auto-code-fixer 0.3.1__tar.gz → 0.3.2__tar.gz

{auto_code_fixer-0.3.1 → auto_code_fixer-0.3.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: auto-code-fixer
-Version: 0.3.1
+Version: 0.3.2
 Summary: Automatically fix Python code using ChatGPT
 Author-email: Arif Shah <ashah7775@gmail.com>
 License: MIT

auto_code_fixer-0.3.2/auto_code_fixer/__init__.py

@@ -0,0 +1 @@
+__version__ = "0.3.2"

{auto_code_fixer-0.3.1 → auto_code_fixer-0.3.2}/auto_code_fixer/cli.py

@@ -115,6 +115,15 @@ def fix_file(file_path, project_root, api_key, ask, verbose, *, dry_run: bool, m
 
         target_file = pick_relevant_file(stderr, sandbox_root=sandbox_root) or sandbox_entry
 
+        # Safety: ensure target_file is within sandbox
+        try:
+            sr = os.path.realpath(os.path.abspath(sandbox_root))
+            tf = os.path.realpath(os.path.abspath(target_file))
+            if not (tf.startswith(sr + os.sep) or tf == sr):
+                target_file = sandbox_entry
+        except Exception:
+            target_file = sandbox_entry
+
         # Optional AI fix plan can override file selection
         try:
             from auto_code_fixer.plan import ask_ai_for_fix_plan

{auto_code_fixer-0.3.1 → auto_code_fixer-0.3.2}/auto_code_fixer/traceback_utils.py

@@ -4,24 +4,34 @@ import re
 _FILE_RE = re.compile(r"File \"([^\"]+)\", line (\d+)")
 
 
+def _norm(p: str) -> str:
+    """Normalize paths for comparison.
+
+    On macOS tracebacks often include /private prefix; realpath handles that.
+    """
+    return os.path.realpath(os.path.abspath(p))
+
+
 def pick_relevant_file(stderr: str, *, sandbox_root: str) -> str | None:
     """Pick the most relevant python file from a traceback.
 
     Strategy: return the last file path that lives inside sandbox_root.
+
+    Uses realpath() to handle macOS '/private/var/...' vs '/var/...' differences.
     """
 
     if not stderr:
         return None
 
-    sandbox_root = os.path.abspath(sandbox_root)
+    sandbox_root_n = _norm(sandbox_root)
     matches = _FILE_RE.findall(stderr)
     if not matches:
         return None
 
     chosen = None
     for path, _lineno in matches:
-        ap = os.path.abspath(path)
-        if ap.startswith(sandbox_root):
+        ap = _norm(path)
+        if ap.startswith(sandbox_root_n + os.sep) or ap == sandbox_root_n:
             chosen = ap
 
     return chosen

{auto_code_fixer-0.3.1 → auto_code_fixer-0.3.2}/auto_code_fixer.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: auto-code-fixer
-Version: 0.3.1
+Version: 0.3.2
 Summary: Automatically fix Python code using ChatGPT
 Author-email: Arif Shah <ashah7775@gmail.com>
 License: MIT

{auto_code_fixer-0.3.1 → auto_code_fixer-0.3.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "auto-code-fixer"
-version = "0.3.1"
+version = "0.3.2"
 description = "Automatically fix Python code using ChatGPT"
 readme = "README.md"
 

auto_code_fixer-0.3.1/auto_code_fixer/__init__.py

@@ -1 +0,0 @@
-__version__ = "0.3.1"