Keep original fspy path for fingerprinting, only clean for glob matching

The cleaned path (with `..` normalized) is used solely for matching
against negative globs. The original stripped path is returned and
stored in the fingerprint, keeping create/validate consistent.

Restore fingerprint.rs to use the path as-is since it already contains
the original fspy-reported relative path.

https://claude.ai/code/session_01PR9yhnScRoVoHUcviV47u5

Author: claude

crates/vite_task/src/session/execute/spawn.rs

@@ -199,17 +199,23 @@ pub async fn spawn_with_tracking(
             // On Windows, paths are possible to be still absolute after stripping the workspace root.
             // For example: c:\workspace\subdir\c:\workspace\subdir
             // Just ignore those accesses.
-            let cleaned = path_clean::PathClean::clean(stripped_path);
-            let relative = RelativePathBuf::new(cleaned).ok()?;
+            let relative = RelativePathBuf::new(stripped_path).ok()?;
 
             // Skip .git directory accesses (workaround for tools like oxlint)
             if relative.as_path().strip_prefix(".git").is_ok() {
                 return None;
             }
 
-            // Filter against resolved negative globs (both are workspace-root-relative)
-            if resolved_negatives.iter().any(|neg| neg.is_match(relative.as_str())) {
-                return None;
+            // Clean `..` components only for glob matching — fspy may report paths
+            // like `packages/sub-pkg/../shared/dist/output.js` that won't match
+            // workspace-root-relative negative globs without normalization.
+            if !resolved_negatives.is_empty() {
+                let cleaned = path_clean::PathClean::clean(relative.as_path());
+                if let Some(cleaned_str) = cleaned.to_str()
+                    && resolved_negatives.iter().any(|neg| neg.is_match(cleaned_str))
+                {
+                    return None;
+                }
             }
 
             Some(relative)

crates/vite_task_bin/tests/e2e_snapshots/fixtures/inputs-negative-glob-subpackage/snapshots/dotdot auto negative - miss on non-excluded sibling inferred file.snap

@@ -9,6 +9,6 @@ export const shared = 'initial';
 > replace-file-content packages/shared/src/utils.ts initial modified
 
 > vp run sub-pkg#dotdot-auto-negative
-~/packages/sub-pkg$ print-file ../shared/src/utils.ts ../shared/dist/output.js ✗ cache miss: content of input 'packages/shared/src/utils.ts' changed, executing
+~/packages/sub-pkg$ print-file ../shared/src/utils.ts ../shared/dist/output.js ✗ cache miss: content of input 'packages/sub-pkg/../shared/src/utils.ts' changed, executing
 export const shared = 'modified';
 // initial output