auto-code-fixer 0.3.2__tar.gz → 0.3.3__tar.gz

{auto_code_fixer-0.3.2 → auto_code_fixer-0.3.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: auto-code-fixer
-Version: 0.3.2
+Version: 0.3.3
 Summary: Automatically fix Python code using ChatGPT
 Author-email: Arif Shah <ashah7775@gmail.com>
 License: MIT

auto_code_fixer-0.3.3/auto_code_fixer/__init__.py

@@ -0,0 +1 @@
+__version__ = "0.3.3"

{auto_code_fixer-0.3.2 → auto_code_fixer-0.3.3}/auto_code_fixer/cli.py

@@ -88,15 +88,43 @@ def fix_file(file_path, project_root, api_key, ask, verbose, *, dry_run: bool, m
                 if dry_run:
                     log("DRY RUN: would apply fixes:\n" + "\n".join(rel_changes), "WARN")
                 else:
+                    sr = os.path.realpath(os.path.abspath(sandbox_root))
+                    pr = os.path.realpath(os.path.abspath(project_root))
+
                     for p in sorted(changed_sandbox_files):
-                        rel = os.path.relpath(p, sandbox_root)
-                        dst = os.path.join(project_root, rel)
-                        if os.path.exists(dst):
-                            bak = backup_file(dst)
+                        p_real = os.path.realpath(os.path.abspath(p))
+
+                        # compute rel using real paths to avoid macOS /private path weirdness
+                        rel = os.path.relpath(p_real, sr)
+
+                        # Safety: never allow paths escaping the sandbox
+                        if rel.startswith(".." + os.sep) or rel == "..":
+                            log(f"Skipping suspicious path outside sandbox: {p}", "WARN")
+                            continue
+
+                        dst = os.path.join(pr, rel)
+                        dst_real = os.path.realpath(os.path.abspath(dst))
+
+                        # Safety: never write outside the project root
+                        if not (dst_real.startswith(pr + os.sep) or dst_real == pr):
+                            log(f"Skipping suspicious destination outside project: {dst}", "WARN")
+                            continue
+
+                        # Avoid shutil.SameFileError
+                        try:
+                            if os.path.exists(dst_real) and os.path.samefile(p_real, dst_real):
+                                log(f"Skip copy (same file): {dst_real}", "DEBUG")
+                                continue
+                        except Exception:
+                            pass
+
+                        if os.path.exists(dst_real):
+                            bak = backup_file(dst_real)
                             log(f"Backup created: {bak}", "DEBUG")
-                        os.makedirs(os.path.dirname(dst), exist_ok=True)
-                        shutil.copy(p, dst)
-                        log(f"File updated: {dst}")
+
+                        os.makedirs(os.path.dirname(dst_real), exist_ok=True)
+                        shutil.copy(p_real, dst_real)
+                        log(f"File updated: {dst_real}")
 
             shutil.rmtree(sandbox_root)
             log(f"Fix completed in {attempt + 1} attempt(s) 🎉")

{auto_code_fixer-0.3.2 → auto_code_fixer-0.3.3}/auto_code_fixer.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: auto-code-fixer
-Version: 0.3.2
+Version: 0.3.3
 Summary: Automatically fix Python code using ChatGPT
 Author-email: Arif Shah <ashah7775@gmail.com>
 License: MIT

{auto_code_fixer-0.3.2 → auto_code_fixer-0.3.3}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "auto-code-fixer"
-version = "0.3.2"
+version = "0.3.3"
 description = "Automatically fix Python code using ChatGPT"
 readme = "README.md"
 

auto_code_fixer-0.3.2/auto_code_fixer/__init__.py

@@ -1 +0,0 @@
-__version__ = "0.3.2"