[Bug]: Dockerignore **.txt patterns do not exclude template files in either SDK #1933

Sandbox ID or Build ID

Not applicable: offline template file selection; no sandbox or build was created.

Environment

Current main a9c58ab2b81ba3d948819a55bbecae9b2617b347, JS and Python SDK 2.52.0, Windows, Node 22.23.2, Python 3.12.14, pnpm 10.34.5.

Timestamp

2026-10-02 22:34 +08:00.

Frequency

Happens every time with the local reproducer.

Expected behavior

A Dockerignore pattern **.txt should exclude paths ending in .txt, including root.txt and src/nested.txt. Moby's suffix-match implementation handles a leading ** followed by a literal suffix.

Actual behavior

Both SDKs leave these files in the list used for template copy. The port always compiles a non-final ** into (.*/)?, omitting Moby's literal-suffix case. **.txt therefore matches a filename literally named .txt, rather than root.txt.

Reproduction

No API key or cloud sandbox is needed:

from pathlib import Path
from tempfile import TemporaryDirectory
from e2b.template.utils import get_all_files_in_path

with TemporaryDirectory() as context:
    root = Path(context)
    (root / "src").mkdir()
    (root / "root.txt").write_text("x")
    (root / "src" / "nested.txt").write_text("x")
    files = get_all_files_in_path(".", context, ["**.txt"])
    print([Path(p).relative_to(root).as_posix() for p in files])

On main, the output contains both root.txt and src/nested.txt; neither should be present. Equivalent regression tests through JS getAllFilesInPath and Python get_all_files_in_path both failed before applying the fix.

Additional context

This is a remaining edge case after #1917, not a proposal to replace that fix. A focused patch is prepared in both SDKs, with tests for root/nested paths, literal suffix escaping, negation, and subsequent wildcard syntax. No new dependencies. AI-assisted with Codex; reproduction and SDK-scoped offline checks were executed locally.