bx-mac 0.5.0 → 0.6.0

package/README.md

@@ -128,14 +128,25 @@ Deny rules are applied **in addition** to the built-in protected list:
 
 ### `<project>/.bxignore`
 
-Block paths within the working directory. Supports glob patterns. bx searches for `.bxignore` files **recursively** through the entire project tree (skipping `.`-prefixed dirs and `node_modules`), so you can place them in subdirectories to hide secrets close to where they live.
+Block paths within the working directory. Uses [`.gitignore`-style pattern matching](https://git-scm.com/docs/gitignore#_pattern_format):
+
+| Pattern | Matches | Why |
+|---|---|---|
+| `.env` | `.env` at any depth | No `/` → recursive |
+| `.env.*` | `.env.local`, `sub/.env.production` | No `/` → recursive |
+| `*.pem` | `key.pem`, `sub/deep/cert.pem` | No `/` → recursive |
+| `secrets/` | `secrets/` at any depth | Trailing `/` is a dir marker, not a path separator |
+| `/.env` | Only `<workdir>/.env` | Leading `/` → anchored to root |
+| `config/secrets` | Only `<workdir>/config/secrets` | Contains `/` → relative to workdir |
+
+bx searches for `.bxignore` files **recursively** through the entire project tree (skipping `.`-prefixed dirs and `node_modules`), so you can place them in subdirectories to hide secrets close to where they live.
 
 ```gitignore
 .env
 .env.*
 secrets/
-**/*.pem
-**/*.key
+*.pem
+*.key
 ```
 
 For example, a monorepo might have:

package/dist/bx.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-const __VERSION__ = "0.5.0";
+const __VERSION__ = "0.6.0";
 import { accessSync, constants, cpSync, existsSync, globSync, mkdirSync, readFileSync, readdirSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { dirname, join, resolve } from "node:path";
 import { spawn } from "node:child_process";
@@ -121,10 +121,22 @@ function parseLines(filePath) {
 	return readFileSync(filePath, "utf-8").split("\n").map((l) => l.trim()).filter((l) => l && !l.startsWith("#"));
 }
 /**
+* Convert a .bxignore line to a glob pattern following .gitignore semantics:
+* - Leading "/" anchors to the base dir (stripped before globbing)
+* - Patterns without "/" (except trailing) match recursively via ** / prefix
+* - Patterns with "/" (non-leading, non-trailing) are relative to baseDir
+* - Trailing "/" marks directories only and doesn't count as path separator
+*/
+function toGlobPattern(line) {
+	if (line.startsWith("/")) return line.slice(1);
+	if ((line.endsWith("/") ? line.slice(0, -1) : line).includes("/")) return line;
+	return `**/${line}`;
+}
+/**
 * Apply a single .bxignore file: resolve glob patterns relative to baseDir.
 */
 function applyIgnoreFile(filePath, baseDir, ignored) {
-	for (const line of parseLines(filePath)) for (const match of globSync(line, { cwd: baseDir })) ignored.push(resolve(baseDir, match));
+	for (const line of parseLines(filePath)) for (const match of globSync(toGlobPattern(line), { cwd: baseDir })) ignored.push(resolve(baseDir, match));
 }
 /**
 * Recursively find and apply .bxignore files in a directory tree.
@@ -211,7 +223,7 @@ function collectIgnoredPaths(home, workDirs) {
 	const globalIgnore = join(home, ".bxignore");
 	if (existsSync(globalIgnore)) {
 		const denyLines = parseLines(globalIgnore).filter((l) => !l.match(/^(RW|RO):/i));
-		for (const line of denyLines) for (const match of globSync(line, { cwd: home })) ignored.push(resolve(home, match));
+		for (const line of denyLines) for (const match of globSync(toGlobPattern(line), { cwd: home })) ignored.push(resolve(home, match));
 	}
 	for (const workDir of workDirs) collectIgnoreFilesRecursive(workDir, ignored);
 	return ignored;
@@ -315,7 +327,7 @@ Configuration:
                          path         block access (deny)
                          rw:path      allow read-write access
                          ro:path      allow read-only access
-  <workdir>/.bxignore  blocked paths in project (supports globs, searched recursively)
+  <workdir>/.bxignore  blocked paths in project (.gitignore-style matching)
 
 https://github.com/holtwick/bx-mac`);
 	process.exit(0);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bx-mac",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "description": "Launch apps in a macOS sandbox — only the project directory is accessible",
   "type": "module",
   "bin": {
@@ -11,6 +11,8 @@
   ],
   "scripts": {
     "build": "rolldown -c",
+    "build:native": "bun build src/index.ts --compile --outfile dist/bx-native --define \"__VERSION__=\\\"$(node -p \"require('./package.json').version\")\\\"\"",
+    "sign": "./scripts/sign.sh",
     "test": "vitest run",
     "prepublishOnly": "npm run build",
     "post:release": "./scripts/release.sh"