agent-ide 0.2.0 → 0.3.3

package/dist/plugins/python/analyzers/security-checker.js

@@ -0,0 +1,279 @@
+/**
+ * Python 安全性檢查器
+ * 檢查 eval()、exec()、SQL injection 等安全問題
+ */
+import { PythonNodeKind, DANGEROUS_FUNCTIONS } from '../types.js';
+import { traverseAST } from '../tree-sitter-bridge.js';
+/**
+ * Python 安全性檢查器類別
+ */
+export class PythonSecurityChecker {
+    /**
+     * 檢查安全性問題
+     */
+    check(code, ast) {
+        const issues = [];
+        // 檢查危險函數調用
+        this.checkDangerousFunctions(ast, issues);
+        // 檢查硬編碼密碼
+        this.checkHardcodedSecrets(ast, issues);
+        // 檢查 SQL injection
+        this.checkSQLInjection(ast, issues);
+        // 檢查不安全的 pickle 使用
+        this.checkUnsafePickle(ast, issues);
+        // 檢查 subprocess shell=True
+        this.checkShellInjection(ast, issues);
+        return issues;
+    }
+    /**
+     * 檢查危險函數調用
+     */
+    checkDangerousFunctions(ast, issues) {
+        traverseAST(ast.root, (node) => {
+            if (node.pythonKind === PythonNodeKind.Call) {
+                const funcNode = node.treeSitterNode.childForFieldName('function');
+                if (!funcNode) {
+                    return;
+                }
+                const funcName = funcNode.text;
+                // 直接調用危險函數
+                if (DANGEROUS_FUNCTIONS.has(funcName)) {
+                    issues.push({
+                        type: 'unsafe-eval',
+                        location: {
+                            filePath: ast.sourceFile,
+                            line: node.range.start.line,
+                            column: node.range.start.column
+                        },
+                        message: `使用 ${funcName}() 可能導致程式碼注入漏洞`,
+                        severity: this.getDangerousFunctionSeverity(funcName),
+                        recommendation: this.getDangerousFunctionRecommendation(funcName)
+                    });
+                }
+                // 屬性調用（如 os.system）
+                if (funcNode.type === 'attribute') {
+                    this.checkDangerousAttributeCall(funcNode, node, ast.sourceFile, issues);
+                }
+            }
+        });
+    }
+    /**
+     * 檢查危險的屬性調用
+     */
+    checkDangerousAttributeCall(funcNode, callNode, filePath, issues) {
+        const objNode = funcNode.childForFieldName('object');
+        const attrNode = funcNode.childForFieldName('attribute');
+        if (!objNode || !attrNode) {
+            return;
+        }
+        const objName = objNode.text;
+        const attrName = attrNode.text;
+        // os.system, os.popen
+        if (objName === 'os' && (attrName === 'system' || attrName === 'popen')) {
+            issues.push({
+                type: 'unsafe-api',
+                location: {
+                    filePath,
+                    line: callNode.range.start.line,
+                    column: callNode.range.start.column
+                },
+                message: `使用 ${objName}.${attrName}() 可能導致命令注入漏洞`,
+                severity: 'high',
+                recommendation: '使用 subprocess.run() 並避免 shell=True'
+            });
+        }
+        // pickle.loads
+        if (objName === 'pickle' && (attrName === 'loads' || attrName === 'load')) {
+            issues.push({
+                type: 'unsafe-api',
+                location: {
+                    filePath,
+                    line: callNode.range.start.line,
+                    column: callNode.range.start.column
+                },
+                message: `使用 pickle.${attrName}() 處理不信任的資料可能導致任意程式碼執行`,
+                severity: 'critical',
+                recommendation: '使用 json 或其他安全的序列化格式'
+            });
+        }
+    }
+    /**
+     * 檢查硬編碼密碼
+     */
+    checkHardcodedSecrets(ast, issues) {
+        const secretPatterns = [
+            /password\s*=\s*["'][^"']+["']/i,
+            /secret\s*=\s*["'][^"']+["']/i,
+            /api_key\s*=\s*["'][^"']+["']/i,
+            /token\s*=\s*["'][^"']+["']/i,
+            /private_key\s*=\s*["'][^"']+["']/i
+        ];
+        traverseAST(ast.root, (node) => {
+            if (node.pythonKind === PythonNodeKind.Assignment
+                || node.pythonKind === PythonNodeKind.AnnotatedAssignment) {
+                const text = node.treeSitterNode.text;
+                for (const pattern of secretPatterns) {
+                    if (pattern.test(text)) {
+                        issues.push({
+                            type: 'hardcoded-secret',
+                            location: {
+                                filePath: ast.sourceFile,
+                                line: node.range.start.line,
+                                column: node.range.start.column
+                            },
+                            message: '可能的硬編碼密碼或敏感資訊',
+                            severity: 'high',
+                            recommendation: '使用環境變數或安全的配置管理工具'
+                        });
+                        break;
+                    }
+                }
+            }
+        });
+    }
+    /**
+     * 檢查 SQL injection
+     */
+    checkSQLInjection(ast, issues) {
+        traverseAST(ast.root, (node) => {
+            if (node.pythonKind === PythonNodeKind.Call) {
+                const funcNode = node.treeSitterNode.childForFieldName('function');
+                if (!funcNode) {
+                    return;
+                }
+                // 檢查 execute() 調用
+                if (funcNode.type === 'attribute') {
+                    const attrNode = funcNode.childForFieldName('attribute');
+                    if (attrNode?.text === 'execute' || attrNode?.text === 'executemany') {
+                        // 檢查第一個參數是否包含字串格式化
+                        const argsNode = node.treeSitterNode.childForFieldName('arguments');
+                        if (argsNode && argsNode.namedChildCount > 0) {
+                            const firstArg = argsNode.namedChild(0);
+                            if (firstArg && this.containsStringFormatting(firstArg.text)) {
+                                issues.push({
+                                    type: 'sql-injection',
+                                    location: {
+                                        filePath: ast.sourceFile,
+                                        line: node.range.start.line,
+                                        column: node.range.start.column
+                                    },
+                                    message: 'SQL 查詢使用字串格式化，可能存在 SQL injection 風險',
+                                    severity: 'critical',
+                                    recommendation: '使用參數化查詢代替字串拼接'
+                                });
+                            }
+                        }
+                    }
+                }
+            }
+        });
+    }
+    /**
+     * 檢查不安全的 pickle 使用
+     */
+    checkUnsafePickle(ast, issues) {
+        // 已在 checkDangerousAttributeCall 中處理
+    }
+    /**
+     * 檢查 shell injection
+     */
+    checkShellInjection(ast, issues) {
+        traverseAST(ast.root, (node) => {
+            if (node.pythonKind === PythonNodeKind.Call) {
+                const funcNode = node.treeSitterNode.childForFieldName('function');
+                if (!funcNode) {
+                    return;
+                }
+                // 檢查 subprocess.run() 或 subprocess.Popen()
+                if (funcNode.type === 'attribute') {
+                    const objNode = funcNode.childForFieldName('object');
+                    const attrNode = funcNode.childForFieldName('attribute');
+                    if (objNode?.text === 'subprocess' && (attrNode?.text === 'run' || attrNode?.text === 'Popen' || attrNode?.text === 'call')) {
+                        // 檢查是否有 shell=True
+                        const argsNode = node.treeSitterNode.childForFieldName('arguments');
+                        if (argsNode && this.hasShellTrue(argsNode)) {
+                            issues.push({
+                                type: 'unsafe-api',
+                                location: {
+                                    filePath: ast.sourceFile,
+                                    line: node.range.start.line,
+                                    column: node.range.start.column
+                                },
+                                message: 'subprocess 使用 shell=True 可能導致命令注入漏洞',
+                                severity: 'high',
+                                recommendation: '避免使用 shell=True，改用列表形式的命令參數'
+                            });
+                        }
+                    }
+                }
+            }
+        });
+    }
+    /**
+     * 檢查字串是否包含格式化
+     */
+    containsStringFormatting(text) {
+        // f-string
+        if (text.startsWith('f"') || text.startsWith('f\'')) {
+            return true;
+        }
+        // % 格式化
+        if (text.includes('%s') || text.includes('%d')) {
+            return true;
+        }
+        // .format()
+        if (text.includes('.format(')) {
+            return true;
+        }
+        // 字串拼接
+        if (text.includes('+')) {
+            return true;
+        }
+        return false;
+    }
+    /**
+     * 檢查是否有 shell=True 參數
+     */
+    hasShellTrue(argsNode) {
+        for (let i = 0; i < argsNode.childCount; i++) {
+            const child = argsNode.child(i);
+            if (child?.type === 'keyword_argument') {
+                const nameNode = child.childForFieldName('name');
+                const valueNode = child.childForFieldName('value');
+                if (nameNode?.text === 'shell' && valueNode?.text === 'True') {
+                    return true;
+                }
+            }
+        }
+        return false;
+    }
+    /**
+     * 獲取危險函數的嚴重程度
+     */
+    getDangerousFunctionSeverity(funcName) {
+        const criticalFunctions = new Set(['eval', 'exec', 'compile']);
+        const highFunctions = new Set(['__import__']);
+        if (criticalFunctions.has(funcName)) {
+            return 'critical';
+        }
+        if (highFunctions.has(funcName)) {
+            return 'high';
+        }
+        return 'medium';
+    }
+    /**
+     * 獲取危險函數的建議
+     */
+    getDangerousFunctionRecommendation(funcName) {
+        const recommendations = {
+            eval: '使用 ast.literal_eval() 或 json.loads() 處理不信任的資料',
+            exec: '避免動態執行程式碼，使用安全的替代方案',
+            compile: '避免動態編譯程式碼',
+            __import__: '使用 importlib.import_module()',
+            open: '確保檔案路徑經過驗證，避免路徑穿越攻擊',
+            input: '驗證並清理使用者輸入'
+        };
+        return recommendations[funcName] || '評估是否有更安全的替代方案';
+    }
+}
+//# sourceMappingURL=security-checker.js.map

package/dist/plugins/python/analyzers/security-checker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-checker.js","sourceRoot":"","sources":["../../../../src/plugins/python/analyzers/security-checker.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAsC,cAAc,EAAE,mBAAmB,EAA8B,MAAM,aAAa,CAAC;AAClI,OAAO,EAAE,WAAW,EAAe,MAAM,0BAA0B,CAAC;AAEpE;;GAEG;AACH,MAAM,OAAO,qBAAqB;IAChC;;OAEG;IACH,KAAK,CAAC,IAAY,EAAE,GAAc;QAChC,MAAM,MAAM,GAAoB,EAAE,CAAC;QAEnC,WAAW;QACX,IAAI,CAAC,uBAAuB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAE1C,UAAU;QACV,IAAI,CAAC,qBAAqB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAExC,mBAAmB;QACnB,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAEpC,mBAAmB;QACnB,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAEpC,2BAA2B;QAC3B,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAEtC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACK,uBAAuB,CAAC,GAAc,EAAE,MAAuB;QACrE,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE;YAC7B,IAAI,IAAI,CAAC,UAAU,KAAK,cAAc,CAAC,IAAI,EAAE,CAAC;gBAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;gBACnE,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAAA,OAAO;gBAAA,CAAC;gBAExB,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC;gBAE/B,WAAW;gBACX,IAAI,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACtC,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,aAAa;wBACnB,QAAQ,EAAE;4BACR,QAAQ,EAAE,GAAG,CAAC,UAAU;4BACxB,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI;4BAC3B,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM;yBAChC;wBACD,OAAO,EAAE,MAAM,QAAQ,gBAAgB;wBACvC,QAAQ,EAAE,IAAI,CAAC,4BAA4B,CAAC,QAAQ,CAAC;wBACrD,cAAc,EAAE,IAAI,CAAC,kCAAkC,CAAC,QAAQ,CAAC;qBAClE,CAAC,CAAC;gBACL,CAAC;gBAED,oBAAoB;gBACpB,IAAI,QAAQ,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;oBAClC,IAAI,CAAC,2BAA2B,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;gBAC3E,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,2BAA2B,CACjC,QAAa,EACb,QAAuB,EACvB,QAAgB,EAChB,MAAuB;QAEvB,MAAM,OAAO,GAAG,QAAQ,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,QAAQ,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;QAEzD,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;YAAA,OAAO;QAAA,CAAC;QAEpC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;QAC7B,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC;QAE/B,sBAAsB;QACtB,IAAI,OAAO,KAAK,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,OAAO,CAAC,EAAE,CAAC;YACxE,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,YAAY;gBAClB,QAAQ,EAAE;oBACR,QAAQ;oBACR,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI;oBAC/B,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM;iBACpC;gBACD,OAAO,EAAE,MAAM,OAAO,IAAI,QAAQ,eAAe;gBACjD,QAAQ,EAAE,MAAM;gBAChB,cAAc,EAAE,oCAAoC;aACrD,CAAC,CAAC;QACL,CAAC;QAED,eAAe;QACf,IAAI,OAAO,KAAK,QAAQ,IAAI,CAAC,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,MAAM,CAAC,EAAE,CAAC;YAC1E,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,YAAY;gBAClB,QAAQ,EAAE;oBACR,QAAQ;oBACR,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI;oBAC/B,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM;iBACpC;gBACD,OAAO,EAAE,aAAa,QAAQ,wBAAwB;gBACtD,QAAQ,EAAE,UAAU;gBACpB,cAAc,EAAE,qBAAqB;aACtC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;OAEG;IACK,qBAAqB,CAAC,GAAc,EAAE,MAAuB;QACnE,MAAM,cAAc,GAAG;YACrB,gCAAgC;YAChC,8BAA8B;YAC9B,+BAA+B;YAC/B,6BAA6B;YAC7B,mCAAmC;SACpC,CAAC;QAEF,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE;YAC7B,IACE,IAAI,CAAC,UAAU,KAAK,cAAc,CAAC,UAAU;mBAC1C,IAAI,CAAC,UAAU,KAAK,cAAc,CAAC,mBAAmB,EACzD,CAAC;gBACD,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;gBAEtC,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;oBACrC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;wBACvB,MAAM,CAAC,IAAI,CAAC;4BACV,IAAI,EAAE,kBAAkB;4BACxB,QAAQ,EAAE;gCACR,QAAQ,EAAE,GAAG,CAAC,UAAU;gCACxB,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI;gCAC3B,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM;6BAChC;4BACD,OAAO,EAAE,eAAe;4BACxB,QAAQ,EAAE,MAAM;4BAChB,cAAc,EAAE,kBAAkB;yBACnC,CAAC,CAAC;wBACH,MAAM;oBACR,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,GAAc,EAAE,MAAuB;QAC/D,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE;YAC7B,IAAI,IAAI,CAAC,UAAU,KAAK,cAAc,CAAC,IAAI,EAAE,CAAC;gBAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;gBACnE,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAAA,OAAO;gBAAA,CAAC;gBAExB,kBAAkB;gBAClB,IAAI,QAAQ,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;oBAClC,MAAM,QAAQ,GAAG,QAAQ,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;oBACzD,IAAI,QAAQ,EAAE,IAAI,KAAK,SAAS,IAAI,QAAQ,EAAE,IAAI,KAAK,aAAa,EAAE,CAAC;wBACrE,mBAAmB;wBACnB,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;wBACpE,IAAI,QAAQ,IAAI,QAAQ,CAAC,eAAe,GAAG,CAAC,EAAE,CAAC;4BAC7C,MAAM,QAAQ,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;4BACxC,IAAI,QAAQ,IAAI,IAAI,CAAC,wBAAwB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gCAC7D,MAAM,CAAC,IAAI,CAAC;oCACV,IAAI,EAAE,eAAe;oCACrB,QAAQ,EAAE;wCACR,QAAQ,EAAE,GAAG,CAAC,UAAU;wCACxB,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI;wCAC3B,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM;qCAChC;oCACD,OAAO,EAAE,qCAAqC;oCAC9C,QAAQ,EAAE,UAAU;oCACpB,cAAc,EAAE,eAAe;iCAChC,CAAC,CAAC;4BACL,CAAC;wBACH,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,GAAc,EAAE,MAAuB;QAC/D,qCAAqC;IACvC,CAAC;IAED;;OAEG;IACK,mBAAmB,CAAC,GAAc,EAAE,MAAuB;QACjE,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE;YAC7B,IAAI,IAAI,CAAC,UAAU,KAAK,cAAc,CAAC,IAAI,EAAE,CAAC;gBAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;gBACnE,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAAA,OAAO;gBAAA,CAAC;gBAExB,2CAA2C;gBAC3C,IAAI,QAAQ,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;oBAClC,MAAM,OAAO,GAAG,QAAQ,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;oBACrD,MAAM,QAAQ,GAAG,QAAQ,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;oBAEzD,IAAI,OAAO,EAAE,IAAI,KAAK,YAAY,IAAI,CAAC,QAAQ,EAAE,IAAI,KAAK,KAAK,IAAI,QAAQ,EAAE,IAAI,KAAK,OAAO,IAAI,QAAQ,EAAE,IAAI,KAAK,MAAM,CAAC,EAAE,CAAC;wBAC5H,mBAAmB;wBACnB,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;wBACpE,IAAI,QAAQ,IAAI,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;4BAC5C,MAAM,CAAC,IAAI,CAAC;gCACV,IAAI,EAAE,YAAY;gCAClB,QAAQ,EAAE;oCACR,QAAQ,EAAE,GAAG,CAAC,UAAU;oCACxB,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI;oCAC3B,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM;iCAChC;gCACD,OAAO,EAAE,qCAAqC;gCAC9C,QAAQ,EAAE,MAAM;gCAChB,cAAc,EAAE,6BAA6B;6BAC9C,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,wBAAwB,CAAC,IAAY;QAC3C,WAAW;QACX,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YACpD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,QAAQ;QACR,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,YAAY;QACZ,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO;QACP,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACK,YAAY,CAAC,QAAa;QAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAChC,IAAI,KAAK,EAAE,IAAI,KAAK,kBAAkB,EAAE,CAAC;gBACvC,MAAM,QAAQ,GAAG,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;gBACjD,MAAM,SAAS,GAAG,KAAK,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;gBACnD,IAAI,QAAQ,EAAE,IAAI,KAAK,OAAO,IAAI,SAAS,EAAE,IAAI,KAAK,MAAM,EAAE,CAAC;oBAC7D,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACK,4BAA4B,CAAC,QAAgB;QACnD,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;QAC/D,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;QAE9C,IAAI,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAAA,OAAO,UAAU,CAAC;QAAA,CAAC;QACzD,IAAI,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAAA,OAAO,MAAM,CAAC;QAAA,CAAC;QACjD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACK,kCAAkC,CAAC,QAAgB;QACzD,MAAM,eAAe,GAA2B;YAC9C,IAAI,EAAE,+CAA+C;YACrD,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,WAAW;YACpB,UAAU,EAAE,8BAA8B;YAC1C,IAAI,EAAE,qBAAqB;YAC3B,KAAK,EAAE,YAAY;SACpB,CAAC;QAEF,OAAO,eAAe,CAAC,QAAQ,CAAC,IAAI,eAAe,CAAC;IACtD,CAAC;CACF"}

package/dist/plugins/python/analyzers/type-safety-checker.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Python 型別安全檢查器
+ * 檢查缺少 type hints、Any 使用等問題
+ */
+import type { TypeSafetyIssue } from '../../../infrastructure/parser/analysis-types.js';
+import { type PythonAST } from '../types.js';
+/**
+ * Python 型別安全檢查器類別
+ */
+export declare class PythonTypeSafetyChecker {
+    /**
+     * 檢查型別安全問題
+     */
+    check(code: string, ast: PythonAST): TypeSafetyIssue[];
+    /**
+     * 檢查函式缺少 type hints
+     */
+    private checkMissingTypeHints;
+    /**
+     * 檢查參數型別
+     */
+    private checkParameterTypes;
+    /**
+     * 檢查 Any 型別使用
+     */
+    private checkAnyUsage;
+    /**
+     * 檢查 cast() 使用
+     */
+    private checkCastUsage;
+    /**
+     * 檢查 # type: ignore 註解
+     */
+    private checkTypeIgnore;
+    /**
+     * 獲取函式名稱
+     */
+    private getFunctionName;
+    /**
+     * 判斷是否為特殊方法
+     */
+    private isSpecialMethod;
+}
+//# sourceMappingURL=type-safety-checker.d.ts.map

package/dist/plugins/python/analyzers/type-safety-checker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"type-safety-checker.d.ts","sourceRoot":"","sources":["../../../../src/plugins/python/analyzers/type-safety-checker.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0CAA0C,CAAC;AAChF,OAAO,EAAE,KAAK,SAAS,EAAsC,MAAM,aAAa,CAAC;AAGjF;;GAEG;AACH,qBAAa,uBAAuB;IAClC;;OAEG;IACH,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,GAAG,eAAe,EAAE;IAkBtD;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAiC7B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAwC3B;;OAEG;IACH,OAAO,CAAC,aAAa;IAoBrB;;OAEG;IACH,OAAO,CAAC,cAAc;IAoBtB;;OAEG;IACH,OAAO,CAAC,eAAe;IAoBvB;;OAEG;IACH,OAAO,CAAC,eAAe;IAKvB;;OAEG;IACH,OAAO,CAAC,eAAe;CAIxB"}

package/dist/plugins/python/analyzers/type-safety-checker.js

@@ -0,0 +1,177 @@
+/**
+ * Python 型別安全檢查器
+ * 檢查缺少 type hints、Any 使用等問題
+ */
+import { PythonNodeKind } from '../types.js';
+import { traverseAST, getNodeText } from '../tree-sitter-bridge.js';
+/**
+ * Python 型別安全檢查器類別
+ */
+export class PythonTypeSafetyChecker {
+    /**
+     * 檢查型別安全問題
+     */
+    check(code, ast) {
+        const issues = [];
+        // 檢查函式缺少 type hints
+        this.checkMissingTypeHints(ast, issues);
+        // 檢查 Any 型別使用
+        this.checkAnyUsage(ast, issues);
+        // 檢查 cast() 使用
+        this.checkCastUsage(ast, issues);
+        // 檢查 # type: ignore 註解
+        this.checkTypeIgnore(code, ast, issues);
+        return issues;
+    }
+    /**
+     * 檢查函式缺少 type hints
+     */
+    checkMissingTypeHints(ast, issues) {
+        traverseAST(ast.root, (node) => {
+            if (node.pythonKind === PythonNodeKind.FunctionDefinition
+                || node.pythonKind === PythonNodeKind.AsyncFunctionDefinition) {
+                // 跳過特殊方法
+                const name = this.getFunctionName(node);
+                if (this.isSpecialMethod(name)) {
+                    return;
+                }
+                // 檢查返回型別
+                const returnType = node.treeSitterNode.childForFieldName('return_type');
+                if (!returnType) {
+                    issues.push({
+                        type: 'any-type',
+                        location: {
+                            filePath: ast.sourceFile,
+                            line: node.range.start.line,
+                            column: node.range.start.column
+                        },
+                        message: `函式 '${name}' 缺少返回型別註解`,
+                        severity: 'warning'
+                    });
+                }
+                // 檢查參數型別
+                this.checkParameterTypes(node, ast.sourceFile, issues);
+            }
+        });
+    }
+    /**
+     * 檢查參數型別
+     */
+    checkParameterTypes(funcNode, filePath, issues) {
+        const paramsNode = funcNode.treeSitterNode.childForFieldName('parameters');
+        if (!paramsNode) {
+            return;
+        }
+        for (let i = 0; i < paramsNode.namedChildCount; i++) {
+            const param = paramsNode.namedChild(i);
+            if (!param) {
+                continue;
+            }
+            const paramName = param.childForFieldName('name')?.text || param.text;
+            // 跳過 self 和 cls
+            if (paramName === 'self' || paramName === 'cls') {
+                continue;
+            }
+            // 跳過 *args 和 **kwargs
+            if (param.type === 'list_splat_pattern' || param.type === 'dictionary_splat_pattern') {
+                continue;
+            }
+            // 檢查是否有型別註解
+            const hasType = param.type === 'typed_parameter'
+                || param.type === 'typed_default_parameter'
+                || param.childForFieldName('type');
+            if (!hasType) {
+                issues.push({
+                    type: 'any-type',
+                    location: {
+                        filePath,
+                        line: param.startPosition.row,
+                        column: param.startPosition.column
+                    },
+                    message: `參數 '${paramName}' 缺少型別註解`,
+                    severity: 'warning'
+                });
+            }
+        }
+    }
+    /**
+     * 檢查 Any 型別使用
+     */
+    checkAnyUsage(ast, issues) {
+        traverseAST(ast.root, (node) => {
+            if (node.pythonKind === PythonNodeKind.Identifier) {
+                const text = getNodeText(node);
+                if (text === 'Any') {
+                    issues.push({
+                        type: 'any-type',
+                        location: {
+                            filePath: ast.sourceFile,
+                            line: node.range.start.line,
+                            column: node.range.start.column
+                        },
+                        message: '使用 Any 型別會降低型別安全性',
+                        severity: 'warning'
+                    });
+                }
+            }
+        });
+    }
+    /**
+     * 檢查 cast() 使用
+     */
+    checkCastUsage(ast, issues) {
+        traverseAST(ast.root, (node) => {
+            if (node.pythonKind === PythonNodeKind.Call) {
+                const funcNode = node.treeSitterNode.childForFieldName('function');
+                if (funcNode?.text === 'cast') {
+                    issues.push({
+                        type: 'unsafe-cast',
+                        location: {
+                            filePath: ast.sourceFile,
+                            line: node.range.start.line,
+                            column: node.range.start.column
+                        },
+                        message: '使用 cast() 可能繞過型別檢查',
+                        severity: 'warning'
+                    });
+                }
+            }
+        });
+    }
+    /**
+     * 檢查 # type: ignore 註解
+     */
+    checkTypeIgnore(code, ast, issues) {
+        const lines = code.split('\n');
+        for (let i = 0; i < lines.length; i++) {
+            const line = lines[i];
+            if (line.includes('# type: ignore')) {
+                issues.push({
+                    type: 'ignore-directive',
+                    location: {
+                        filePath: ast.sourceFile,
+                        line: i,
+                        column: line.indexOf('# type: ignore')
+                    },
+                    message: '使用 # type: ignore 忽略型別檢查',
+                    severity: 'warning'
+                });
+            }
+        }
+    }
+    /**
+     * 獲取函式名稱
+     */
+    getFunctionName(node) {
+        const nameNode = node.treeSitterNode.childForFieldName('name');
+        return nameNode?.text || '<anonymous>';
+    }
+    /**
+     * 判斷是否為特殊方法
+     */
+    isSpecialMethod(name) {
+        // __init__, __str__, __repr__ 等不需要完整 type hints
+        return name.startsWith('__') && name.endsWith('__');
+    }
+}
+//# sourceMappingURL=type-safety-checker.js.map

package/dist/plugins/python/analyzers/type-safety-checker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"type-safety-checker.js","sourceRoot":"","sources":["../../../../src/plugins/python/analyzers/type-safety-checker.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAsC,cAAc,EAAE,MAAM,aAAa,CAAC;AACjF,OAAO,EAAE,WAAW,EAAE,WAAW,EAAgB,MAAM,0BAA0B,CAAC;AAElF;;GAEG;AACH,MAAM,OAAO,uBAAuB;IAClC;;OAEG;IACH,KAAK,CAAC,IAAY,EAAE,GAAc;QAChC,MAAM,MAAM,GAAsB,EAAE,CAAC;QAErC,oBAAoB;QACpB,IAAI,CAAC,qBAAqB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAExC,cAAc;QACd,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAEhC,eAAe;QACf,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAEjC,uBAAuB;QACvB,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAExC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACK,qBAAqB,CAAC,GAAc,EAAE,MAAyB;QACrE,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE;YAC7B,IACE,IAAI,CAAC,UAAU,KAAK,cAAc,CAAC,kBAAkB;mBAClD,IAAI,CAAC,UAAU,KAAK,cAAc,CAAC,uBAAuB,EAC7D,CAAC;gBACD,SAAS;gBACT,MAAM,IAAI,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;gBACxC,IAAI,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC/B,OAAO;gBACT,CAAC;gBAED,SAAS;gBACT,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC;gBACxE,IAAI,CAAC,UAAU,EAAE,CAAC;oBAChB,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,UAAU;wBAChB,QAAQ,EAAE;4BACR,QAAQ,EAAE,GAAG,CAAC,UAAU;4BACxB,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI;4BAC3B,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM;yBAChC;wBACD,OAAO,EAAE,OAAO,IAAI,YAAY;wBAChC,QAAQ,EAAE,SAAS;qBACpB,CAAC,CAAC;gBACL,CAAC;gBAED,SAAS;gBACT,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAAE,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACzD,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,mBAAmB,CACzB,QAAuB,EACvB,QAAgB,EAChB,MAAyB;QAEzB,MAAM,UAAU,GAAG,QAAQ,CAAC,cAAc,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC;QAC3E,IAAI,CAAC,UAAU,EAAE,CAAC;YAAA,OAAO;QAAA,CAAC;QAE1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,eAAe,EAAE,CAAC,EAAE,EAAE,CAAC;YACpD,MAAM,KAAK,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YACvC,IAAI,CAAC,KAAK,EAAE,CAAC;gBAAA,SAAS;YAAA,CAAC;YAEvB,MAAM,SAAS,GAAG,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC;YAEtE,gBAAgB;YAChB,IAAI,SAAS,KAAK,MAAM,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;gBAAA,SAAS;YAAA,CAAC;YAE5D,sBAAsB;YACtB,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB,IAAI,KAAK,CAAC,IAAI,KAAK,0BAA0B,EAAE,CAAC;gBAAA,SAAS;YAAA,CAAC;YAEjG,YAAY;YACZ,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,KAAK,iBAAiB;mBAC3C,KAAK,CAAC,IAAI,KAAK,yBAAyB;mBACxC,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;YAErC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,UAAU;oBAChB,QAAQ,EAAE;wBACR,QAAQ;wBACR,IAAI,EAAE,KAAK,CAAC,aAAa,CAAC,GAAG;wBAC7B,MAAM,EAAE,KAAK,CAAC,aAAa,CAAC,MAAM;qBACnC;oBACD,OAAO,EAAE,OAAO,SAAS,UAAU;oBACnC,QAAQ,EAAE,SAAS;iBACpB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACK,aAAa,CAAC,GAAc,EAAE,MAAyB;QAC7D,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE;YAC7B,IAAI,IAAI,CAAC,UAAU,KAAK,cAAc,CAAC,UAAU,EAAE,CAAC;gBAClD,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;gBAC/B,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;oBACnB,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,UAAU;wBAChB,QAAQ,EAAE;4BACR,QAAQ,EAAE,GAAG,CAAC,UAAU;4BACxB,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI;4BAC3B,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM;yBAChC;wBACD,OAAO,EAAE,mBAAmB;wBAC5B,QAAQ,EAAE,SAAS;qBACpB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,cAAc,CAAC,GAAc,EAAE,MAAyB;QAC9D,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE;YAC7B,IAAI,IAAI,CAAC,UAAU,KAAK,cAAc,CAAC,IAAI,EAAE,CAAC;gBAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;gBACnE,IAAI,QAAQ,EAAE,IAAI,KAAK,MAAM,EAAE,CAAC;oBAC9B,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,aAAa;wBACnB,QAAQ,EAAE;4BACR,QAAQ,EAAE,GAAG,CAAC,UAAU;4BACxB,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI;4BAC3B,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM;yBAChC;wBACD,OAAO,EAAE,oBAAoB;wBAC7B,QAAQ,EAAE,SAAS;qBACpB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,eAAe,CAAC,IAAY,EAAE,GAAc,EAAE,MAAyB;QAC7E,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAE/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACtB,IAAI,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBACpC,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,kBAAkB;oBACxB,QAAQ,EAAE;wBACR,QAAQ,EAAE,GAAG,CAAC,UAAU;wBACxB,IAAI,EAAE,CAAC;wBACP,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC;qBACvC;oBACD,OAAO,EAAE,0BAA0B;oBACnC,QAAQ,EAAE,SAAS;iBACpB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACK,eAAe,CAAC,IAAmB;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC/D,OAAO,QAAQ,EAAE,IAAI,IAAI,aAAa,CAAC;IACzC,CAAC;IAED;;OAEG;IACK,eAAe,CAAC,IAAY;QAClC,gDAAgD;QAChD,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACtD,CAAC;CACF"}

package/dist/plugins/python/analyzers/unused-symbol-detector.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Python 未使用符號檢測器
+ * 檢測未使用的變數、函式、類別和導入
+ */
+import type { Symbol } from '../../../shared/types/index.js';
+import type { UnusedCode } from '../../../infrastructure/parser/analysis-types.js';
+import { type PythonAST } from '../types.js';
+/**
+ * Python 未使用符號檢測器類別
+ */
+export declare class PythonUnusedSymbolDetector {
+    /**
+     * 檢測未使用的符號
+     */
+    detect(ast: PythonAST, allSymbols: Symbol[]): UnusedCode[];
+    /**
+     * 收集所有使用的名稱及其出現次數
+     */
+    private collectUsedNames;
+    /**
+     * 判斷是否應該跳過該符號
+     */
+    private shouldSkipSymbol;
+    /**
+     * 獲取未使用類型
+     */
+    private getUnusedType;
+    /**
+     * 計算信心程度
+     */
+    private calculateConfidence;
+    /**
+     * 生成未使用原因說明
+     */
+    private generateReason;
+}
+//# sourceMappingURL=unused-symbol-detector.d.ts.map

package/dist/plugins/python/analyzers/unused-symbol-detector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unused-symbol-detector.d.ts","sourceRoot":"","sources":["../../../../src/plugins/python/analyzers/unused-symbol-detector.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAErD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0CAA0C,CAAC;AAC3E,OAAO,EAAE,KAAK,SAAS,EAAkB,MAAM,aAAa,CAAC;AAG7D;;GAEG;AACH,qBAAa,0BAA0B;IACrC;;OAEG;IACH,MAAM,CAAC,GAAG,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,UAAU,EAAE;IAmC1D;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAaxB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IA2BxB;;OAEG;IACH,OAAO,CAAC,aAAa;IAerB;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAyB3B;;OAEG;IACH,OAAO,CAAC,cAAc;CAmBvB"}