auto-code-fixer 0.3.2__py3-none-any.whl → 0.3.3__py3-none-any.whl

auto_code_fixer/__init__.py

@@ -1 +1 @@
-__version__ = "0.3.2"
+__version__ = "0.3.3"

auto_code_fixer/cli.py

@@ -88,15 +88,43 @@ def fix_file(file_path, project_root, api_key, ask, verbose, *, dry_run: bool, m
                 if dry_run:
                     log("DRY RUN: would apply fixes:\n" + "\n".join(rel_changes), "WARN")
                 else:
+                    sr = os.path.realpath(os.path.abspath(sandbox_root))
+                    pr = os.path.realpath(os.path.abspath(project_root))
+
                     for p in sorted(changed_sandbox_files):
-                        rel = os.path.relpath(p, sandbox_root)
-                        dst = os.path.join(project_root, rel)
-                        if os.path.exists(dst):
-                            bak = backup_file(dst)
+                        p_real = os.path.realpath(os.path.abspath(p))
+
+                        # compute rel using real paths to avoid macOS /private path weirdness
+                        rel = os.path.relpath(p_real, sr)
+
+                        # Safety: never allow paths escaping the sandbox
+                        if rel.startswith(".." + os.sep) or rel == "..":
+                            log(f"Skipping suspicious path outside sandbox: {p}", "WARN")
+                            continue
+
+                        dst = os.path.join(pr, rel)
+                        dst_real = os.path.realpath(os.path.abspath(dst))
+
+                        # Safety: never write outside the project root
+                        if not (dst_real.startswith(pr + os.sep) or dst_real == pr):
+                            log(f"Skipping suspicious destination outside project: {dst}", "WARN")
+                            continue
+
+                        # Avoid shutil.SameFileError
+                        try:
+                            if os.path.exists(dst_real) and os.path.samefile(p_real, dst_real):
+                                log(f"Skip copy (same file): {dst_real}", "DEBUG")
+                                continue
+                        except Exception:
+                            pass
+
+                        if os.path.exists(dst_real):
+                            bak = backup_file(dst_real)
                             log(f"Backup created: {bak}", "DEBUG")
-                        os.makedirs(os.path.dirname(dst), exist_ok=True)
-                        shutil.copy(p, dst)
-                        log(f"File updated: {dst}")
+
+                        os.makedirs(os.path.dirname(dst_real), exist_ok=True)
+                        shutil.copy(p_real, dst_real)
+                        log(f"File updated: {dst_real}")
 
             shutil.rmtree(sandbox_root)
             log(f"Fix completed in {attempt + 1} attempt(s) 🎉")

{auto_code_fixer-0.3.2.dist-info → auto_code_fixer-0.3.3.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: auto-code-fixer
-Version: 0.3.2
+Version: 0.3.3
 Summary: Automatically fix Python code using ChatGPT
 Author-email: Arif Shah <ashah7775@gmail.com>
 License: MIT

{auto_code_fixer-0.3.2.dist-info → auto_code_fixer-0.3.3.dist-info}/RECORD

@@ -1,5 +1,5 @@
-auto_code_fixer/__init__.py,sha256=vNiWJ14r_cw5t_7UDqDQIVZvladKFGyHH2avsLpN7Vg,22
-auto_code_fixer/cli.py,sha256=LUO-3Pwe_ZQYOIChw2KQTZFbpNL5HT9532fjmMLiUo4,9104
+auto_code_fixer/__init__.py,sha256=8KcCYTXH99C2-gCLuPILJvtT9YftRWJsartIx6TQ2ZY,22
+auto_code_fixer/cli.py,sha256=Fsty_FJC7sm7mJCnXFQpwdF7N-fFxkJkgjhHFrGr0OA,10453
 auto_code_fixer/command_runner.py,sha256=6P8hGRavN5C39x-e03p02Vc805NnZH9U7e48ngb5jJI,1104
 auto_code_fixer/fixer.py,sha256=DlAOVbw9AImEKJy8llisVCtss0tXKHMnioYeFBQGXlE,2293
 auto_code_fixer/installer.py,sha256=LC0jasSsPI7eHMeDxa622OoMCR1951HAXUZWp-kcmVY,1522
@@ -11,9 +11,9 @@ auto_code_fixer/sandbox.py,sha256=FWQcCxNDI4i7ckTKHuARSSIHCopBRqG16MVtx9s75R8,16
 auto_code_fixer/traceback_utils.py,sha256=sbSuLO-2UBk5QPJZYJunTK9WGOpEY8mxR6WRKbtCIoM,935
 auto_code_fixer/utils.py,sha256=YXCv3PcDo5NBM1odksBTWkHTEELRtEXfPDIORA5iYaM,3090
 auto_code_fixer/venv_manager.py,sha256=2ww8reYgLbLohh-moAD5YKM09qv_mC5yYzJRwm3XiXc,1202
-auto_code_fixer-0.3.2.dist-info/licenses/LICENSE,sha256=hgchJNa26tjXuLztwSUDbYQxNLnAPnLk6kDXNIkC8xc,1066
-auto_code_fixer-0.3.2.dist-info/METADATA,sha256=EL604p3nMElboz7x9erQJGRAVXxv0Y3Ju5I9XSrJQEI,3290
-auto_code_fixer-0.3.2.dist-info/WHEEL,sha256=wUyA8OaulRlbfwMtmQsvNngGrxQHAvkKcvRmdizlJi0,92
-auto_code_fixer-0.3.2.dist-info/entry_points.txt,sha256=a-j2rkfwkrhXZ5Qbz_6_gwk6Bj7nijYR1DALjWp5Myk,61
-auto_code_fixer-0.3.2.dist-info/top_level.txt,sha256=qUk1qznb6Qxqmxy2A3z_5dpOZlmNKHwUiLuJwH-CrAk,16
-auto_code_fixer-0.3.2.dist-info/RECORD,,
+auto_code_fixer-0.3.3.dist-info/licenses/LICENSE,sha256=hgchJNa26tjXuLztwSUDbYQxNLnAPnLk6kDXNIkC8xc,1066
+auto_code_fixer-0.3.3.dist-info/METADATA,sha256=JBkdvGh27MLYWEGNX_NS46dnoVtidUhPyAn7uflcgZ8,3290
+auto_code_fixer-0.3.3.dist-info/WHEEL,sha256=wUyA8OaulRlbfwMtmQsvNngGrxQHAvkKcvRmdizlJi0,92
+auto_code_fixer-0.3.3.dist-info/entry_points.txt,sha256=a-j2rkfwkrhXZ5Qbz_6_gwk6Bj7nijYR1DALjWp5Myk,61
+auto_code_fixer-0.3.3.dist-info/top_level.txt,sha256=qUk1qznb6Qxqmxy2A3z_5dpOZlmNKHwUiLuJwH-CrAk,16
+auto_code_fixer-0.3.3.dist-info/RECORD,,