@rasensio/aidlc 1.15.2 → 1.17.0

package/dist/compliance/types.d.ts

@@ -0,0 +1,140 @@
+/**
+ * Compliance pack types.
+ *
+ * A pack carries four separable things, and keeping them separate is the whole
+ * design: **constraints** (guidance layers an agent reads on every phase),
+ * **controls** (structured data with a fail condition per control id),
+ * **exclusions** (what the pack deliberately does not cover, by control id), and
+ * **metadata**.
+ *
+ * Two distinctions in here are load-bearing and easy to conflate.
+ *
+ * `kind` answers *what the lifecycle trail can establish*. An `evidenced` control
+ * is one the artifact trail genuinely demonstrates — SOC 2 CC8.1, change
+ * management, is the only one in the shipped pack. A `checked-only` control
+ * operates over a running system ("the entity monitors system components for
+ * anomalies"), which no markdown file evidences; the pack supplies a fail
+ * condition an agent applies, and the trail records only that the check happened.
+ * Reporting a `checked-only` control as evidenced would be the overclaim this
+ * whole feature exists to prevent, in the one artifact a buyer hands an auditor.
+ *
+ * `check_kind` answers a different question: *who applies the fail condition*.
+ * `fails_when` is prose, so no code evaluates it — a `mechanical` control carries
+ * a `pattern` the diff check can apply itself, and an `agent` control is
+ * assessable only in an agent session. An unassessed control is never a pass.
+ *
+ * Requirements: compliance-packs/AC-1, AC-2, AC-3
+ */
+import type { FindingSeverity, PhaseName } from '../core/types.js';
+/** What the lifecycle trail can establish about a control. */
+export type ControlKind = 'evidenced' | 'checked-only';
+/** Who applies a control's fail condition. */
+export type ControlCheckKind = 'agent' | 'mechanical';
+/** Why a regime criterion is not covered. */
+export type ExclusionReason = 'organizational' | 'not-yet-built';
+/**
+ * Entitlement state of a pack.
+ *
+ * Only `unrestricted` exists in this release: the seam is built so that adding a
+ * licensed pack later changes the resolver and nothing else, but no code path
+ * checks a licence, contacts a network service, or reads a key.
+ */
+export type PackEntitlement = 'unrestricted';
+/** Pack metadata, from `pack.yaml`. */
+export interface PackMeta {
+    /** Slug, matching the pack's directory name. */
+    id: string;
+    /** Human name of the regime, e.g. `SOC 2`. */
+    regime: string;
+    /** Pack content version, independent of the CLI version. */
+    version: string;
+    /**
+     * Industries the pack applies to. `['any']` for a regime that is not
+     * industry-scoped, which is every pack in this release.
+     */
+    industries: string[];
+    entitlement: PackEntitlement;
+    /**
+     * Who reviewed the control text, or `null` for an unreviewed draft. A null value
+     * obliges the pack to carry the unreviewed-draft notice, and obliges every
+     * report to state it.
+     */
+    reviewed_by: string | null;
+}
+/** One control of a regime. */
+export interface Control {
+    /** The regime's own id, e.g. `CC8.1`. Never an AIDLC criterion id. */
+    id: string;
+    kind: ControlKind;
+    check_kind: ControlCheckKind;
+    /** Lifecycle phases this control applies to. */
+    phases: PhaseName[];
+    /** What the control requires, in the regime's terms. */
+    requires: string;
+    /** Where an agent should look. */
+    look_at: string;
+    /** A single decidable predicate over a diff hunk or an artifact path. */
+    fails_when: string;
+    /** Applied by the diff check; `mechanical` controls only. */
+    pattern?: string;
+    severity: FindingSeverity;
+    /**
+     * The artifact that evidences this control. Required on `evidenced`, and
+     * rejected on `checked-only` — a checked-only control has no evidence, and
+     * letting it name one is how a check becomes an attestation.
+     */
+    evidence_artifact?: string;
+    /**
+     * Anchor into an existing guidance layer whose rule this control restates, e.g.
+     * `secure-defaults#transport-and-data-protection`. Present so a verbatim
+     * restatement stays traceable to the layer it came from.
+     */
+    references?: string;
+}
+/** A regime criterion the pack deliberately does not cover. */
+export interface Exclusion {
+    /** The regime's own id, e.g. `CC1.1`. */
+    id: string;
+    reason: ExclusionReason;
+    /** Required when the reason alone would misrepresent the boundary. */
+    note?: string;
+}
+/** A guidance layer a pack installs. */
+export interface PackLayer {
+    name: string;
+    file: string;
+    /**
+     * Always true. Pack layers are delivered as a read-instruction regardless of
+     * size, bypassing the inline threshold that applies to framework layers,
+     * because inlining pack text into an emitted skill is forbidden outright.
+     */
+    always_pointer: true;
+}
+/** A validated pack. */
+export interface Pack {
+    meta: PackMeta;
+    controls: Control[];
+    exclusions: Exclusion[];
+    layers: PackLayer[];
+}
+/** Why a pack could not be resolved. */
+export type PackErrorCode = 'not-found' | 'unreadable' | 'invalid';
+/** A pack that could not be loaded, with every reason found. */
+export interface PackError {
+    code: PackErrorCode;
+    /** The pack id as asked for, so the message can name it. */
+    id: string;
+    /** Repo- or package-relative path, never an absolute one. */
+    path?: string;
+    /** Every problem found, not just the first — a pack is validated whole. */
+    errors: string[];
+}
+/** Resolution outcome. Never `null`: an absent pack has a reason. */
+export type PackResult = {
+    ok: true;
+    pack: Pack;
+} | {
+    ok: false;
+    error: PackError;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/compliance/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/compliance/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAEnE,8DAA8D;AAC9D,MAAM,MAAM,WAAW,GAAG,WAAW,GAAG,cAAc,CAAC;AAEvD,8CAA8C;AAC9C,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,YAAY,CAAC;AAEtD,6CAA6C;AAC7C,MAAM,MAAM,eAAe,GAAG,gBAAgB,GAAG,eAAe,CAAC;AAEjE;;;;;;GAMG;AACH,MAAM,MAAM,eAAe,GAAG,cAAc,CAAC;AAE7C,uCAAuC;AACvC,MAAM,WAAW,QAAQ;IACvB,gDAAgD;IAChD,EAAE,EAAE,MAAM,CAAC;IACX,8CAA8C;IAC9C,MAAM,EAAE,MAAM,CAAC;IACf,4DAA4D;IAC5D,OAAO,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,WAAW,EAAE,eAAe,CAAC;IAC7B;;;;OAIG;IACH,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,+BAA+B;AAC/B,MAAM,WAAW,OAAO;IACtB,sEAAsE;IACtE,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,WAAW,CAAC;IAClB,UAAU,EAAE,gBAAgB,CAAC;IAC7B,gDAAgD;IAChD,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB,wDAAwD;IACxD,QAAQ,EAAE,MAAM,CAAC;IACjB,kCAAkC;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,yEAAyE;IACzE,UAAU,EAAE,MAAM,CAAC;IACnB,6DAA6D;IAC7D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,eAAe,CAAC;IAC1B;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,+DAA+D;AAC/D,MAAM,WAAW,SAAS;IACxB,yCAAyC;IACzC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,eAAe,CAAC;IACxB,sEAAsE;IACtE,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,wCAAwC;AACxC,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,cAAc,EAAE,IAAI,CAAC;CACtB;AAED,wBAAwB;AACxB,MAAM,WAAW,IAAI;IACnB,IAAI,EAAE,QAAQ,CAAC;IACf,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,UAAU,EAAE,SAAS,EAAE,CAAC;IACxB,MAAM,EAAE,SAAS,EAAE,CAAC;CACrB;AAED,wCAAwC;AACxC,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG,YAAY,GAAG,SAAS,CAAC;AAEnE,gEAAgE;AAChE,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,aAAa,CAAC;IACpB,4DAA4D;IAC5D,EAAE,EAAE,MAAM,CAAC;IACX,6DAA6D;IAC7D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,2EAA2E;IAC3E,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,qEAAqE;AACrE,MAAM,MAAM,UAAU,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,SAAS,CAAA;CAAE,CAAC"}

package/dist/compliance/types.js

@@ -0,0 +1,29 @@
+/**
+ * Compliance pack types.
+ *
+ * A pack carries four separable things, and keeping them separate is the whole
+ * design: **constraints** (guidance layers an agent reads on every phase),
+ * **controls** (structured data with a fail condition per control id),
+ * **exclusions** (what the pack deliberately does not cover, by control id), and
+ * **metadata**.
+ *
+ * Two distinctions in here are load-bearing and easy to conflate.
+ *
+ * `kind` answers *what the lifecycle trail can establish*. An `evidenced` control
+ * is one the artifact trail genuinely demonstrates — SOC 2 CC8.1, change
+ * management, is the only one in the shipped pack. A `checked-only` control
+ * operates over a running system ("the entity monitors system components for
+ * anomalies"), which no markdown file evidences; the pack supplies a fail
+ * condition an agent applies, and the trail records only that the check happened.
+ * Reporting a `checked-only` control as evidenced would be the overclaim this
+ * whole feature exists to prevent, in the one artifact a buyer hands an auditor.
+ *
+ * `check_kind` answers a different question: *who applies the fail condition*.
+ * `fails_when` is prose, so no code evaluates it — a `mechanical` control carries
+ * a `pattern` the diff check can apply itself, and an `agent` control is
+ * assessable only in an agent session. An unassessed control is never a pass.
+ *
+ * Requirements: compliance-packs/AC-1, AC-2, AC-3
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/compliance/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/compliance/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG"}

package/dist/constitution/check.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Drift between the vision document and the snapshot it was last read from.
+ *
+ * Because statement ids are content-addressed, drift is a set difference: ids in
+ * the source and not the snapshot were **added**, ids in the snapshot and not the
+ * source were **removed** — and an edited statement shows up as one of each,
+ * which is the honest description of what happened.
+ *
+ * The three states that are not `ok` are reported explicitly rather than
+ * collapsing into "no drift". A check that cannot evaluate must say so; a silent
+ * no-op is indistinguishable from success (`design-reads-existing-seams`,
+ * 2026-09-03).
+ *
+ * Requirements: project-constitution/AC-12, project-constitution/AC-13,
+ * project-constitution/AC-15
+ *
+ * @module
+ */
+import type { CheckReport } from './types.js';
+/** Compare the recorded source against the snapshot. Never throws, never mutates. */
+export declare function checkDrift(projectRoot: string): CheckReport;
+//# sourceMappingURL=check.d.ts.map

package/dist/constitution/check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.d.ts","sourceRoot":"","sources":["../../src/constitution/check.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAQH,OAAO,KAAK,EAAiB,WAAW,EAAE,MAAM,YAAY,CAAC;AAE7D,qFAAqF;AACrF,wBAAgB,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,WAAW,CAyC3D"}

package/dist/constitution/check.js

@@ -0,0 +1,89 @@
+/**
+ * Drift between the vision document and the snapshot it was last read from.
+ *
+ * Because statement ids are content-addressed, drift is a set difference: ids in
+ * the source and not the snapshot were **added**, ids in the snapshot and not the
+ * source were **removed** — and an edited statement shows up as one of each,
+ * which is the honest description of what happened.
+ *
+ * The three states that are not `ok` are reported explicitly rather than
+ * collapsing into "no drift". A check that cannot evaluate must say so; a silent
+ * no-op is indistinguishable from success (`design-reads-existing-seams`,
+ * 2026-09-03).
+ *
+ * Requirements: project-constitution/AC-12, project-constitution/AC-13,
+ * project-constitution/AC-15
+ *
+ * @module
+ */
+import { existsSync } from 'node:fs';
+import { join } from 'node:path';
+import { extractVision } from './extract.js';
+import { readEntries } from './entries.js';
+import { readSnapshot } from './snapshot.js';
+import { splitStatements } from './statements.js';
+/** Compare the recorded source against the snapshot. Never throws, never mutates. */
+export function checkDrift(projectRoot) {
+    const snapshot = readSnapshot(projectRoot);
+    if (snapshot === null) {
+        return {
+            ...empty(null),
+            state: 'no-snapshot',
+            detail: 'no vision snapshot yet — run `aidlc constitution import <path>` first',
+        };
+    }
+    const source = join(projectRoot, snapshot.sourcePath);
+    if (!existsSync(source)) {
+        return {
+            ...empty(snapshot.sourcePath),
+            state: 'source-missing',
+            detail: `${snapshot.sourcePath} is recorded as the vision document but is not there`,
+        };
+    }
+    const extracted = extractVision(projectRoot, source);
+    if (!extracted.ok) {
+        return {
+            ...empty(snapshot.sourcePath),
+            state: 'source-unreadable',
+            detail: extracted.detail,
+        };
+    }
+    const currentIds = new Set(splitStatements(extracted.text).map((s) => s.id));
+    const snapshotIds = new Set(snapshot.statements.map((s) => s.id));
+    const added = [...currentIds].filter((id) => !snapshotIds.has(id)).sort();
+    const removed = [...snapshotIds].filter((id) => !currentIds.has(id)).sort();
+    return {
+        state: 'ok',
+        source_path: snapshot.sourcePath,
+        added,
+        removed,
+        affected_entries: affectedEntries(projectRoot, new Set(removed)),
+    };
+}
+/**
+ * Constitution entries whose cited statement is gone. This is the part a human
+ * has to act on: the prose is still there, but the vision no longer says what it
+ * was derived from (AC-13).
+ */
+function affectedEntries(projectRoot, removed) {
+    if (removed.size === 0)
+        return [];
+    const affected = [];
+    for (const entry of readEntries(projectRoot)) {
+        for (const cite of entry.cites) {
+            if (removed.has(cite))
+                affected.push({ entry: entry.id, cites: cite, line: entry.line });
+        }
+    }
+    return affected;
+}
+function empty(sourcePath) {
+    return {
+        state: 'ok',
+        source_path: sourcePath,
+        added: [],
+        removed: [],
+        affected_entries: [],
+    };
+}
+//# sourceMappingURL=check.js.map

package/dist/constitution/check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.js","sourceRoot":"","sources":["../../src/constitution/check.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAGlD,qFAAqF;AACrF,MAAM,UAAU,UAAU,CAAC,WAAmB;IAC5C,MAAM,QAAQ,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;IAC3C,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO;YACL,GAAG,KAAK,CAAC,IAAI,CAAC;YACd,KAAK,EAAE,aAAa;YACpB,MAAM,EAAE,uEAAuE;SAChF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;IACtD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACxB,OAAO;YACL,GAAG,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;YAC7B,KAAK,EAAE,gBAAgB;YACvB,MAAM,EAAE,GAAG,QAAQ,CAAC,UAAU,sDAAsD;SACrF,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,aAAa,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACrD,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;QAClB,OAAO;YACL,GAAG,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;YAC7B,KAAK,EAAE,mBAAmB;YAC1B,MAAM,EAAE,SAAS,CAAC,MAAM;SACzB,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7E,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAElE,MAAM,KAAK,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1E,MAAM,OAAO,GAAG,CAAC,GAAG,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAE5E,OAAO;QACL,KAAK,EAAE,IAAI;QACX,WAAW,EAAE,QAAQ,CAAC,UAAU;QAChC,KAAK;QACL,OAAO;QACP,gBAAgB,EAAE,eAAe,CAAC,WAAW,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;KACjE,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,WAAmB,EAAE,OAAoB;IAChE,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAClC,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7C,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAC/B,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,KAAK,CAAC,UAAyB;IACtC,OAAO;QACL,KAAK,EAAE,IAAI;QACX,WAAW,EAAE,UAAU;QACvB,KAAK,EAAE,EAAE;QACT,OAAO,EAAE,EAAE;QACX,gBAAgB,EAAE,EAAE;KACrB,CAAC;AACJ,CAAC"}

package/dist/constitution/docx.d.ts

@@ -0,0 +1,51 @@
+/**
+ * `.docx` text extraction with no runtime dependency (design D2, D3).
+ *
+ * A `.docx` is a ZIP archive whose main text part is `word/document.xml`. Node's
+ * `zlib.inflateRawSync` decompresses a deflated ZIP entry directly, so reading
+ * one needs ~100 lines rather than a fifth runtime dependency (AC-2).
+ *
+ * Two deliberate choices, both probed against real archives before adopting:
+ *
+ * 1. **Sizes come from the central directory, never the local header.** A writer
+ *    that streams uses a data descriptor (general-purpose bit 3) and writes
+ *    zeroes for the compressed size in the *local* header. The central directory
+ *    is always authoritative.
+ * 2. **No XML parser is constructed.** Tags are stripped textually, so XXE and
+ *    entity-expansion have no surface here at all (design NFR-3). Unknown markup
+ *    degrades to its text content rather than leaking angle brackets (risk R1).
+ *
+ * Requirements: project-constitution/AC-3, project-constitution/AC-5
+ *
+ * @module
+ */
+/** The only part of a `.docx` this reader wants. */
+export declare const DOCX_MAIN_PART = "word/document.xml";
+/** A ZIP this reader cannot make sense of, or one whose entry exceeds the cap. */
+export declare class ZipReadError extends Error {
+    readonly code: 'not-a-zip' | 'malformed' | 'entry-too-large' | 'unsupported-method';
+    constructor(message: string, code: 'not-a-zip' | 'malformed' | 'entry-too-large' | 'unsupported-method');
+}
+/**
+ * Read one entry out of a ZIP archive by exact name.
+ *
+ * @param buf - The whole archive.
+ * @param name - Entry name, matched exactly (`word/document.xml`).
+ * @param maxInflated - Refuse any entry declaring or producing more than this
+ *   many bytes, so a malicious archive cannot exhaust memory (AC-5).
+ * @returns The entry's bytes, or `null` when the archive has no such entry.
+ * @throws ZipReadError when the archive is not readable as a ZIP.
+ */
+export declare function readZipEntry(buf: Buffer, name: string, maxInflated: number): Buffer | null;
+/**
+ * Convert WordprocessingML to plain text.
+ *
+ * `</w:p>` ends a paragraph, `<w:br/>` and `<w:cr/>` are line breaks, `<w:tab/>`
+ * is a tab. Every other tag is dropped and its text content kept, which is what
+ * makes unknown markup (tables, revision marks, smart tags) degrade safely.
+ *
+ * Entity decoding runs with `&amp;` LAST — decoding it first would turn a
+ * literal `&amp;lt;` into `<` (AC-3, design D3).
+ */
+export declare function docxToText(xml: string): string;
+//# sourceMappingURL=docx.d.ts.map

package/dist/constitution/docx.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"docx.d.ts","sourceRoot":"","sources":["../../src/constitution/docx.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAeH,oDAAoD;AACpD,eAAO,MAAM,cAAc,sBAAsB,CAAC;AAElD,kFAAkF;AAClF,qBAAa,YAAa,SAAQ,KAAK;IAGnC,QAAQ,CAAC,IAAI,EAAE,WAAW,GAAG,WAAW,GAAG,iBAAiB,GAAG,oBAAoB;gBADnF,OAAO,EAAE,MAAM,EACN,IAAI,EAAE,WAAW,GAAG,WAAW,GAAG,iBAAiB,GAAG,oBAAoB;CAKtF;AAED;;;;;;;;;GASG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAiC1F;AAgED;;;;;;;;;GASG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAgB9C"}

package/dist/constitution/docx.js

@@ -0,0 +1,157 @@
+/**
+ * `.docx` text extraction with no runtime dependency (design D2, D3).
+ *
+ * A `.docx` is a ZIP archive whose main text part is `word/document.xml`. Node's
+ * `zlib.inflateRawSync` decompresses a deflated ZIP entry directly, so reading
+ * one needs ~100 lines rather than a fifth runtime dependency (AC-2).
+ *
+ * Two deliberate choices, both probed against real archives before adopting:
+ *
+ * 1. **Sizes come from the central directory, never the local header.** A writer
+ *    that streams uses a data descriptor (general-purpose bit 3) and writes
+ *    zeroes for the compressed size in the *local* header. The central directory
+ *    is always authoritative.
+ * 2. **No XML parser is constructed.** Tags are stripped textually, so XXE and
+ *    entity-expansion have no surface here at all (design NFR-3). Unknown markup
+ *    degrades to its text content rather than leaking angle brackets (risk R1).
+ *
+ * Requirements: project-constitution/AC-3, project-constitution/AC-5
+ *
+ * @module
+ */
+import { inflateRawSync } from 'node:zlib';
+/** ZIP signatures. */
+const SIG_EOCD = 0x06054b50;
+const SIG_CENTRAL = 0x02014b50;
+const SIG_LOCAL = 0x04034b50;
+/** Fixed size of the end-of-central-directory record, without any comment. */
+const EOCD_MIN = 22;
+/** Largest trailing comment a ZIP may carry, so the backward scan is bounded. */
+const MAX_COMMENT = 0xffff;
+/** The only part of a `.docx` this reader wants. */
+export const DOCX_MAIN_PART = 'word/document.xml';
+/** A ZIP this reader cannot make sense of, or one whose entry exceeds the cap. */
+export class ZipReadError extends Error {
+    code;
+    constructor(message, code) {
+        super(message);
+        this.code = code;
+        this.name = 'ZipReadError';
+    }
+}
+/**
+ * Read one entry out of a ZIP archive by exact name.
+ *
+ * @param buf - The whole archive.
+ * @param name - Entry name, matched exactly (`word/document.xml`).
+ * @param maxInflated - Refuse any entry declaring or producing more than this
+ *   many bytes, so a malicious archive cannot exhaust memory (AC-5).
+ * @returns The entry's bytes, or `null` when the archive has no such entry.
+ * @throws ZipReadError when the archive is not readable as a ZIP.
+ */
+export function readZipEntry(buf, name, maxInflated) {
+    const eocd = findEocd(buf);
+    const entryCount = buf.readUInt16LE(eocd + 10);
+    let p = buf.readUInt32LE(eocd + 16);
+    for (let n = 0; n < entryCount; n++) {
+        if (p + 46 > buf.length || buf.readUInt32LE(p) !== SIG_CENTRAL) {
+            throw new ZipReadError('central directory entry is malformed', 'malformed');
+        }
+        const method = buf.readUInt16LE(p + 10);
+        const compressedSize = buf.readUInt32LE(p + 20);
+        const uncompressedSize = buf.readUInt32LE(p + 24);
+        const nameLen = buf.readUInt16LE(p + 28);
+        const extraLen = buf.readUInt16LE(p + 30);
+        const commentLen = buf.readUInt16LE(p + 32);
+        const localOffset = buf.readUInt32LE(p + 42);
+        const entryName = buf.toString('utf8', p + 46, p + 46 + nameLen);
+        if (entryName === name) {
+            // Declared size first: refuse before allocating anything (AC-5).
+            if (uncompressedSize > maxInflated) {
+                throw new ZipReadError(`${name} declares ${uncompressedSize} bytes, over the ${maxInflated}-byte limit`, 'entry-too-large');
+            }
+            return readLocalEntry(buf, localOffset, method, compressedSize, maxInflated, name);
+        }
+        p += 46 + nameLen + extraLen + commentLen;
+    }
+    return null;
+}
+/** Locate the end-of-central-directory record by bounded backward scan. */
+function findEocd(buf) {
+    if (buf.length < EOCD_MIN) {
+        throw new ZipReadError('file is too short to be a ZIP archive', 'not-a-zip');
+    }
+    const floor = Math.max(0, buf.length - EOCD_MIN - MAX_COMMENT);
+    for (let i = buf.length - EOCD_MIN; i >= floor; i--) {
+        if (buf.readUInt32LE(i) === SIG_EOCD)
+            return i;
+    }
+    throw new ZipReadError('no end-of-central-directory record — not a ZIP archive', 'not-a-zip');
+}
+/** Read and decompress the entry body the central directory pointed at. */
+function readLocalEntry(buf, localOffset, method, compressedSize, maxInflated, name) {
+    if (localOffset + 30 > buf.length || buf.readUInt32LE(localOffset) !== SIG_LOCAL) {
+        throw new ZipReadError(`${name} has no local file header`, 'malformed');
+    }
+    const nameLen = buf.readUInt16LE(localOffset + 26);
+    const extraLen = buf.readUInt16LE(localOffset + 28);
+    const start = localOffset + 30 + nameLen + extraLen;
+    const end = start + compressedSize;
+    if (end > buf.length) {
+        throw new ZipReadError(`${name} extends past the end of the archive`, 'malformed');
+    }
+    const raw = buf.subarray(start, end);
+    if (method === 0) {
+        if (raw.length > maxInflated) {
+            throw new ZipReadError(`${name} is ${raw.length} bytes, over the ${maxInflated}-byte limit`, 'entry-too-large');
+        }
+        return raw;
+    }
+    if (method !== 8) {
+        throw new ZipReadError(`${name} uses unsupported compression method ${method}`, 'unsupported-method');
+    }
+    // maxOutputLength makes zlib itself refuse an over-large expansion, so a
+    // lying central directory cannot get past the declared-size check above.
+    try {
+        return inflateRawSync(raw, { maxOutputLength: maxInflated });
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        if (/maxOutputLength|buffer/i.test(message)) {
+            throw new ZipReadError(`${name} inflates past the ${maxInflated}-byte limit`, 'entry-too-large');
+        }
+        throw new ZipReadError(`${name} could not be decompressed: ${message}`, 'malformed');
+    }
+}
+/**
+ * Convert WordprocessingML to plain text.
+ *
+ * `</w:p>` ends a paragraph, `<w:br/>` and `<w:cr/>` are line breaks, `<w:tab/>`
+ * is a tab. Every other tag is dropped and its text content kept, which is what
+ * makes unknown markup (tables, revision marks, smart tags) degrade safely.
+ *
+ * Entity decoding runs with `&amp;` LAST — decoding it first would turn a
+ * literal `&amp;lt;` into `<` (AC-3, design D3).
+ */
+export function docxToText(xml) {
+    const withBreaks = xml
+        .replace(/<w:tab\b[^>]*\/?>/g, '\t')
+        .replace(/<w:(?:br|cr)\b[^>]*\/?>/g, '\n')
+        .replace(/<\/w:p>/g, '\n\n');
+    const stripped = withBreaks.replace(/<[^>]*>/g, '');
+    return stripped
+        .replace(/&lt;/g, '<')
+        .replace(/&gt;/g, '>')
+        .replace(/&quot;/g, '"')
+        .replace(/&apos;/g, "'")
+        .replace(/&#(\d+);/g, (_, d) => safeCodePoint(Number(d)))
+        .replace(/&#x([0-9a-fA-F]+);/g, (_, h) => safeCodePoint(parseInt(h, 16)))
+        .replace(/&amp;/g, '&');
+}
+/** Numeric character references, ignoring anything outside Unicode. */
+function safeCodePoint(code) {
+    if (!Number.isInteger(code) || code < 0 || code > 0x10ffff)
+        return '';
+    return String.fromCodePoint(code);
+}
+//# sourceMappingURL=docx.js.map

package/dist/constitution/docx.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docx.js","sourceRoot":"","sources":["../../src/constitution/docx.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAE3C,sBAAsB;AACtB,MAAM,QAAQ,GAAG,UAAU,CAAC;AAC5B,MAAM,WAAW,GAAG,UAAU,CAAC;AAC/B,MAAM,SAAS,GAAG,UAAU,CAAC;AAE7B,8EAA8E;AAC9E,MAAM,QAAQ,GAAG,EAAE,CAAC;AAEpB,iFAAiF;AACjF,MAAM,WAAW,GAAG,MAAM,CAAC;AAE3B,oDAAoD;AACpD,MAAM,CAAC,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAElD,kFAAkF;AAClF,MAAM,OAAO,YAAa,SAAQ,KAAK;IAG1B;IAFX,YACE,OAAe,EACN,IAA0E;QAEnF,KAAK,CAAC,OAAO,CAAC,CAAC;QAFN,SAAI,GAAJ,IAAI,CAAsE;QAGnF,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,YAAY,CAAC,GAAW,EAAE,IAAY,EAAE,WAAmB;IACzE,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC3B,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;IAC/C,IAAI,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;IAEpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,WAAW,EAAE,CAAC;YAC/D,MAAM,IAAI,YAAY,CAAC,sCAAsC,EAAE,WAAW,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QACxC,MAAM,cAAc,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QAChD,MAAM,gBAAgB,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QAC1C,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QAC5C,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QAC7C,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,CAAC;QAEjE,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACvB,iEAAiE;YACjE,IAAI,gBAAgB,GAAG,WAAW,EAAE,CAAC;gBACnC,MAAM,IAAI,YAAY,CACpB,GAAG,IAAI,aAAa,gBAAgB,oBAAoB,WAAW,aAAa,EAChF,iBAAiB,CAClB,CAAC;YACJ,CAAC;YACD,OAAO,cAAc,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;QACrF,CAAC;QAED,CAAC,IAAI,EAAE,GAAG,OAAO,GAAG,QAAQ,GAAG,UAAU,CAAC;IAC5C,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,2EAA2E;AAC3E,SAAS,QAAQ,CAAC,GAAW;IAC3B,IAAI,GAAG,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;QAC1B,MAAM,IAAI,YAAY,CAAC,uCAAuC,EAAE,WAAW,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,GAAG,QAAQ,GAAG,WAAW,CAAC,CAAC;IAC/D,KAAK,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QACpD,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,IAAI,YAAY,CAAC,wDAAwD,EAAE,WAAW,CAAC,CAAC;AAChG,CAAC;AAED,2EAA2E;AAC3E,SAAS,cAAc,CACrB,GAAW,EACX,WAAmB,EACnB,MAAc,EACd,cAAsB,EACtB,WAAmB,EACnB,IAAY;IAEZ,IAAI,WAAW,GAAG,EAAE,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,YAAY,CAAC,WAAW,CAAC,KAAK,SAAS,EAAE,CAAC;QACjF,MAAM,IAAI,YAAY,CAAC,GAAG,IAAI,2BAA2B,EAAE,WAAW,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC,WAAW,GAAG,EAAE,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,WAAW,GAAG,EAAE,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,WAAW,GAAG,EAAE,GAAG,OAAO,GAAG,QAAQ,CAAC;IACpD,MAAM,GAAG,GAAG,KAAK,GAAG,cAAc,CAAC;IACnC,IAAI,GAAG,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;QACrB,MAAM,IAAI,YAAY,CAAC,GAAG,IAAI,sCAAsC,EAAE,WAAW,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAErC,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;QACjB,IAAI,GAAG,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;YAC7B,MAAM,IAAI,YAAY,CACpB,GAAG,IAAI,OAAO,GAAG,CAAC,MAAM,oBAAoB,WAAW,aAAa,EACpE,iBAAiB,CAClB,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;QACjB,MAAM,IAAI,YAAY,CAAC,GAAG,IAAI,wCAAwC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC;IACxG,CAAC;IAED,yEAAyE;IACzE,yEAAyE;IACzE,IAAI,CAAC;QACH,OAAO,cAAc,CAAC,GAAG,EAAE,EAAE,eAAe,EAAE,WAAW,EAAE,CAAC,CAAC;IAC/D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,IAAI,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,YAAY,CACpB,GAAG,IAAI,sBAAsB,WAAW,aAAa,EACrD,iBAAiB,CAClB,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,YAAY,CAAC,GAAG,IAAI,+BAA+B,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;IACvF,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,MAAM,UAAU,GAAG,GAAG;SACnB,OAAO,CAAC,oBAAoB,EAAE,IAAI,CAAC;SACnC,OAAO,CAAC,0BAA0B,EAAE,IAAI,CAAC;SACzC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAE/B,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAEpD,OAAO,QAAQ;SACZ,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;SACrB,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;SACrB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,CAAS,EAAE,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;SAChE,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAAC,EAAE,CAAS,EAAE,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;SAChF,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED,uEAAuE;AACvE,SAAS,aAAa,CAAC,IAAY;IACjC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,QAAQ;QAAE,OAAO,EAAE,CAAC;IACtE,OAAO,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;AACpC,CAAC"}

package/dist/constitution/entries.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Parse `.aidlc/context/constitution.md` for its scope and prohibition entries.
+ *
+ * The grammar is deliberately narrow, and only two things are read: the entry id
+ * and the `V-…` statement ids it cites. Everything else on the line is prose the
+ * human owns.
+ *
+ *   - IN-1 [V-a1b2c3d4]: the repo builds the ingest pipeline
+ *   - NOT-2 [V-e5f6a7b8, V-11223344]: it never stores customer PII
+ *
+ * Bold variants are accepted the way the AC parser accepts them, because someone
+ * will write one.
+ *
+ * Requirements: project-constitution/AC-13
+ *
+ * @module
+ */
+import type { Entry } from './types.js';
+/** Where the constitution lives, relative to the project root. */
+export declare const CONSTITUTION_RELATIVE: string;
+export declare function constitutionPath(projectRoot: string): string;
+export declare function constitutionExists(projectRoot: string): boolean;
+/** Parse entries out of constitution markdown. Pure over text. */
+export declare function parseEntries(markdown: string): Entry[];
+/** Read and parse the project's constitution, or `[]` when there is none. */
+export declare function readEntries(projectRoot: string): Entry[];
+//# sourceMappingURL=entries.d.ts.map

package/dist/constitution/entries.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entries.d.ts","sourceRoot":"","sources":["../../src/constitution/entries.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAExC,kEAAkE;AAClE,eAAO,MAAM,qBAAqB,QAA+C,CAAC;AAYlF,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAE5D;AAED,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAE/D;AAED,kEAAkE;AAClE,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,KAAK,EAAE,CAkBtD;AAED,6EAA6E;AAC7E,wBAAgB,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,KAAK,EAAE,CAOxD"}

package/dist/constitution/entries.js

@@ -0,0 +1,65 @@
+/**
+ * Parse `.aidlc/context/constitution.md` for its scope and prohibition entries.
+ *
+ * The grammar is deliberately narrow, and only two things are read: the entry id
+ * and the `V-…` statement ids it cites. Everything else on the line is prose the
+ * human owns.
+ *
+ *   - IN-1 [V-a1b2c3d4]: the repo builds the ingest pipeline
+ *   - NOT-2 [V-e5f6a7b8, V-11223344]: it never stores customer PII
+ *
+ * Bold variants are accepted the way the AC parser accepts them, because someone
+ * will write one.
+ *
+ * Requirements: project-constitution/AC-13
+ *
+ * @module
+ */
+import { existsSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+/** Where the constitution lives, relative to the project root. */
+export const CONSTITUTION_RELATIVE = join('.aidlc', 'context', 'constitution.md');
+/**
+ * An entry line: a dash bullet, an `IN-`/`NOT-` id with optional bold, then the
+ * citation bracket. Emphasis is coupled — `- **IN-1: ...` does not match, the
+ * same near-miss rule the AC grammar uses.
+ */
+const ENTRY_RE = /^\s*-\s+(?:(IN|NOT)-([1-9][0-9]*)|\*\*(IN|NOT)-([1-9][0-9]*)\*\*)\s*\[([^\]]*)\]\s*:/;
+/** A statement id anywhere inside the citation bracket. */
+const CITE_RE = /V-[0-9a-f]{8}/g;
+export function constitutionPath(projectRoot) {
+    return join(projectRoot, CONSTITUTION_RELATIVE);
+}
+export function constitutionExists(projectRoot) {
+    return existsSync(constitutionPath(projectRoot));
+}
+/** Parse entries out of constitution markdown. Pure over text. */
+export function parseEntries(markdown) {
+    const entries = [];
+    const lines = markdown.split('\n');
+    for (let i = 0; i < lines.length; i++) {
+        const match = ENTRY_RE.exec(lines[i]);
+        if (!match)
+            continue;
+        const prefix = match[1] ?? match[3];
+        const number = match[2] ?? match[4];
+        entries.push({
+            id: `${prefix}-${number}`,
+            kind: prefix === 'IN' ? 'in-scope' : 'prohibition',
+            cites: [...new Set(match[5].match(CITE_RE) ?? [])],
+            line: i + 1,
+        });
+    }
+    return entries;
+}
+/** Read and parse the project's constitution, or `[]` when there is none. */
+export function readEntries(projectRoot) {
+    const file = constitutionPath(projectRoot);
+    try {
+        return parseEntries(readFileSync(file, 'utf8'));
+    }
+    catch {
+        return [];
+    }
+}
+//# sourceMappingURL=entries.js.map

package/dist/constitution/entries.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entries.js","sourceRoot":"","sources":["../../src/constitution/entries.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,kEAAkE;AAClE,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,iBAAiB,CAAC,CAAC;AAElF;;;;GAIG;AACH,MAAM,QAAQ,GAAG,sFAAsF,CAAC;AAExG,2DAA2D;AAC3D,MAAM,OAAO,GAAG,gBAAgB,CAAC;AAEjC,MAAM,UAAU,gBAAgB,CAAC,WAAmB;IAClD,OAAO,IAAI,CAAC,WAAW,EAAE,qBAAqB,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,WAAmB;IACpD,OAAO,UAAU,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,MAAM,OAAO,GAAY,EAAE,CAAC;IAC5B,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAEnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;QACpC,OAAO,CAAC,IAAI,CAAC;YACX,EAAE,EAAE,GAAG,MAAM,IAAI,MAAM,EAAE;YACzB,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa;YAClD,KAAK,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YAClD,IAAI,EAAE,CAAC,GAAG,CAAC;SACZ,CAAC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,WAAW,CAAC,WAAmB;IAC7C,MAAM,IAAI,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC3C,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}