Fix boxel-ui build in checkouts under a dot-directory

[burieberry]

Background and Goal

• pnpm build in boxel-ui (and so pnpm lint, at lint:publish) fails with RollupError: src/components/<x>/<hash>.css: Expression expected in any checkout under a dot-directory, which includes every Superset workspace (~/.superset/worktrees/…) and .claude/worktrees/….
• keepAssets matches absolute module ids with minimatch's default dot: false, so '**/*.css' never crosses the dot-directory segment, and rollup parses the scoped-CSS modules as JavaScript. Anchoring the pattern to the package's own src/ makes the dot-directory a literal part of the pattern.
• The package path is glob-escaped before it goes into the pattern, so a checkout path containing characters like (, [ or { can't silently drop the component CSS the same way. The minimatch that keepAssets uses (3.x) has no escape(), so a small helper does it.
• Verified from a Superset workspace: the build passes and dist/components still carries the component CSS.
• Ticket: CS-14102

🤖 Generated with Claude Code

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-19T23:58:52.455942Z	0db0b2f	Draft marked ready

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[github-actions]

Preview deployments

• Host staging preview

• Host production preview

• Boxel UI staging preview

Host Test Results

594 tests   594 ✅  7m 47s ⏱️
  1 suites    0 💤
  1 files      0 ❌

Results for commit 0db0b2f.

Realm Server Test Results

    1 files    351 suites   2h 6m 33s ⏱️
5 915 tests 5 915 ✅ 0 💤 0 ❌
5 978 runs  5 978 ✅ 0 💤 0 ❌

Results for commit 0db0b2f.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 0db0b2fe80

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Normalize Windows separators before glob escaping

On Windows, a checkout path containing a glob metacharacter—such as C:\work\boxel(foo)—still fails to match. The escape inserted before ( is a backslash, but minimatch 3 normalizes every backslash in a Windows pattern into /, turning that segment into boxel/(foo/) rather than a literal boxel(foo). Consequently keepAssets misses the generated CSS and Rollup attempts to parse it as JavaScript. Convert the native root path to forward slashes before escaping its glob metacharacters.

Useful? React with 👍 / 👎.