pi-jev-guard 0.7.0 → 0.7.1

package/README.md

@@ -190,10 +190,11 @@ comandi fissi dell'estensione quando trova segnali convenzionali:
 | `package.json` con script | `npm run typecheck`, `npm run lint`, uno tra `npm run test:unit`, `npm run test:ci`, `npm test` |
 | `Cargo.toml` | `cargo check`, `cargo test` |
 | `go.mod` | `go test ./...` |
+| `*.sln` / `*.csproj` (root o 2 livelli) | `dotnet build`, `dotnet test` |
 | configurazione pytest | `python -m pytest` |
 | repository Git | `git diff --check` |
 
-Il profilo sceglie un solo ecosistema (Node → Rust → Go → Python) e aggiunge
+Il profilo sceglie un solo ecosistema (Node → Rust → Go → .NET → Python) e aggiunge
 il check Git quando applicabile. I comandi sono bounded da
 `verification.maxCommands` (default `4`) e timeout. Se nessun segnale è
 rilevato, non esegue nulla e il footer dichiara la limitazione.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-jev-guard",
-  "version": "0.7.0",
+  "version": "0.7.1",
   "type": "module",
   "description": "Jev validation guard for pi: on-demand tool + automatic provider gate. Dual backend: TypeSafe direct + OpenRouter.",
   "keywords": [

package/src/grounding.ts

@@ -296,7 +296,7 @@ export interface GroundingDecision {
 
 /** Nota accodata al testo pubblicato quando il grounding scatta senza hold. */
 export function groundingNotice(reasons: string[]): string {
-  return `\n\n> [jev] grounding: affermazioni sulla sessione non supportate dall'evidenza (${reasons.join(", ")}) — verifica col modello i file/comandi citati.`;
+  return `\n\n> [jev] grounding: affermazioni sulla sessione non supportate dall'evidenza (${reasons.join(", ")}) — controlla i file/comandi citati prima di darli per verificati.`;
 }
 
 /** Feedback per la rigenerazione: correggere, non accusare. */

package/src/verification.ts

@@ -7,7 +7,7 @@
  * dati, non dal testo del modello, quindi non può inventare test superati.
  */
 import { createHash } from "node:crypto";
-import { existsSync, readFileSync, realpathSync, statSync } from "node:fs";
+import { existsSync, readdirSync, readFileSync, realpathSync, statSync } from "node:fs";
 import { homedir } from "node:os";
 import { dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
 
@@ -340,6 +340,14 @@ interface ProfileInput {
   text: string;
 }
 
+/** Selezione del profilo: comandi fissi + input che decidono se applicarsi. */
+interface ProfileSelection {
+  checks: VerificationCheck[];
+  inputs: ProfileInput[];
+  /** Solo nomi dei marker (es. .sln/.csproj): il contenuto non sceglie comandi. */
+  markers?: string[];
+}
+
 function readProfileInput(path: string): ProfileInput | { error: string } {
   try {
     if (statSync(path).size > MAX_PROFILE_INPUT_BYTES) {
@@ -370,7 +378,7 @@ function findGitRoot(cwd: string): string | undefined {
 }
 
 function nodeProfile(root: string):
-  | { checks: VerificationCheck[]; inputs: ProfileInput[] }
+  | ProfileSelection
   | { error: string }
   | undefined {
   const path = join(root, "package.json");
@@ -408,7 +416,7 @@ function markerProfile(args: {
   root: string;
   marker: string;
   checks: VerificationCheck[];
-}): { checks: VerificationCheck[]; inputs: ProfileInput[] } | { error: string } | undefined {
+}): ProfileSelection | { error: string } | undefined {
   const path = join(args.root, args.marker);
   if (!existsSync(path)) return undefined;
   const input = readProfileInput(path);
@@ -416,8 +424,59 @@ function markerProfile(args: {
   return { checks: args.checks, inputs: [input] };
 }
 
+const DOTNET_MARKER_EXT = [".sln", ".csproj", ".fsproj", ".vbproj"];
+const DOTNET_SKIP_DIRS = new Set(["node_modules", ".git", "bin", "obj"]);
+const DOTNET_FILES = [
+  "**/*.cs", "**/*.fs", "**/*.vb",
+  "**/*.csproj", "**/*.fsproj", "**/*.vbproj", "**/*.sln",
+  "**/*.props", "**/*.targets", "global.json",
+];
+
+/**
+ * Marker .NET in root e due livelli di sottocartelle (bounded: max 40):
+ * solo nomi, il contenuto dei progetti non seleziona comandi — `dotnet
+ * build`/`dotnet test` sono fissi, quindi niente superficie di iniezione.
+ */
+function findDotnetMarkers(root: string): string[] {
+  const found: string[] = [];
+  const visit = (dir: string, depth: number): void => {
+    if (found.length >= 40 || depth > 2) return;
+    let entries;
+    try {
+      entries = readdirSync(dir, { withFileTypes: true });
+    } catch {
+      return;
+    }
+    for (const entry of entries.sort((a, b) => a.name.localeCompare(b.name))) {
+      if (found.length >= 40) return;
+      const full = join(dir, entry.name);
+      if (entry.isDirectory()) {
+        if (entry.name.startsWith(".") || DOTNET_SKIP_DIRS.has(entry.name)) continue;
+        visit(full, depth + 1);
+      } else if (DOTNET_MARKER_EXT.some((ext) => entry.name.endsWith(ext))) {
+        found.push(relative(root, full).split(sep).join("/"));
+      }
+    }
+  };
+  visit(root, 0);
+  return found.sort();
+}
+
+function dotnetProfile(root: string): ProfileSelection | undefined {
+  const markers = findDotnetMarkers(root);
+  if (markers.length === 0) return undefined;
+  return {
+    checks: [
+      { id: "dotnet-build", command: "dotnet build", description: ".NET build", files: DOTNET_FILES },
+      { id: "dotnet-test", command: "dotnet test", description: ".NET tests", files: [...DOTNET_FILES, "**/tests/**"] },
+    ],
+    inputs: [],
+    markers,
+  };
+}
+
 function pythonProfile(root: string):
-  | { checks: VerificationCheck[]; inputs: ProfileInput[] }
+  | ProfileSelection
   | { error: string }
   | undefined {
   const candidates = ["pytest.ini", "pyproject.toml", "setup.cfg"];
@@ -470,9 +529,10 @@ export function loadCommonVerificationProfile(cwd: string): LoadedVerificationMa
     checks: [{ id: "go-test", command: "go test ./...", description: "Go tests", files: ["**/*.go", "go.mod", "go.sum"] }],
   });
   if (go && "error" in go) return { ok: false, error: go.error };
-  const python = node || cargo || go ? undefined : pythonProfile(root);
+  const dotnet = node || cargo || go ? undefined : dotnetProfile(root);
+  const python = node || cargo || go || dotnet ? undefined : pythonProfile(root);
   if (python && "error" in python) return { ok: false, error: python.error };
-  const selected = node ?? cargo ?? go ?? python;
+  const selected = node ?? cargo ?? go ?? dotnet ?? python;
   const checks = selected ? [...selected.checks] : [];
   const gitRoot = findGitRoot(root);
   if (gitRoot) {
@@ -481,16 +541,18 @@ export function loadCommonVerificationProfile(cwd: string): LoadedVerificationMa
   if (checks.length === 0) {
     return {
       ok: false,
-      error: "nessun manifest locale e profilo globale common non applicabile (nessun progetto Node/Rust/Go/Python o repository Git rilevato)",
+      error: "nessun manifest locale e profilo globale common non applicabile (nessun progetto Node/Rust/Go/.NET/Python o repository Git rilevato)",
     };
   }
   const inputs = selected?.inputs ?? [];
+  const markers = selected?.markers ?? [];
   const manifest: VerificationManifest = { version: 1, checks };
   const fingerprint = fingerprintText(JSON.stringify({
     profile: "common-v1",
     root,
     gitRoot: gitRoot ?? null,
     inputs: inputs.map((input) => ({ path: input.path, text: input.text })),
+    markers,
     manifest,
   }));
   return {