;
+    const constraintViolations = detectConstraintViolations(input.intentConstraints, input.policyRules, input.extraConstraintRules, normalizedChangedFiles);
+    const verdict = resolvePlanVerdict({
+        bloatCount,
+        adherenceScore,
+        totalPlannedFiles,
+        plannedFilesModified,
+        constraintViolations,
+    });
+    const totalAdded = input.diffStats
+        ? input.diffStats.totalAdded
+        : normalizedChangedFiles.reduce((sum, file) => sum + file.added, 0);
+    const totalRemoved = input.diffStats
+        ? input.diffStats.totalRemoved
+        : normalizedChangedFiles.reduce((sum, file) => sum + file.removed, 0);
+    const diffSummary = {
+        added: totalAdded,
+        removed: totalRemoved,
+        files: normalizedChangedFiles.map((file) => ({
+            path: file.path,
+            oldPath: file.oldPath,
+            changeType: file.changeType,
+            added: file.added,
+            removed: file.removed,
+            hunks: file.hunks || [],
+        })),
+        bloatFiles,
+        plannedFilesModified,
+        totalPlannedFiles,
+    };
+    const message = buildPlanVerificationMessage({
+        constraintViolations,
+        totalPlannedFiles,
+        plannedFilesModified,
+        verdict,
+        adherenceScore,
+        bloatCount,
+    });
+    return {
+        adherenceScore,
+        bloatCount,
+        bloatFiles,
+        plannedFilesModified,
+        totalPlannedFiles,
+        scopeGuardPassed: bloatCount === 0,
+        constraintViolations,
+        verdict,
+        diffSummary,
+        message,
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAsFA,0DAeC;AAoDD,gDAyBC;AAED,oEAqBC;AAED,4DAuFC;AAjSD,6CAMuB;AALrB,8HAAA,+BAA+B,OAAA;AAMjC,+CAAkG;AA0ElG,SAAS,iBAAiB,CAAC,SAAiB;IAC1C,OAAO,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AACnE,CAAC;AAED,SAAgB,uBAAuB,CAAC,SAA8B;IACpE,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAE3C,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,MAAM,cAAc,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,SAAS;QACX,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACzD,gBAAgB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,0BAA0B,CACjC,iBAAqC,EACrC,WAAiC,EACjC,oBAA+D,EAC/D,YAA4B;IAE5B,MAAM,QAAQ,GAAG,IAAA,6CAA+B,EAAC;QAC/C,iBAAiB;QACjB,WAAW;KACZ,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG;QACZ,GAAG,QAAQ,CAAC,KAAK;QACjB,GAAG,CAAC,oBAAoB,IAAI,EAAE,CAAC;KAChC,CAAC;IAEF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IAEzC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;YAChC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC3C,SAAS;YACX,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC9B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;oBAC9B,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;wBAC1B,SAAS;oBACX,CAAC;oBACD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;wBACrC,SAAS;oBACX,CAAC;oBACD,MAAM,SAAS,GAAG,GAAG,IAAI,CAAC,UAAU,aAAa,IAAI,CAAC,IAAI,4BAA4B,IAAI,CAAC,WAAW,KAAK,CAAC;oBAC5G,IAAI,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;wBAClC,SAAS;oBACX,CAAC;oBACD,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;oBAC9B,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC7B,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAgB,kBAAkB,CAAC,KAMlC;IACC,IAAI,KAAK,CAAC,oBAAoB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,KAAK,CAAC,iBAAiB,KAAK,CAAC,IAAI,KAAK,CAAC,oBAAoB,KAAK,CAAC,EAAE,CAAC;QACtE,uDAAuD;QACvD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,KAAK,CAAC,UAAU,GAAG,CAAC,IAAI,KAAK,CAAC,cAAc,GAAG,EAAE,EAAE,CAAC;QACtD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,KAAK,CAAC,UAAU,GAAG,CAAC,IAAI,KAAK,CAAC,cAAc,GAAG,EAAE,EAAE,CAAC;QACtD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAgB,4BAA4B,CAAC,MAG5C;IACC,IAAI,MAAM,CAAC,oBAAoB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3C,OAAO,2BAA2B,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,oBAAoB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,oBAAoB,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAC1K,CAAC;IAED,IAAI,MAAM,CAAC,iBAAiB,KAAK,CAAC,IAAI,MAAM,CAAC,oBAAoB,KAAK,CAAC,EAAE,CAAC;QACxE,OAAO,wEAAwE,CAAC;IAClF,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;QAC9B,OAAO,qBAAqB,MAAM,CAAC,cAAc,MAAM,MAAM,CAAC,oBAAoB,IAAI,MAAM,CAAC,iBAAiB,0BAA0B,CAAC;IAC3I,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;QAC9B,OAAO,uBAAuB,MAAM,CAAC,cAAc,MAAM,MAAM,CAAC,oBAAoB,IAAI,MAAM,CAAC,iBAAiB,2BAA2B,MAAM,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,UAAU,6BAA6B,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAChO,CAAC;IAED,OAAO,qBAAqB,MAAM,CAAC,cAAc,MAAM,MAAM,CAAC,oBAAoB,IAAI,MAAM,CAAC,iBAAiB,6BAA6B,MAAM,CAAC,UAAU,6BAA6B,CAAC;AAC5L,CAAC;AAED,SAAgB,wBAAwB,CAAC,KAA4B;IACnE,MAAM,gBAAgB,GAAG,uBAAuB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAClE,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAE7C,MAAM,sBAAsB,GAAG,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC/D,GAAG,IAAI;QACP,IAAI,EAAE,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;QAClC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;QACnE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE;KACxB,CAAC,CAAC,CAAC;IAEJ,MAAM,gBAAgB,GAAG,KAAK,CAAC,IAAI,CACjC,IAAI,GAAG,CACL,sBAAsB;SACnB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;SACxB,MAAM,CAAC,OAAO,CAAC,CACnB,CACF,CAAC;IACF,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAE7C,MAAM,UAAU,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;IACtF,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC;IAErC,MAAM,iBAAiB,GAAG,UAAU,CAAC,IAAI,CAAC;IAC1C,MAAM,oBAAoB,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;IACtG,MAAM,cAAc,GAAG,iBAAiB,GAAG,CAAC;QAC1C,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,oBAAoB,GAAG,iBAAiB,CAAC,GAAG,GAAG,CAAC;QAC9D,CAAC,CAAC,CAAC,CAAC;IAEN,MAAM,oBAAoB,GAAG,0BAA0B,CACrD,KAAK,CAAC,iBAAiB,EACvB,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,oBAAoB,EAC1B,sBAAsB,CACvB,CAAC;IACF,MAAM,OAAO,GAAG,kBAAkB,CAAC;QACjC,UAAU;QACV,cAAc;QACd,iBAAiB;QACjB,oBAAoB;QACpB,oBAAoB;KACrB,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS;QAChC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU;QAC5B,CAAC,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACtE,MAAM,YAAY,GAAG,KAAK,CAAC,SAAS;QAClC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,YAAY;QAC9B,CAAC,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAExE,MAAM,WAAW,GAAoB;QACnC,KAAK,EAAE,UAAU;QACjB,OAAO,EAAE,YAAY;QACrB,KAAK,EAAE,sBAAsB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC3C,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE;SACxB,CAAC,CAAC;QACH,UAAU;QACV,oBAAoB;QACpB,iBAAiB;KAClB,CAAC;IAEF,MAAM,OAAO,GAAG,4BAA4B,CAAC;QAC3C,oBAAoB;QACpB,iBAAiB;QACjB,oBAAoB;QACpB,OAAO;QACP,cAAc;QACd,UAAU;KACX,CAAC,CAAC;IAEH,OAAO;QACL,cAAc;QACd,UAAU;QACV,UAAU;QACV,oBAAoB;QACpB,iBAAiB;QACjB,gBAAgB,EAAE,UAAU,KAAK,CAAC;QAClC,oBAAoB;QACpB,OAAO;QACP,WAAW;QACX,OAAO;KACR,CAAC;AACJ,CAAC"}

package/package.json

@@ -0,0 +1,19 @@
+{
+  "name": "@neurcode-ai/governance-runtime",
+  "version": "0.1.0",
+  "description": "Deterministic plan/diff governance runtime shared by CLI, API, and integrations",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "test": "tsx --test src/*.test.ts"
+  },
+  "license": "MIT",
+  "dependencies": {},
+  "devDependencies": {
+    "@types/node": "^20.10.0",
+    "tsx": "^4.20.6",
+    "typescript": "^5.3.0"
+  }
+}

package/src/constraints.ts

@@ -0,0 +1,183 @@
+export type DeterministicConstraintSource = 'intent' | 'policy';
+
+export interface DeterministicConstraintRule {
+  id: string;
+  source: DeterministicConstraintSource;
+  statement: string;
+  displayName: string;
+  pattern: RegExp;
+  matchToken: string;
+}
+
+export interface DeterministicConstraintCompilation {
+  rules: DeterministicConstraintRule[];
+  unmatchedStatements: string[];
+}
+
+export interface DeterministicConstraintCompilationInput {
+  intentConstraints?: string;
+  policyRules?: string[];
+}
+
+interface ConstraintTemplate {
+  id: string;
+  displayName: string;
+  triggerTokens: string[];
+  pattern: RegExp;
+  matchToken: string;
+}
+
+const PROHIBITIVE_PATTERN = /\b(no|do not|don't|without|avoid|ban|disallow|never|must not)\b/i;
+
+const CONSTRAINT_TEMPLATES: ConstraintTemplate[] = [
+  {
+    id: 'no_useeffect',
+    displayName: 'No useEffect',
+    triggerTokens: ['useeffect'],
+    pattern: /\buseEffect\s*\(/i,
+    matchToken: 'useeffect',
+  },
+  {
+    id: 'no_console_log',
+    displayName: 'No console.log',
+    triggerTokens: ['console.log', 'console log'],
+    pattern: /\bconsole\.log\s*\(/i,
+    matchToken: 'console.log',
+  },
+  {
+    id: 'no_debugger',
+    displayName: 'No debugger statements',
+    triggerTokens: ['debugger'],
+    pattern: /\bdebugger\b/i,
+    matchToken: 'debugger',
+  },
+  {
+    id: 'no_eval',
+    displayName: 'No eval usage',
+    triggerTokens: ['eval'],
+    pattern: /\beval\s*\(/i,
+    matchToken: 'eval',
+  },
+  {
+    id: 'no_process_env',
+    displayName: 'No process.env access',
+    triggerTokens: ['process.env', 'process env'],
+    pattern: /\bprocess\.env\b/i,
+    matchToken: 'process.env',
+  },
+  {
+    id: 'no_any_type',
+    displayName: 'No any type',
+    triggerTokens: [' any', 'type any', ': any', '<any>'],
+    pattern: /(:\s*any\b|<\s*any\s*>|\bArray<any>\b|\bPromise<any>\b)/i,
+    matchToken: 'any',
+  },
+  {
+    id: 'no_todo_fixme',
+    displayName: 'No TODO/FIXME markers',
+    triggerTokens: ['todo', 'fixme'],
+    pattern: /\b(TODO|FIXME)\b/i,
+    matchToken: 'todo/fixme',
+  },
+];
+
+function splitStatements(raw: string): string[] {
+  return raw
+    .split(/[\n;]+/)
+    .map((part) => part.trim())
+    .filter(Boolean);
+}
+
+function normalizeStatement(statement: string): string {
+  return statement
+    .replace(/\s+/g, ' ')
+    .trim()
+    .toLowerCase();
+}
+
+function statementMatchesTemplate(normalizedStatement: string, template: ConstraintTemplate): boolean {
+  return template.triggerTokens.some((token) => normalizedStatement.includes(token));
+}
+
+function createRule(
+  template: ConstraintTemplate,
+  source: DeterministicConstraintSource,
+  statement: string
+): DeterministicConstraintRule {
+  return {
+    id: `${source}:${template.id}`,
+    source,
+    statement,
+    displayName: template.displayName,
+    pattern: template.pattern,
+    matchToken: template.matchToken,
+  };
+}
+
+function compileStatements(
+  statements: string[],
+  source: DeterministicConstraintSource
+): DeterministicConstraintCompilation {
+  const rules: DeterministicConstraintRule[] = [];
+  const unmatchedStatements: string[] = [];
+
+  for (const rawStatement of statements) {
+    const normalized = normalizeStatement(rawStatement);
+    if (!normalized) {
+      continue;
+    }
+
+    const requiresProhibitiveLanguage = source === 'intent';
+    if (requiresProhibitiveLanguage && !PROHIBITIVE_PATTERN.test(normalized)) {
+      continue;
+    }
+
+    const matches = CONSTRAINT_TEMPLATES.filter((template) => statementMatchesTemplate(normalized, template));
+    if (matches.length === 0) {
+      unmatchedStatements.push(rawStatement);
+      continue;
+    }
+
+    for (const match of matches) {
+      rules.push(createRule(match, source, rawStatement));
+    }
+  }
+
+  return {
+    rules,
+    unmatchedStatements,
+  };
+}
+
+function dedupeRules(rules: DeterministicConstraintRule[]): DeterministicConstraintRule[] {
+  const seen = new Set<string>();
+  const deduped: DeterministicConstraintRule[] = [];
+
+  for (const rule of rules) {
+    const key = `${rule.id}::${rule.statement.toLowerCase()}`;
+    if (seen.has(key)) {
+      continue;
+    }
+    seen.add(key);
+    deduped.push(rule);
+  }
+
+  return deduped;
+}
+
+export function compileDeterministicConstraints(
+  input: DeterministicConstraintCompilationInput
+): DeterministicConstraintCompilation {
+  const intentStatements = splitStatements(input.intentConstraints || '');
+  const policyStatements = (input.policyRules || [])
+    .map((rule) => String(rule || '').trim())
+    .filter(Boolean);
+
+  const compiledIntent = compileStatements(intentStatements, 'intent');
+  const compiledPolicy = compileStatements(policyStatements, 'policy');
+
+  return {
+    rules: dedupeRules([...compiledIntent.rules, ...compiledPolicy.rules]),
+    unmatchedStatements: [...compiledIntent.unmatchedStatements, ...compiledPolicy.unmatchedStatements],
+  };
+}

package/src/index.test.ts

@@ -0,0 +1,204 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+import {
+  compileDeterministicConstraints,
+  buildPlanVerificationMessage,
+  evaluatePlanVerification,
+  extractPlannedFilePaths,
+  resolvePlanVerdict,
+  type PlanDiffFile,
+} from './index';
+
+const SAMPLE_PLAN = [
+  { path: 'src/a.ts', action: 'MODIFY' },
+  { path: 'src/b.ts', action: 'CREATE' },
+  { path: 'docs/readme.md', action: 'BLOCK' },
+];
+
+function makeChangedFiles(paths: string[]): PlanDiffFile[] {
+  return paths.map((path) => ({
+    path,
+    changeType: 'modify',
+    added: 1,
+    removed: 0,
+    hunks: [
+      {
+        oldStart: 1,
+        oldLines: 0,
+        newStart: 1,
+        newLines: 1,
+        lines: [
+          {
+            type: 'added',
+            content: 'const x = 1;',
+          },
+        ],
+      },
+    ],
+  }));
+}
+
+test('extractPlannedFilePaths includes only CREATE/MODIFY actions', () => {
+  const paths = extractPlannedFilePaths(SAMPLE_PLAN);
+  assert.deepEqual(paths, ['src/a.ts', 'src/b.ts']);
+});
+
+test('resolvePlanVerdict reproduces legacy threshold rules', () => {
+  assert.equal(
+    resolvePlanVerdict({
+      bloatCount: 0,
+      adherenceScore: 100,
+      totalPlannedFiles: 2,
+      plannedFilesModified: 2,
+      constraintViolations: [],
+    }),
+    'PASS'
+  );
+
+  assert.equal(
+    resolvePlanVerdict({
+      bloatCount: 1,
+      adherenceScore: 100,
+      totalPlannedFiles: 2,
+      plannedFilesModified: 2,
+      constraintViolations: [],
+    }),
+    'WARN'
+  );
+
+  assert.equal(
+    resolvePlanVerdict({
+      bloatCount: 2,
+      adherenceScore: 40,
+      totalPlannedFiles: 5,
+      plannedFilesModified: 2,
+      constraintViolations: [],
+    }),
+    'FAIL'
+  );
+
+  assert.equal(
+    resolvePlanVerdict({
+      bloatCount: 0,
+      adherenceScore: 0,
+      totalPlannedFiles: 0,
+      plannedFilesModified: 0,
+      constraintViolations: [],
+    }),
+    'FAIL'
+  );
+});
+
+test('evaluatePlanVerification computes adherence and bloat deterministically', () => {
+  const result = evaluatePlanVerification({
+    planFiles: SAMPLE_PLAN,
+    changedFiles: makeChangedFiles(['src/a.ts', 'src/unplanned.ts']),
+    diffStats: {
+      totalAdded: 2,
+      totalRemoved: 0,
+      totalFiles: 2,
+    },
+  });
+
+  assert.equal(result.adherenceScore, 50);
+  assert.equal(result.totalPlannedFiles, 2);
+  assert.equal(result.plannedFilesModified, 1);
+  assert.equal(result.bloatCount, 1);
+  assert.deepEqual(result.bloatFiles, ['src/unplanned.ts']);
+  assert.equal(result.verdict, 'WARN');
+  assert.equal(result.scopeGuardPassed, false);
+  assert.equal(result.diffSummary.added, 2);
+  assert.equal(result.diffSummary.removed, 0);
+});
+
+test('evaluatePlanVerification fails on no-useEffect constraint violations', () => {
+  const result = evaluatePlanVerification({
+    planFiles: SAMPLE_PLAN,
+    changedFiles: [
+      {
+        path: 'src/a.ts',
+        changeType: 'modify',
+        added: 1,
+        removed: 0,
+        hunks: [
+          {
+            oldStart: 1,
+            oldLines: 0,
+            newStart: 1,
+            newLines: 1,
+            lines: [
+              {
+                type: 'added',
+                content: 'useEffect(() => { console.log(1); }, []);',
+              },
+            ],
+          },
+        ],
+      },
+    ],
+    intentConstraints: 'No useEffect',
+  });
+
+  assert.equal(result.verdict, 'FAIL');
+  assert.equal(result.constraintViolations.length, 1);
+  assert.match(result.message, /Constraint violation/i);
+});
+
+test('compileDeterministicConstraints builds rules from intent and policy text', () => {
+  const compiled = compileDeterministicConstraints({
+    intentConstraints: 'Do not use useEffect; avoid console.log in this change',
+    policyRules: ['No debugger statements', 'No process.env usage in frontend code'],
+  });
+
+  const ruleIds = compiled.rules.map((rule) => rule.id);
+  assert.ok(ruleIds.includes('intent:no_useeffect'));
+  assert.ok(ruleIds.includes('intent:no_console_log'));
+  assert.ok(ruleIds.includes('policy:no_debugger'));
+  assert.ok(ruleIds.includes('policy:no_process_env'));
+});
+
+test('evaluatePlanVerification enforces compiled policy rules deterministically', () => {
+  const result = evaluatePlanVerification({
+    planFiles: SAMPLE_PLAN,
+    changedFiles: [
+      {
+        path: 'src/a.ts',
+        changeType: 'modify',
+        added: 1,
+        removed: 0,
+        hunks: [
+          {
+            oldStart: 1,
+            oldLines: 0,
+            newStart: 1,
+            newLines: 1,
+            lines: [
+              {
+                type: 'added',
+                content: 'console.log("debug");',
+              },
+            ],
+          },
+        ],
+      },
+    ],
+    policyRules: ['No console.log in committed code'],
+  });
+
+  assert.equal(result.verdict, 'FAIL');
+  assert.equal(result.constraintViolations.length, 1);
+  assert.match(result.constraintViolations[0], /console\.log/i);
+});
+
+test('buildPlanVerificationMessage handles incomplete 0/0 plans', () => {
+  const message = buildPlanVerificationMessage({
+    constraintViolations: [],
+    totalPlannedFiles: 0,
+    plannedFilesModified: 0,
+    verdict: 'FAIL',
+    adherenceScore: 0,
+    bloatCount: 0,
+  });
+
+  assert.match(message, /0\/0/);
+});

package/src/index.ts

@@ -0,0 +1,291 @@
+export type PlanVerdict = 'PASS' | 'FAIL' | 'WARN';
+export {
+  compileDeterministicConstraints,
+  type DeterministicConstraintCompilation,
+  type DeterministicConstraintCompilationInput,
+  type DeterministicConstraintRule,
+  type DeterministicConstraintSource,
+} from './constraints';
+import { compileDeterministicConstraints, type DeterministicConstraintRule } from './constraints';
+
+export interface PlanFileScopeItem {
+  path: string;
+  action: string;
+}
+
+export interface PlanDiffLine {
+  type: 'context' | 'added' | 'removed';
+  content: string;
+  lineNumber?: number;
+}
+
+export interface PlanDiffHunk {
+  oldStart: number;
+  oldLines: number;
+  newStart: number;
+  newLines: number;
+  lines: PlanDiffLine[];
+}
+
+export interface PlanDiffFile {
+  path: string;
+  oldPath?: string;
+  changeType: 'add' | 'delete' | 'modify' | 'rename';
+  added: number;
+  removed: number;
+  hunks?: PlanDiffHunk[];
+}
+
+export interface PlanDiffStats {
+  totalAdded: number;
+  totalRemoved: number;
+  totalFiles: number;
+}
+
+export interface PlanVerificationInput {
+  planFiles: PlanFileScopeItem[];
+  changedFiles: PlanDiffFile[];
+  diffStats?: PlanDiffStats;
+  intentConstraints?: string;
+  policyRules?: string[];
+  extraConstraintRules?: DeterministicConstraintRule[];
+}
+
+export interface PlanDiffSummary {
+  added: number;
+  removed: number;
+  files: Array<{
+    path: string;
+    oldPath?: string;
+    changeType: string;
+    added: number;
+    removed: number;
+    hunks: PlanDiffHunk[];
+  }>;
+  bloatFiles: string[];
+  plannedFilesModified: number;
+  totalPlannedFiles: number;
+}
+
+export interface PlanVerificationResult {
+  adherenceScore: number;
+  bloatCount: number;
+  bloatFiles: string[];
+  plannedFilesModified: number;
+  totalPlannedFiles: number;
+  scopeGuardPassed: boolean;
+  constraintViolations: string[];
+  verdict: PlanVerdict;
+  diffSummary: PlanDiffSummary;
+  message: string;
+}
+
+function normalizeRepoPath(pathValue: string): string {
+  return pathValue.replace(/\\/g, '/').replace(/^\.\//, '').trim();
+}
+
+export function extractPlannedFilePaths(planFiles: PlanFileScopeItem[]): string[] {
+  const plannedFilePaths = new Set<string>();
+
+  for (const file of planFiles) {
+    const normalizedPath = normalizeRepoPath(file.path);
+    if (!normalizedPath) {
+      continue;
+    }
+
+    if (file.action === 'MODIFY' || file.action === 'CREATE') {
+      plannedFilePaths.add(normalizedPath);
+    }
+  }
+
+  return Array.from(plannedFilePaths);
+}
+
+function detectConstraintViolations(
+  intentConstraints: string | undefined,
+  policyRules: string[] | undefined,
+  extraConstraintRules: DeterministicConstraintRule[] | undefined,
+  changedFiles: PlanDiffFile[]
+): string[] {
+  const compiled = compileDeterministicConstraints({
+    intentConstraints,
+    policyRules,
+  });
+
+  const rules = [
+    ...compiled.rules,
+    ...(extraConstraintRules || []),
+  ];
+
+  if (rules.length === 0) {
+    return [];
+  }
+
+  const violations: string[] = [];
+  const seenViolations = new Set<string>();
+
+  for (const rule of rules) {
+    for (const file of changedFiles) {
+      if (!file.hunks || file.hunks.length === 0) {
+        continue;
+      }
+      for (const hunk of file.hunks) {
+        for (const line of hunk.lines) {
+          if (line.type !== 'added') {
+            continue;
+          }
+          if (!rule.pattern.test(line.content)) {
+            continue;
+          }
+          const violation = `${rule.matchToken} found in ${file.path} (violates constraint: \"${rule.displayName}\")`;
+          if (seenViolations.has(violation)) {
+            continue;
+          }
+          seenViolations.add(violation);
+          violations.push(violation);
+        }
+      }
+    }
+  }
+
+  return violations;
+}
+
+export function resolvePlanVerdict(input: {
+  bloatCount: number;
+  adherenceScore: number;
+  totalPlannedFiles: number;
+  plannedFilesModified: number;
+  constraintViolations: string[];
+}): PlanVerdict {
+  if (input.constraintViolations.length > 0) {
+    return 'FAIL';
+  }
+
+  if (input.totalPlannedFiles === 0 && input.plannedFilesModified === 0) {
+    // 0/0 is treated as incomplete, not perfect adherence.
+    return 'FAIL';
+  }
+
+  if (input.bloatCount > 0 && input.adherenceScore < 50) {
+    return 'FAIL';
+  }
+
+  if (input.bloatCount > 0 || input.adherenceScore < 80) {
+    return 'WARN';
+  }
+
+  return 'PASS';
+}
+
+export function buildPlanVerificationMessage(result: Pick<
+  PlanVerificationResult,
+  'constraintViolations' | 'totalPlannedFiles' | 'plannedFilesModified' | 'verdict' | 'adherenceScore' | 'bloatCount'
+>): string {
+  if (result.constraintViolations.length > 0) {
+    return `❌ Constraint violation: ${result.constraintViolations[0]}${result.constraintViolations.length > 1 ? ` (+${result.constraintViolations.length - 1} more)` : ''}`;
+  }
+
+  if (result.totalPlannedFiles === 0 && result.plannedFilesModified === 0) {
+    return '❌ Incomplete: No planned files to verify (0/0). Plan may be malformed.';
+  }
+
+  if (result.verdict === 'PASS') {
+    return `✅ Plan adherence: ${result.adherenceScore}% (${result.plannedFilesModified}/${result.totalPlannedFiles} planned files modified)`;
+  }
+
+  if (result.verdict === 'WARN') {
+    return `⚠️  Plan adherence: ${result.adherenceScore}% (${result.plannedFilesModified}/${result.totalPlannedFiles} planned files modified)${result.bloatCount > 0 ? `, ${result.bloatCount} unexpected file(s) changed` : ''}`;
+  }
+
+  return `❌ Plan adherence: ${result.adherenceScore}% (${result.plannedFilesModified}/${result.totalPlannedFiles} planned files modified), ${result.bloatCount} unexpected file(s) changed`;
+}
+
+export function evaluatePlanVerification(input: PlanVerificationInput): PlanVerificationResult {
+  const plannedFilePaths = extractPlannedFilePaths(input.planFiles);
+  const plannedSet = new Set(plannedFilePaths);
+
+  const normalizedChangedFiles = input.changedFiles.map((file) => ({
+    ...file,
+    path: normalizeRepoPath(file.path),
+    oldPath: file.oldPath ? normalizeRepoPath(file.oldPath) : undefined,
+    hunks: file.hunks || [],
+  }));
+
+  const changedFilePaths = Array.from(
+    new Set(
+      normalizedChangedFiles
+        .map((file) => file.path)
+        .filter(Boolean)
+    )
+  );
+  const changedSet = new Set(changedFilePaths);
+
+  const bloatFiles = changedFilePaths.filter((pathValue) => !plannedSet.has(pathValue));
+  const bloatCount = bloatFiles.length;
+
+  const totalPlannedFiles = plannedSet.size;
+  const plannedFilesModified = plannedFilePaths.filter((pathValue) => changedSet.has(pathValue)).length;
+  const adherenceScore = totalPlannedFiles > 0
+    ? Math.round((plannedFilesModified / totalPlannedFiles) * 100)
+    : 0;
+
+  const constraintViolations = detectConstraintViolations(
+    input.intentConstraints,
+    input.policyRules,
+    input.extraConstraintRules,
+    normalizedChangedFiles
+  );
+  const verdict = resolvePlanVerdict({
+    bloatCount,
+    adherenceScore,
+    totalPlannedFiles,
+    plannedFilesModified,
+    constraintViolations,
+  });
+
+  const totalAdded = input.diffStats
+    ? input.diffStats.totalAdded
+    : normalizedChangedFiles.reduce((sum, file) => sum + file.added, 0);
+  const totalRemoved = input.diffStats
+    ? input.diffStats.totalRemoved
+    : normalizedChangedFiles.reduce((sum, file) => sum + file.removed, 0);
+
+  const diffSummary: PlanDiffSummary = {
+    added: totalAdded,
+    removed: totalRemoved,
+    files: normalizedChangedFiles.map((file) => ({
+      path: file.path,
+      oldPath: file.oldPath,
+      changeType: file.changeType,
+      added: file.added,
+      removed: file.removed,
+      hunks: file.hunks || [],
+    })),
+    bloatFiles,
+    plannedFilesModified,
+    totalPlannedFiles,
+  };
+
+  const message = buildPlanVerificationMessage({
+    constraintViolations,
+    totalPlannedFiles,
+    plannedFilesModified,
+    verdict,
+    adherenceScore,
+    bloatCount,
+  });
+
+  return {
+    adherenceScore,
+    bloatCount,
+    bloatFiles,
+    plannedFilesModified,
+    totalPlannedFiles,
+    scopeGuardPassed: bloatCount === 0,
+    constraintViolations,
+    verdict,
+    diffSummary,
+    message,
+  };
+}

package/tsconfig.json

@@ -0,0 +1,19 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "commonjs",
+    "lib": ["ES2022"],
+    "outDir": "./dist",
+    "rootDir": "./src",
+    "strict": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "forceConsistentCasingInFileNames": true,
+    "declaration": true,
+    "declarationMap": true,
+    "sourceMap": true,
+    "resolveJsonModule": true
+  },
+  "include": ["src/**/*"],
+  "exclude": ["node_modules", "dist", "**/*.test.ts", "**/*.spec.ts"]
+}