fix(cache): match negative input globs against package-relative paths

Negative input globs (like `!dist/**`) were being matched against
workspace-relative paths (e.g., `packages/sub-pkg/dist/output.js`),
so exclusions silently failed for subpackages. Now paths are converted
to package-relative before matching, fixing the issue.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: branchseer

crates/vite_task/src/session/execute/fingerprint.rs

@@ -74,11 +74,13 @@ impl PostRunFingerprint {
     /// # Arguments
     /// * `path_reads` - Map of paths that were read during execution (from fspy)
     /// * `base_dir` - Workspace root for resolving relative paths
+    /// * `glob_base` - Package directory where the task is defined (negative globs are relative to this)
     /// * `input_config` - Resolved input configuration controlling what to fingerprint
     #[tracing::instrument(level = "debug", skip_all, name = "create_post_run_fingerprint")]
     pub fn create(
         path_reads: &HashMap<RelativePathBuf, PathRead>,
         base_dir: &AbsolutePath,
+        glob_base: &AbsolutePath,
         input_config: &ResolvedInputConfig,
     ) -> anyhow::Result<Self> {
         // If inference is disabled, return empty inferred_inputs
@@ -91,11 +93,23 @@ impl PostRunFingerprint {
         let negative_matcher =
             if patterns.is_empty() { None } else { Some(GlobPatternSet::new(&patterns)?) };
 
+        // Compute the package path relative to workspace root so we can convert
+        // workspace-relative paths to package-relative paths for negative glob matching.
+        // Negative globs like `!dist/**` are written relative to the package directory.
+        let package_prefix = glob_base.strip_prefix(base_dir).ok().flatten();
+
         let inferred_inputs = path_reads
             .par_iter()
             .filter(|(path, _)| {
-                // Apply negative patterns to exclude from inferred inputs
-                negative_matcher.as_ref().is_none_or(|matcher| !matcher.is_match(path.as_str()))
+                // Apply negative patterns to exclude from inferred inputs.
+                // Paths must be made package-relative before matching, since negative
+                // globs are relative to the package directory, not the workspace root.
+                negative_matcher.as_ref().is_none_or(|matcher| {
+                    let path_to_match =
+                        package_prefix.as_ref().and_then(|prefix| path.strip_prefix(prefix));
+                    path_to_match
+                        .map_or(true, |pkg_relative| !matcher.is_match(pkg_relative.as_str()))
+                })
             })
             .map(|(relative_path, path_read)| {
                 let full_path = Arc::<AbsolutePath>::from(base_dir.join(relative_path));

crates/vite_task/src/session/execute/mod.rs

@@ -361,6 +361,7 @@ pub async fn execute_spawn(
             match PostRunFingerprint::create(
                 path_reads,
                 cache_base_path,
+                &cache_metadata.glob_base,
                 &cache_metadata.input_config,
             ) {
                 Ok(post_run_fingerprint) => {

crates/vite_task_bin/tests/e2e_snapshots/fixtures/inputs-negative-glob-subpackage/snapshots/subpackage auto with negative - hit on excluded inferred file.snap

@@ -9,6 +9,9 @@ export const main = 'initial';
 > replace-file-content packages/sub-pkg/dist/output.js initial modified
 
 > vp run sub-pkg#auto-with-negative
-~/packages/sub-pkg$ print-file src/main.ts dist/output.js ✗ cache miss: content of input 'packages/sub-pkg/dist/output.js' changed, executing
+~/packages/sub-pkg$ print-file src/main.ts dist/output.js ✓ cache hit, replaying
 export const main = 'initial';
-// modified output
+// initial output
+
+---
+[vp run] cache hit, <duration> saved.