auto-code-fixer 0.3.2__tar.gz → 0.3.4__tar.gz

{auto_code_fixer-0.3.2 → auto_code_fixer-0.3.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: auto-code-fixer
-Version: 0.3.2
+Version: 0.3.4
 Summary: Automatically fix Python code using ChatGPT
 Author-email: Arif Shah <ashah7775@gmail.com>
 License: MIT

auto_code_fixer-0.3.4/auto_code_fixer/__init__.py

@@ -0,0 +1 @@
+__version__ = "0.3.4"

{auto_code_fixer-0.3.2 → auto_code_fixer-0.3.4}/auto_code_fixer/cli.py

@@ -29,6 +29,19 @@ def fix_file(file_path, project_root, api_key, ask, verbose, *, dry_run: bool, m
     from auto_code_fixer.sandbox import make_sandbox
     sandbox_root, sandbox_entry = make_sandbox(entry_file=file_path, project_root=project_root)
 
+    # Always delete temp sandbox (best-effort). Also register atexit cleanup in case of crashes.
+    import atexit
+
+    def cleanup_sandbox() -> None:
+        try:
+            shutil.rmtree(sandbox_root)
+        except FileNotFoundError:
+            return
+        except Exception as e:
+            log(f"WARN: failed to delete sandbox dir {sandbox_root}: {e}")
+
+    atexit.register(cleanup_sandbox)
+
     # Create isolated venv in sandbox
     from auto_code_fixer.venv_manager import create_venv
     from auto_code_fixer.patcher import backup_file
@@ -82,23 +95,51 @@ def fix_file(file_path, project_root, api_key, ask, verbose, *, dry_run: bool, m
 
                     if confirm != "y":
                         log("User declined overwrite", "WARN")
-                        shutil.rmtree(sandbox_root)
+                        cleanup_sandbox()
                         return False
 
                 if dry_run:
                     log("DRY RUN: would apply fixes:\n" + "\n".join(rel_changes), "WARN")
                 else:
+                    sr = os.path.realpath(os.path.abspath(sandbox_root))
+                    pr = os.path.realpath(os.path.abspath(project_root))
+
                     for p in sorted(changed_sandbox_files):
-                        rel = os.path.relpath(p, sandbox_root)
-                        dst = os.path.join(project_root, rel)
-                        if os.path.exists(dst):
-                            bak = backup_file(dst)
+                        p_real = os.path.realpath(os.path.abspath(p))
+
+                        # compute rel using real paths to avoid macOS /private path weirdness
+                        rel = os.path.relpath(p_real, sr)
+
+                        # Safety: never allow paths escaping the sandbox
+                        if rel.startswith(".." + os.sep) or rel == "..":
+                            log(f"Skipping suspicious path outside sandbox: {p}", "WARN")
+                            continue
+
+                        dst = os.path.join(pr, rel)
+                        dst_real = os.path.realpath(os.path.abspath(dst))
+
+                        # Safety: never write outside the project root
+                        if not (dst_real.startswith(pr + os.sep) or dst_real == pr):
+                            log(f"Skipping suspicious destination outside project: {dst}", "WARN")
+                            continue
+
+                        # Avoid shutil.SameFileError
+                        try:
+                            if os.path.exists(dst_real) and os.path.samefile(p_real, dst_real):
+                                log(f"Skip copy (same file): {dst_real}", "DEBUG")
+                                continue
+                        except Exception:
+                            pass
+
+                        if os.path.exists(dst_real):
+                            bak = backup_file(dst_real)
                             log(f"Backup created: {bak}", "DEBUG")
-                        os.makedirs(os.path.dirname(dst), exist_ok=True)
-                        shutil.copy(p, dst)
-                        log(f"File updated: {dst}")
 
-            shutil.rmtree(sandbox_root)
+                        os.makedirs(os.path.dirname(dst_real), exist_ok=True)
+                        shutil.copy(p_real, dst_real)
+                        log(f"File updated: {dst_real}")
+
+            cleanup_sandbox()
             log(f"Fix completed in {attempt + 1} attempt(s) 🎉")
             return True
 
@@ -166,7 +207,7 @@ def fix_file(file_path, project_root, api_key, ask, verbose, *, dry_run: bool, m
         time.sleep(1)
 
     log("Failed to auto-fix file after max retries ❌", "ERROR")
-    shutil.rmtree(sandbox_root)
+    cleanup_sandbox()
     return False
 
 

{auto_code_fixer-0.3.2 → auto_code_fixer-0.3.4}/auto_code_fixer.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: auto-code-fixer
-Version: 0.3.2
+Version: 0.3.4
 Summary: Automatically fix Python code using ChatGPT
 Author-email: Arif Shah <ashah7775@gmail.com>
 License: MIT

{auto_code_fixer-0.3.2 → auto_code_fixer-0.3.4}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "auto-code-fixer"
-version = "0.3.2"
+version = "0.3.4"
 description = "Automatically fix Python code using ChatGPT"
 readme = "README.md"
 

auto_code_fixer-0.3.2/auto_code_fixer/__init__.py

@@ -1 +0,0 @@
-__version__ = "0.3.2"