fix(commands): reject relative project_path with clear error

Without validation, Path('foo').resolve() silently joined the input to
the sidecar's cwd, producing confusing doubled paths in errors like
/Users/.../attune-gui/Users/.../attune-ai/.help when a user typed
"Users/me/project" instead of "/Users/me/project".

_resolve_project_paths now requires absolute paths or ~-prefixed paths
for project_path / project_root / help_dir, raising a clear ValueError
that is surfaced to the UI as the job's error message.

Bump 0.1.0 → 0.1.1.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: silversurfer562

pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "attune-gui"
-version = "0.1.0"
+version = "0.1.1"
 description = "Unified local GUI that drives attune-ai, attune-rag, and attune-author Python libraries via a FastAPI sidecar."
 readme = "README.md"
 requires-python = ">=3.10"

sidecar/attune_gui/commands.py

@@ -28,19 +28,40 @@
 logger = logging.getLogger(__name__)
 
 
+def _require_absolute(field: str, raw: str) -> None:
+    """Reject relative paths up-front so users see a clear error.
+
+    Without this, ``Path('foo').resolve()`` silently joins ``foo`` to the
+    sidecar's cwd, producing confusing doubled paths in downstream errors
+    (e.g. /Users/.../attune-gui/Users/.../attune-ai/.help).
+    """
+    if raw.startswith("/") or raw.startswith("~"):
+        return
+    raise ValueError(
+        f"{field} must be an absolute path (e.g. /Users/you/project) "
+        f"or start with ~ (e.g. ~/project), got: {raw!r}",
+    )
+
+
 def _resolve_project_paths(args: dict[str, Any]) -> tuple[Path, Path]:
     """Return (project_root, help_dir) from args.
 
     Accepts either a single ``project_path`` convenience key or the legacy
     ``project_root`` / ``help_dir`` pair.  ``project_path`` wins when set.
+    Relative paths are rejected with a clear error.
     """
     project_path_raw = str(args.get("project_path", "")).strip()
     if project_path_raw:
+        _require_absolute("project_path", project_path_raw)
         project_root = Path(project_path_raw).expanduser().resolve()
         help_dir = project_root / ".help"
     else:
         help_dir_raw = str(args.get("help_dir", "")).strip() or ".help"
         project_root_raw = str(args.get("project_root", "")).strip() or "."
+        if project_root_raw != ".":
+            _require_absolute("project_root", project_root_raw)
+        if help_dir_raw != ".help":
+            _require_absolute("help_dir", help_dir_raw)
         help_dir = Path(help_dir_raw).expanduser().resolve()
         project_root = Path(project_root_raw).expanduser().resolve()
     return project_root, help_dir

sidecar/tests/test_resolve_project_paths.py

@@ -0,0 +1,51 @@
+"""Tests for _resolve_project_paths path validation."""
+
+from __future__ import annotations
+
+import os
+from pathlib import Path
+
+import pytest
+from attune_gui.commands import _resolve_project_paths
+
+
+def test_absolute_project_path_resolves():
+    home = str(Path.home())
+    root, help_dir = _resolve_project_paths({"project_path": home})
+    assert root == Path(home).resolve()
+    assert help_dir == Path(home).resolve() / ".help"
+
+
+def test_tilde_project_path_expands():
+    root, help_dir = _resolve_project_paths({"project_path": "~"})
+    assert root == Path.home().resolve()
+    assert help_dir == Path.home().resolve() / ".help"
+
+
+def test_relative_project_path_rejected():
+    with pytest.raises(ValueError, match="must be an absolute path"):
+        _resolve_project_paths({"project_path": "Users/me/project"})
+
+
+def test_dotted_relative_project_path_rejected():
+    with pytest.raises(ValueError, match="must be an absolute path"):
+        _resolve_project_paths({"project_path": "./project"})
+
+
+def test_legacy_relative_project_root_rejected():
+    with pytest.raises(ValueError, match="project_root must be an absolute path"):
+        _resolve_project_paths({"project_root": "some/dir"})
+
+
+def test_legacy_relative_help_dir_rejected():
+    with pytest.raises(ValueError, match="help_dir must be an absolute path"):
+        _resolve_project_paths(
+            {"project_root": str(Path.home()), "help_dir": "rel/help"},
+        )
+
+
+def test_legacy_defaults_pass_through():
+    """No project_path, no project_root, no help_dir → resolves to cwd-based defaults."""
+    root, help_dir = _resolve_project_paths({})
+    assert root == Path(os.getcwd()).resolve()
+    assert help_dir == Path(os.getcwd()).resolve() / ".help"