Norma: AI Code Governance

Checks AI-generated code against your standards. Same rules, same verdict, every run.

Norma runs a Livecheck on the file you're working on, shows the findings inline, and hands any issue to your editor's AI chat with a one-click Fix with AI. Sign in once, straight from the editor. A free Quality Clouds account is created inline, no web portal.

The checks themselves are deterministic. Every finding comes from a versioned rule with a stable ID and a fixed severity, so the same file gives the same result on every run, on your machine and on your colleague's. Run it twice, get the same answer twice.

What you get

Livecheck the active file. Evaluate your code against security and best-practice rulesets, on demand, from the editor toolbar.
Findings you can cite. Each one carries a rule ID, a severity, and remediation guidance on hover. Squiggles inline, full list in the Problems panel, and the same rule ID in your CI and your policy docs.
Fix with AI. One click hands a complete prompt (the offending code, the rule, how to fix it, good and bad examples) to your editor's chat. It proposes the edit for you to review. The extension never changes your code itself.
Your agents can call it too. The Quality Clouds MCP server is registered automatically, so agent mode uses it with no manual setup. Your agent gets a repeatable verdict on its own output instead of grading its own work.
Sign in from the editor. OAuth with no portal round trip. Your session appears in the Accounts menu.

Languages and stacks

Norma ships rulesets for:

Languages. JavaScript, TypeScript, Python, PHP, and AI prompt files (LLM prompt templates).
Frameworks and platforms. React, Vite, Supabase, and Magento.

Norma parses many more ecosystems (HTML, CSS, SQL, Tailwind, and popular JS/TS frameworks) to understand your project. The list above is what has active rulesets today.

Get started

The extension ships a Get started with Norma walkthrough on the editor's Welcome page:

Sign in. A free Quality Clouds account is created inline.
Open a code file. Any source file you're working on.
Run a Livecheck. Press the Norma button in the editor toolbar.
Review the findings. Inline and in the Problems panel. Use Fix with AI on any finding.

Free and Pro

Livecheck and Fix with AI work on the free tier, which is permanent, not a trial.

Pro adds:

SOLID design principle rules. Single responsibility, open/closed, Liskov substitution, interface segregation, dependency inversion, checked as rules with the same IDs and severities as everything else.
Up to 10 workspaces. Connect and manage as many as 10 workspaces.
Up to 100 full scans. Run as many as 100 full scans.

Privacy

The extension sends no usage analytics. The only calls it makes are the checks you invoke.
Server-side run records carry no code content by design.

Requirements

VS Code 1.101 or newer. Also runs on Cursor and VSCodium via Open VSX.
A Quality Clouds account, created inline on first sign-in.

Documentation

Full documentation, setup, and support: https://qualityclouds.com/documentation/norma/home/