agent-ide 0.3.3 → 0.4.1

package/dist/plugins/python/analyzers/security-checker.js

@@ -1,279 +0,0 @@
-/**
- * Python 安全性檢查器
- * 檢查 eval()、exec()、SQL injection 等安全問題
- */
-import { PythonNodeKind, DANGEROUS_FUNCTIONS } from '../types.js';
-import { traverseAST } from '../tree-sitter-bridge.js';
-/**
- * Python 安全性檢查器類別
- */
-export class PythonSecurityChecker {
-    /**
-     * 檢查安全性問題
-     */
-    check(code, ast) {
-        const issues = [];
-        // 檢查危險函數調用
-        this.checkDangerousFunctions(ast, issues);
-        // 檢查硬編碼密碼
-        this.checkHardcodedSecrets(ast, issues);
-        // 檢查 SQL injection
-        this.checkSQLInjection(ast, issues);
-        // 檢查不安全的 pickle 使用
-        this.checkUnsafePickle(ast, issues);
-        // 檢查 subprocess shell=True
-        this.checkShellInjection(ast, issues);
-        return issues;
-    }
-    /**
-     * 檢查危險函數調用
-     */
-    checkDangerousFunctions(ast, issues) {
-        traverseAST(ast.root, (node) => {
-            if (node.pythonKind === PythonNodeKind.Call) {
-                const funcNode = node.treeSitterNode.childForFieldName('function');
-                if (!funcNode) {
-                    return;
-                }
-                const funcName = funcNode.text;
-                // 直接調用危險函數
-                if (DANGEROUS_FUNCTIONS.has(funcName)) {
-                    issues.push({
-                        type: 'unsafe-eval',
-                        location: {
-                            filePath: ast.sourceFile,
-                            line: node.range.start.line,
-                            column: node.range.start.column
-                        },
-                        message: `使用 ${funcName}() 可能導致程式碼注入漏洞`,
-                        severity: this.getDangerousFunctionSeverity(funcName),
-                        recommendation: this.getDangerousFunctionRecommendation(funcName)
-                    });
-                }
-                // 屬性調用（如 os.system）
-                if (funcNode.type === 'attribute') {
-                    this.checkDangerousAttributeCall(funcNode, node, ast.sourceFile, issues);
-                }
-            }
-        });
-    }
-    /**
-     * 檢查危險的屬性調用
-     */
-    checkDangerousAttributeCall(funcNode, callNode, filePath, issues) {
-        const objNode = funcNode.childForFieldName('object');
-        const attrNode = funcNode.childForFieldName('attribute');
-        if (!objNode || !attrNode) {
-            return;
-        }
-        const objName = objNode.text;
-        const attrName = attrNode.text;
-        // os.system, os.popen
-        if (objName === 'os' && (attrName === 'system' || attrName === 'popen')) {
-            issues.push({
-                type: 'unsafe-api',
-                location: {
-                    filePath,
-                    line: callNode.range.start.line,
-                    column: callNode.range.start.column
-                },
-                message: `使用 ${objName}.${attrName}() 可能導致命令注入漏洞`,
-                severity: 'high',
-                recommendation: '使用 subprocess.run() 並避免 shell=True'
-            });
-        }
-        // pickle.loads
-        if (objName === 'pickle' && (attrName === 'loads' || attrName === 'load')) {
-            issues.push({
-                type: 'unsafe-api',
-                location: {
-                    filePath,
-                    line: callNode.range.start.line,
-                    column: callNode.range.start.column
-                },
-                message: `使用 pickle.${attrName}() 處理不信任的資料可能導致任意程式碼執行`,
-                severity: 'critical',
-                recommendation: '使用 json 或其他安全的序列化格式'
-            });
-        }
-    }
-    /**
-     * 檢查硬編碼密碼
-     */
-    checkHardcodedSecrets(ast, issues) {
-        const secretPatterns = [
-            /password\s*=\s*["'][^"']+["']/i,
-            /secret\s*=\s*["'][^"']+["']/i,
-            /api_key\s*=\s*["'][^"']+["']/i,
-            /token\s*=\s*["'][^"']+["']/i,
-            /private_key\s*=\s*["'][^"']+["']/i
-        ];
-        traverseAST(ast.root, (node) => {
-            if (node.pythonKind === PythonNodeKind.Assignment
-                || node.pythonKind === PythonNodeKind.AnnotatedAssignment) {
-                const text = node.treeSitterNode.text;
-                for (const pattern of secretPatterns) {
-                    if (pattern.test(text)) {
-                        issues.push({
-                            type: 'hardcoded-secret',
-                            location: {
-                                filePath: ast.sourceFile,
-                                line: node.range.start.line,
-                                column: node.range.start.column
-                            },
-                            message: '可能的硬編碼密碼或敏感資訊',
-                            severity: 'high',
-                            recommendation: '使用環境變數或安全的配置管理工具'
-                        });
-                        break;
-                    }
-                }
-            }
-        });
-    }
-    /**
-     * 檢查 SQL injection
-     */
-    checkSQLInjection(ast, issues) {
-        traverseAST(ast.root, (node) => {
-            if (node.pythonKind === PythonNodeKind.Call) {
-                const funcNode = node.treeSitterNode.childForFieldName('function');
-                if (!funcNode) {
-                    return;
-                }
-                // 檢查 execute() 調用
-                if (funcNode.type === 'attribute') {
-                    const attrNode = funcNode.childForFieldName('attribute');
-                    if (attrNode?.text === 'execute' || attrNode?.text === 'executemany') {
-                        // 檢查第一個參數是否包含字串格式化
-                        const argsNode = node.treeSitterNode.childForFieldName('arguments');
-                        if (argsNode && argsNode.namedChildCount > 0) {
-                            const firstArg = argsNode.namedChild(0);
-                            if (firstArg && this.containsStringFormatting(firstArg.text)) {
-                                issues.push({
-                                    type: 'sql-injection',
-                                    location: {
-                                        filePath: ast.sourceFile,
-                                        line: node.range.start.line,
-                                        column: node.range.start.column
-                                    },
-                                    message: 'SQL 查詢使用字串格式化，可能存在 SQL injection 風險',
-                                    severity: 'critical',
-                                    recommendation: '使用參數化查詢代替字串拼接'
-                                });
-                            }
-                        }
-                    }
-                }
-            }
-        });
-    }
-    /**
-     * 檢查不安全的 pickle 使用
-     */
-    checkUnsafePickle(ast, issues) {
-        // 已在 checkDangerousAttributeCall 中處理
-    }
-    /**
-     * 檢查 shell injection
-     */
-    checkShellInjection(ast, issues) {
-        traverseAST(ast.root, (node) => {
-            if (node.pythonKind === PythonNodeKind.Call) {
-                const funcNode = node.treeSitterNode.childForFieldName('function');
-                if (!funcNode) {
-                    return;
-                }
-                // 檢查 subprocess.run() 或 subprocess.Popen()
-                if (funcNode.type === 'attribute') {
-                    const objNode = funcNode.childForFieldName('object');
-                    const attrNode = funcNode.childForFieldName('attribute');
-                    if (objNode?.text === 'subprocess' && (attrNode?.text === 'run' || attrNode?.text === 'Popen' || attrNode?.text === 'call')) {
-                        // 檢查是否有 shell=True
-                        const argsNode = node.treeSitterNode.childForFieldName('arguments');
-                        if (argsNode && this.hasShellTrue(argsNode)) {
-                            issues.push({
-                                type: 'unsafe-api',
-                                location: {
-                                    filePath: ast.sourceFile,
-                                    line: node.range.start.line,
-                                    column: node.range.start.column
-                                },
-                                message: 'subprocess 使用 shell=True 可能導致命令注入漏洞',
-                                severity: 'high',
-                                recommendation: '避免使用 shell=True，改用列表形式的命令參數'
-                            });
-                        }
-                    }
-                }
-            }
-        });
-    }
-    /**
-     * 檢查字串是否包含格式化
-     */
-    containsStringFormatting(text) {
-        // f-string
-        if (text.startsWith('f"') || text.startsWith('f\'')) {
-            return true;
-        }
-        // % 格式化
-        if (text.includes('%s') || text.includes('%d')) {
-            return true;
-        }
-        // .format()
-        if (text.includes('.format(')) {
-            return true;
-        }
-        // 字串拼接
-        if (text.includes('+')) {
-            return true;
-        }
-        return false;
-    }
-    /**
-     * 檢查是否有 shell=True 參數
-     */
-    hasShellTrue(argsNode) {
-        for (let i = 0; i < argsNode.childCount; i++) {
-            const child = argsNode.child(i);
-            if (child?.type === 'keyword_argument') {
-                const nameNode = child.childForFieldName('name');
-                const valueNode = child.childForFieldName('value');
-                if (nameNode?.text === 'shell' && valueNode?.text === 'True') {
-                    return true;
-                }
-            }
-        }
-        return false;
-    }
-    /**
-     * 獲取危險函數的嚴重程度
-     */
-    getDangerousFunctionSeverity(funcName) {
-        const criticalFunctions = new Set(['eval', 'exec', 'compile']);
-        const highFunctions = new Set(['__import__']);
-        if (criticalFunctions.has(funcName)) {
-            return 'critical';
-        }
-        if (highFunctions.has(funcName)) {
-            return 'high';
-        }
-        return 'medium';
-    }
-    /**
-     * 獲取危險函數的建議
-     */
-    getDangerousFunctionRecommendation(funcName) {
-        const recommendations = {
-            eval: '使用 ast.literal_eval() 或 json.loads() 處理不信任的資料',
-            exec: '避免動態執行程式碼，使用安全的替代方案',
-            compile: '避免動態編譯程式碼',
-            __import__: '使用 importlib.import_module()',
-            open: '確保檔案路徑經過驗證，避免路徑穿越攻擊',
-            input: '驗證並清理使用者輸入'
-        };
-        return recommendations[funcName] || '評估是否有更安全的替代方案';
-    }
-}
-//# sourceMappingURL=security-checker.js.map

package/dist/plugins/python/analyzers/security-checker.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"security-checker.js","sourceRoot":"","sources":["../../../../src/plugins/python/analyzers/security-checker.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAsC,cAAc,EAAE,mBAAmB,EAA8B,MAAM,aAAa,CAAC;AAClI,OAAO,EAAE,WAAW,EAAe,MAAM,0BAA0B,CAAC;AAEpE;;GAEG;AACH,MAAM,OAAO,qBAAqB;IAChC;;OAEG;IACH,KAAK,CAAC,IAAY,EAAE,GAAc;QAChC,MAAM,MAAM,GAAoB,EAAE,CAAC;QAEnC,WAAW;QACX,IAAI,CAAC,uBAAuB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAE1C,UAAU;QACV,IAAI,CAAC,qBAAqB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAExC,mBAAmB;QACnB,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAEpC,mBAAmB;QACnB,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAEpC,2BAA2B;QAC3B,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAEtC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACK,uBAAuB,CAAC,GAAc,EAAE,MAAuB;QACrE,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE;YAC7B,IAAI,IAAI,CAAC,UAAU,KAAK,cAAc,CAAC,IAAI,EAAE,CAAC;gBAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;gBACnE,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAAA,OAAO;gBAAA,CAAC;gBAExB,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC;gBAE/B,WAAW;gBACX,IAAI,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACtC,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,aAAa;wBACnB,QAAQ,EAAE;4BACR,QAAQ,EAAE,GAAG,CAAC,UAAU;4BACxB,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI;4BAC3B,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM;yBAChC;wBACD,OAAO,EAAE,MAAM,QAAQ,gBAAgB;wBACvC,QAAQ,EAAE,IAAI,CAAC,4BAA4B,CAAC,QAAQ,CAAC;wBACrD,cAAc,EAAE,IAAI,CAAC,kCAAkC,CAAC,QAAQ,CAAC;qBAClE,CAAC,CAAC;gBACL,CAAC;gBAED,oBAAoB;gBACpB,IAAI,QAAQ,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;oBAClC,IAAI,CAAC,2BAA2B,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;gBAC3E,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,2BAA2B,CACjC,QAAa,EACb,QAAuB,EACvB,QAAgB,EAChB,MAAuB;QAEvB,MAAM,OAAO,GAAG,QAAQ,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,QAAQ,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;QAEzD,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;YAAA,OAAO;QAAA,CAAC;QAEpC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;QAC7B,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC;QAE/B,sBAAsB;QACtB,IAAI,OAAO,KAAK,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,OAAO,CAAC,EAAE,CAAC;YACxE,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,YAAY;gBAClB,QAAQ,EAAE;oBACR,QAAQ;oBACR,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI;oBAC/B,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM;iBACpC;gBACD,OAAO,EAAE,MAAM,OAAO,IAAI,QAAQ,eAAe;gBACjD,QAAQ,EAAE,MAAM;gBAChB,cAAc,EAAE,oCAAoC;aACrD,CAAC,CAAC;QACL,CAAC;QAED,eAAe;QACf,IAAI,OAAO,KAAK,QAAQ,IAAI,CAAC,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,MAAM,CAAC,EAAE,CAAC;YAC1E,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,YAAY;gBAClB,QAAQ,EAAE;oBACR,QAAQ;oBACR,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI;oBAC/B,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM;iBACpC;gBACD,OAAO,EAAE,aAAa,QAAQ,wBAAwB;gBACtD,QAAQ,EAAE,UAAU;gBACpB,cAAc,EAAE,qBAAqB;aACtC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;OAEG;IACK,qBAAqB,CAAC,GAAc,EAAE,MAAuB;QACnE,MAAM,cAAc,GAAG;YACrB,gCAAgC;YAChC,8BAA8B;YAC9B,+BAA+B;YAC/B,6BAA6B;YAC7B,mCAAmC;SACpC,CAAC;QAEF,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE;YAC7B,IACE,IAAI,CAAC,UAAU,KAAK,cAAc,CAAC,UAAU;mBAC1C,IAAI,CAAC,UAAU,KAAK,cAAc,CAAC,mBAAmB,EACzD,CAAC;gBACD,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;gBAEtC,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;oBACrC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;wBACvB,MAAM,CAAC,IAAI,CAAC;4BACV,IAAI,EAAE,kBAAkB;4BACxB,QAAQ,EAAE;gCACR,QAAQ,EAAE,GAAG,CAAC,UAAU;gCACxB,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI;gCAC3B,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM;6BAChC;4BACD,OAAO,EAAE,eAAe;4BACxB,QAAQ,EAAE,MAAM;4BAChB,cAAc,EAAE,kBAAkB;yBACnC,CAAC,CAAC;wBACH,MAAM;oBACR,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,GAAc,EAAE,MAAuB;QAC/D,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE;YAC7B,IAAI,IAAI,CAAC,UAAU,KAAK,cAAc,CAAC,IAAI,EAAE,CAAC;gBAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;gBACnE,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAAA,OAAO;gBAAA,CAAC;gBAExB,kBAAkB;gBAClB,IAAI,QAAQ,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;oBAClC,MAAM,QAAQ,GAAG,QAAQ,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;oBACzD,IAAI,QAAQ,EAAE,IAAI,KAAK,SAAS,IAAI,QAAQ,EAAE,IAAI,KAAK,aAAa,EAAE,CAAC;wBACrE,mBAAmB;wBACnB,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;wBACpE,IAAI,QAAQ,IAAI,QAAQ,CAAC,eAAe,GAAG,CAAC,EAAE,CAAC;4BAC7C,MAAM,QAAQ,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;4BACxC,IAAI,QAAQ,IAAI,IAAI,CAAC,wBAAwB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gCAC7D,MAAM,CAAC,IAAI,CAAC;oCACV,IAAI,EAAE,eAAe;oCACrB,QAAQ,EAAE;wCACR,QAAQ,EAAE,GAAG,CAAC,UAAU;wCACxB,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI;wCAC3B,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM;qCAChC;oCACD,OAAO,EAAE,qCAAqC;oCAC9C,QAAQ,EAAE,UAAU;oCACpB,cAAc,EAAE,eAAe;iCAChC,CAAC,CAAC;4BACL,CAAC;wBACH,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,GAAc,EAAE,MAAuB;QAC/D,qCAAqC;IACvC,CAAC;IAED;;OAEG;IACK,mBAAmB,CAAC,GAAc,EAAE,MAAuB;QACjE,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE;YAC7B,IAAI,IAAI,CAAC,UAAU,KAAK,cAAc,CAAC,IAAI,EAAE,CAAC;gBAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;gBACnE,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAAA,OAAO;gBAAA,CAAC;gBAExB,2CAA2C;gBAC3C,IAAI,QAAQ,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;oBAClC,MAAM,OAAO,GAAG,QAAQ,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;oBACrD,MAAM,QAAQ,GAAG,QAAQ,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;oBAEzD,IAAI,OAAO,EAAE,IAAI,KAAK,YAAY,IAAI,CAAC,QAAQ,EAAE,IAAI,KAAK,KAAK,IAAI,QAAQ,EAAE,IAAI,KAAK,OAAO,IAAI,QAAQ,EAAE,IAAI,KAAK,MAAM,CAAC,EAAE,CAAC;wBAC5H,mBAAmB;wBACnB,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;wBACpE,IAAI,QAAQ,IAAI,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;4BAC5C,MAAM,CAAC,IAAI,CAAC;gCACV,IAAI,EAAE,YAAY;gCAClB,QAAQ,EAAE;oCACR,QAAQ,EAAE,GAAG,CAAC,UAAU;oCACxB,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI;oCAC3B,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM;iCAChC;gCACD,OAAO,EAAE,qCAAqC;gCAC9C,QAAQ,EAAE,MAAM;gCAChB,cAAc,EAAE,6BAA6B;6BAC9C,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,wBAAwB,CAAC,IAAY;QAC3C,WAAW;QACX,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YACpD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,QAAQ;QACR,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,YAAY;QACZ,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO;QACP,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACK,YAAY,CAAC,QAAa;QAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAChC,IAAI,KAAK,EAAE,IAAI,KAAK,kBAAkB,EAAE,CAAC;gBACvC,MAAM,QAAQ,GAAG,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;gBACjD,MAAM,SAAS,GAAG,KAAK,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;gBACnD,IAAI,QAAQ,EAAE,IAAI,KAAK,OAAO,IAAI,SAAS,EAAE,IAAI,KAAK,MAAM,EAAE,CAAC;oBAC7D,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACK,4BAA4B,CAAC,QAAgB;QACnD,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;QAC/D,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;QAE9C,IAAI,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAAA,OAAO,UAAU,CAAC;QAAA,CAAC;QACzD,IAAI,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAAA,OAAO,MAAM,CAAC;QAAA,CAAC;QACjD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACK,kCAAkC,CAAC,QAAgB;QACzD,MAAM,eAAe,GAA2B;YAC9C,IAAI,EAAE,+CAA+C;YACrD,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,WAAW;YACpB,UAAU,EAAE,8BAA8B;YAC1C,IAAI,EAAE,qBAAqB;YAC3B,KAAK,EAAE,YAAY;SACpB,CAAC;QAEF,OAAO,eAAe,CAAC,QAAQ,CAAC,IAAI,eAAe,CAAC;IACtD,CAAC;CACF"}

package/dist/plugins/python/analyzers/type-safety-checker.d.ts

@@ -1,44 +0,0 @@
-/**
- * Python 型別安全檢查器
- * 檢查缺少 type hints、Any 使用等問題
- */
-import type { TypeSafetyIssue } from '../../../infrastructure/parser/analysis-types.js';
-import { type PythonAST } from '../types.js';
-/**
- * Python 型別安全檢查器類別
- */
-export declare class PythonTypeSafetyChecker {
-    /**
-     * 檢查型別安全問題
-     */
-    check(code: string, ast: PythonAST): TypeSafetyIssue[];
-    /**
-     * 檢查函式缺少 type hints
-     */
-    private checkMissingTypeHints;
-    /**
-     * 檢查參數型別
-     */
-    private checkParameterTypes;
-    /**
-     * 檢查 Any 型別使用
-     */
-    private checkAnyUsage;
-    /**
-     * 檢查 cast() 使用
-     */
-    private checkCastUsage;
-    /**
-     * 檢查 # type: ignore 註解
-     */
-    private checkTypeIgnore;
-    /**
-     * 獲取函式名稱
-     */
-    private getFunctionName;
-    /**
-     * 判斷是否為特殊方法
-     */
-    private isSpecialMethod;
-}
-//# sourceMappingURL=type-safety-checker.d.ts.map

package/dist/plugins/python/analyzers/type-safety-checker.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"type-safety-checker.d.ts","sourceRoot":"","sources":["../../../../src/plugins/python/analyzers/type-safety-checker.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0CAA0C,CAAC;AAChF,OAAO,EAAE,KAAK,SAAS,EAAsC,MAAM,aAAa,CAAC;AAGjF;;GAEG;AACH,qBAAa,uBAAuB;IAClC;;OAEG;IACH,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,GAAG,eAAe,EAAE;IAkBtD;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAiC7B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAwC3B;;OAEG;IACH,OAAO,CAAC,aAAa;IAoBrB;;OAEG;IACH,OAAO,CAAC,cAAc;IAoBtB;;OAEG;IACH,OAAO,CAAC,eAAe;IAoBvB;;OAEG;IACH,OAAO,CAAC,eAAe;IAKvB;;OAEG;IACH,OAAO,CAAC,eAAe;CAIxB"}

package/dist/plugins/python/analyzers/type-safety-checker.js

@@ -1,177 +0,0 @@
-/**
- * Python 型別安全檢查器
- * 檢查缺少 type hints、Any 使用等問題
- */
-import { PythonNodeKind } from '../types.js';
-import { traverseAST, getNodeText } from '../tree-sitter-bridge.js';
-/**
- * Python 型別安全檢查器類別
- */
-export class PythonTypeSafetyChecker {
-    /**
-     * 檢查型別安全問題
-     */
-    check(code, ast) {
-        const issues = [];
-        // 檢查函式缺少 type hints
-        this.checkMissingTypeHints(ast, issues);
-        // 檢查 Any 型別使用
-        this.checkAnyUsage(ast, issues);
-        // 檢查 cast() 使用
-        this.checkCastUsage(ast, issues);
-        // 檢查 # type: ignore 註解
-        this.checkTypeIgnore(code, ast, issues);
-        return issues;
-    }
-    /**
-     * 檢查函式缺少 type hints
-     */
-    checkMissingTypeHints(ast, issues) {
-        traverseAST(ast.root, (node) => {
-            if (node.pythonKind === PythonNodeKind.FunctionDefinition
-                || node.pythonKind === PythonNodeKind.AsyncFunctionDefinition) {
-                // 跳過特殊方法
-                const name = this.getFunctionName(node);
-                if (this.isSpecialMethod(name)) {
-                    return;
-                }
-                // 檢查返回型別
-                const returnType = node.treeSitterNode.childForFieldName('return_type');
-                if (!returnType) {
-                    issues.push({
-                        type: 'any-type',
-                        location: {
-                            filePath: ast.sourceFile,
-                            line: node.range.start.line,
-                            column: node.range.start.column
-                        },
-                        message: `函式 '${name}' 缺少返回型別註解`,
-                        severity: 'warning'
-                    });
-                }
-                // 檢查參數型別
-                this.checkParameterTypes(node, ast.sourceFile, issues);
-            }
-        });
-    }
-    /**
-     * 檢查參數型別
-     */
-    checkParameterTypes(funcNode, filePath, issues) {
-        const paramsNode = funcNode.treeSitterNode.childForFieldName('parameters');
-        if (!paramsNode) {
-            return;
-        }
-        for (let i = 0; i < paramsNode.namedChildCount; i++) {
-            const param = paramsNode.namedChild(i);
-            if (!param) {
-                continue;
-            }
-            const paramName = param.childForFieldName('name')?.text || param.text;
-            // 跳過 self 和 cls
-            if (paramName === 'self' || paramName === 'cls') {
-                continue;
-            }
-            // 跳過 *args 和 **kwargs
-            if (param.type === 'list_splat_pattern' || param.type === 'dictionary_splat_pattern') {
-                continue;
-            }
-            // 檢查是否有型別註解
-            const hasType = param.type === 'typed_parameter'
-                || param.type === 'typed_default_parameter'
-                || param.childForFieldName('type');
-            if (!hasType) {
-                issues.push({
-                    type: 'any-type',
-                    location: {
-                        filePath,
-                        line: param.startPosition.row,
-                        column: param.startPosition.column
-                    },
-                    message: `參數 '${paramName}' 缺少型別註解`,
-                    severity: 'warning'
-                });
-            }
-        }
-    }
-    /**
-     * 檢查 Any 型別使用
-     */
-    checkAnyUsage(ast, issues) {
-        traverseAST(ast.root, (node) => {
-            if (node.pythonKind === PythonNodeKind.Identifier) {
-                const text = getNodeText(node);
-                if (text === 'Any') {
-                    issues.push({
-                        type: 'any-type',
-                        location: {
-                            filePath: ast.sourceFile,
-                            line: node.range.start.line,
-                            column: node.range.start.column
-                        },
-                        message: '使用 Any 型別會降低型別安全性',
-                        severity: 'warning'
-                    });
-                }
-            }
-        });
-    }
-    /**
-     * 檢查 cast() 使用
-     */
-    checkCastUsage(ast, issues) {
-        traverseAST(ast.root, (node) => {
-            if (node.pythonKind === PythonNodeKind.Call) {
-                const funcNode = node.treeSitterNode.childForFieldName('function');
-                if (funcNode?.text === 'cast') {
-                    issues.push({
-                        type: 'unsafe-cast',
-                        location: {
-                            filePath: ast.sourceFile,
-                            line: node.range.start.line,
-                            column: node.range.start.column
-                        },
-                        message: '使用 cast() 可能繞過型別檢查',
-                        severity: 'warning'
-                    });
-                }
-            }
-        });
-    }
-    /**
-     * 檢查 # type: ignore 註解
-     */
-    checkTypeIgnore(code, ast, issues) {
-        const lines = code.split('\n');
-        for (let i = 0; i < lines.length; i++) {
-            const line = lines[i];
-            if (line.includes('# type: ignore')) {
-                issues.push({
-                    type: 'ignore-directive',
-                    location: {
-                        filePath: ast.sourceFile,
-                        line: i,
-                        column: line.indexOf('# type: ignore')
-                    },
-                    message: '使用 # type: ignore 忽略型別檢查',
-                    severity: 'warning'
-                });
-            }
-        }
-    }
-    /**
-     * 獲取函式名稱
-     */
-    getFunctionName(node) {
-        const nameNode = node.treeSitterNode.childForFieldName('name');
-        return nameNode?.text || '<anonymous>';
-    }
-    /**
-     * 判斷是否為特殊方法
-     */
-    isSpecialMethod(name) {
-        // __init__, __str__, __repr__ 等不需要完整 type hints
-        return name.startsWith('__') && name.endsWith('__');
-    }
-}
-//# sourceMappingURL=type-safety-checker.js.map

package/dist/plugins/python/analyzers/type-safety-checker.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"type-safety-checker.js","sourceRoot":"","sources":["../../../../src/plugins/python/analyzers/type-safety-checker.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAsC,cAAc,EAAE,MAAM,aAAa,CAAC;AACjF,OAAO,EAAE,WAAW,EAAE,WAAW,EAAgB,MAAM,0BAA0B,CAAC;AAElF;;GAEG;AACH,MAAM,OAAO,uBAAuB;IAClC;;OAEG;IACH,KAAK,CAAC,IAAY,EAAE,GAAc;QAChC,MAAM,MAAM,GAAsB,EAAE,CAAC;QAErC,oBAAoB;QACpB,IAAI,CAAC,qBAAqB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAExC,cAAc;QACd,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAEhC,eAAe;QACf,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAEjC,uBAAuB;QACvB,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAExC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACK,qBAAqB,CAAC,GAAc,EAAE,MAAyB;QACrE,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE;YAC7B,IACE,IAAI,CAAC,UAAU,KAAK,cAAc,CAAC,kBAAkB;mBAClD,IAAI,CAAC,UAAU,KAAK,cAAc,CAAC,uBAAuB,EAC7D,CAAC;gBACD,SAAS;gBACT,MAAM,IAAI,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;gBACxC,IAAI,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC/B,OAAO;gBACT,CAAC;gBAED,SAAS;gBACT,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC;gBACxE,IAAI,CAAC,UAAU,EAAE,CAAC;oBAChB,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,UAAU;wBAChB,QAAQ,EAAE;4BACR,QAAQ,EAAE,GAAG,CAAC,UAAU;4BACxB,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI;4BAC3B,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM;yBAChC;wBACD,OAAO,EAAE,OAAO,IAAI,YAAY;wBAChC,QAAQ,EAAE,SAAS;qBACpB,CAAC,CAAC;gBACL,CAAC;gBAED,SAAS;gBACT,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAAE,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACzD,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,mBAAmB,CACzB,QAAuB,EACvB,QAAgB,EAChB,MAAyB;QAEzB,MAAM,UAAU,GAAG,QAAQ,CAAC,cAAc,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC;QAC3E,IAAI,CAAC,UAAU,EAAE,CAAC;YAAA,OAAO;QAAA,CAAC;QAE1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,eAAe,EAAE,CAAC,EAAE,EAAE,CAAC;YACpD,MAAM,KAAK,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YACvC,IAAI,CAAC,KAAK,EAAE,CAAC;gBAAA,SAAS;YAAA,CAAC;YAEvB,MAAM,SAAS,GAAG,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC;YAEtE,gBAAgB;YAChB,IAAI,SAAS,KAAK,MAAM,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;gBAAA,SAAS;YAAA,CAAC;YAE5D,sBAAsB;YACtB,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB,IAAI,KAAK,CAAC,IAAI,KAAK,0BAA0B,EAAE,CAAC;gBAAA,SAAS;YAAA,CAAC;YAEjG,YAAY;YACZ,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,KAAK,iBAAiB;mBAC3C,KAAK,CAAC,IAAI,KAAK,yBAAyB;mBACxC,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;YAErC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,UAAU;oBAChB,QAAQ,EAAE;wBACR,QAAQ;wBACR,IAAI,EAAE,KAAK,CAAC,aAAa,CAAC,GAAG;wBAC7B,MAAM,EAAE,KAAK,CAAC,aAAa,CAAC,MAAM;qBACnC;oBACD,OAAO,EAAE,OAAO,SAAS,UAAU;oBACnC,QAAQ,EAAE,SAAS;iBACpB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACK,aAAa,CAAC,GAAc,EAAE,MAAyB;QAC7D,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE;YAC7B,IAAI,IAAI,CAAC,UAAU,KAAK,cAAc,CAAC,UAAU,EAAE,CAAC;gBAClD,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;gBAC/B,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;oBACnB,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,UAAU;wBAChB,QAAQ,EAAE;4BACR,QAAQ,EAAE,GAAG,CAAC,UAAU;4BACxB,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI;4BAC3B,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM;yBAChC;wBACD,OAAO,EAAE,mBAAmB;wBAC5B,QAAQ,EAAE,SAAS;qBACpB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,cAAc,CAAC,GAAc,EAAE,MAAyB;QAC9D,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE;YAC7B,IAAI,IAAI,CAAC,UAAU,KAAK,cAAc,CAAC,IAAI,EAAE,CAAC;gBAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;gBACnE,IAAI,QAAQ,EAAE,IAAI,KAAK,MAAM,EAAE,CAAC;oBAC9B,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,aAAa;wBACnB,QAAQ,EAAE;4BACR,QAAQ,EAAE,GAAG,CAAC,UAAU;4BACxB,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI;4BAC3B,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM;yBAChC;wBACD,OAAO,EAAE,oBAAoB;wBAC7B,QAAQ,EAAE,SAAS;qBACpB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,eAAe,CAAC,IAAY,EAAE,GAAc,EAAE,MAAyB;QAC7E,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAE/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACtB,IAAI,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBACpC,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,kBAAkB;oBACxB,QAAQ,EAAE;wBACR,QAAQ,EAAE,GAAG,CAAC,UAAU;wBACxB,IAAI,EAAE,CAAC;wBACP,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC;qBACvC;oBACD,OAAO,EAAE,0BAA0B;oBACnC,QAAQ,EAAE,SAAS;iBACpB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACK,eAAe,CAAC,IAAmB;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC/D,OAAO,QAAQ,EAAE,IAAI,IAAI,aAAa,CAAC;IACzC,CAAC;IAED;;OAEG;IACK,eAAe,CAAC,IAAY;QAClC,gDAAgD;QAChD,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACtD,CAAC;CACF"}

package/dist/plugins/python/analyzers/unused-symbol-detector.d.ts

@@ -1,37 +0,0 @@
-/**
- * Python 未使用符號檢測器
- * 檢測未使用的變數、函式、類別和導入
- */
-import type { Symbol } from '../../../shared/types/index.js';
-import type { UnusedCode } from '../../../infrastructure/parser/analysis-types.js';
-import { type PythonAST } from '../types.js';
-/**
- * Python 未使用符號檢測器類別
- */
-export declare class PythonUnusedSymbolDetector {
-    /**
-     * 檢測未使用的符號
-     */
-    detect(ast: PythonAST, allSymbols: Symbol[]): UnusedCode[];
-    /**
-     * 收集所有使用的名稱及其出現次數
-     */
-    private collectUsedNames;
-    /**
-     * 判斷是否應該跳過該符號
-     */
-    private shouldSkipSymbol;
-    /**
-     * 獲取未使用類型
-     */
-    private getUnusedType;
-    /**
-     * 計算信心程度
-     */
-    private calculateConfidence;
-    /**
-     * 生成未使用原因說明
-     */
-    private generateReason;
-}
-//# sourceMappingURL=unused-symbol-detector.d.ts.map

package/dist/plugins/python/analyzers/unused-symbol-detector.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"unused-symbol-detector.d.ts","sourceRoot":"","sources":["../../../../src/plugins/python/analyzers/unused-symbol-detector.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAErD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0CAA0C,CAAC;AAC3E,OAAO,EAAE,KAAK,SAAS,EAAkB,MAAM,aAAa,CAAC;AAG7D;;GAEG;AACH,qBAAa,0BAA0B;IACrC;;OAEG;IACH,MAAM,CAAC,GAAG,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,UAAU,EAAE;IAmC1D;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAaxB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IA2BxB;;OAEG;IACH,OAAO,CAAC,aAAa;IAerB;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAyB3B;;OAEG;IACH,OAAO,CAAC,cAAc;CAmBvB"}