fix: remove fstat interception that caused duplicate path tracking

fstat(fd) uses F_GETPATH on macOS which returns canonical paths, while
open(path) preserves raw relative paths. This caused the same file to be
recorded under two different paths, leading to non-deterministic cache
miss messages via rayon's find_map_any.

Also simplify glob_inputs negation handling (always use .not()) and add
e2e test for glob meta characters in package paths (wax::escape).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: branchseer

crates/fspy_preload_unix/src/interceptions/stat.rs

@@ -2,10 +2,7 @@ use fspy_shared::ipc::AccessMode;
 use libc::{c_char, c_int, stat as stat_struct};
 
 use crate::{
-    client::{
-        convert::{Fd, PathAt},
-        handle_open,
-    },
+    client::{convert::PathAt, handle_open},
     macros::intercept,
 };
 
@@ -30,16 +27,6 @@ unsafe extern "C" fn lstat(path: *const c_char, buf: *mut stat_struct) -> c_int
     unsafe { lstat::original()(path, buf) }
 }
 
-intercept!(fstat(64): unsafe extern "C" fn(fd: c_int, buf: *mut stat_struct) -> c_int);
-unsafe extern "C" fn fstat(fd: c_int, buf: *mut stat_struct) -> c_int {
-    // SAFETY: fd is a valid file descriptor provided by the caller of the interposed function
-    unsafe {
-        handle_open(Fd(fd), AccessMode::READ);
-    }
-    // SAFETY: calling the original libc fstat() with the same arguments forwarded from the interposed function
-    unsafe { fstat::original()(fd, buf) }
-}
-
 intercept!(fstatat(64): unsafe extern "C" fn(dirfd: c_int, pathname: *const c_char, buf: *mut stat_struct, flags: c_int) -> c_int);
 unsafe extern "C" fn fstatat(
     dirfd: c_int,

crates/vite_task/src/session/execute/glob_inputs.rs

@@ -94,29 +94,18 @@ pub fn compute_globbed_inputs(
         return Ok(BTreeMap::new());
     }
 
-    let negation = if negative_globs.is_empty() {
-        None
-    } else {
-        let negatives: Vec<Glob<'static>> = negative_globs
-            .iter()
-            .map(|p| Ok(Glob::new(p.as_str())?.into_owned()))
-            .collect::<anyhow::Result<_>>()?;
-        Some(wax::any(negatives)?)
-    };
+    let negatives: Vec<Glob<'static>> = negative_globs
+        .iter()
+        .map(|p| Ok(Glob::new(p.as_str())?.into_owned()))
+        .collect::<anyhow::Result<_>>()?;
+    let negation = wax::any(negatives)?;
 
     let mut result = BTreeMap::new();
 
     for pattern in positive_globs {
         let glob = Glob::new(pattern.as_str())?.into_owned();
         let walk = glob.walk(workspace_root.as_path());
-        match &negation {
-            Some(negation) => {
-                collect_walk_entries(walk.not(negation.clone())?, workspace_root, &mut result)?;
-            }
-            None => {
-                collect_walk_entries(walk, workspace_root, &mut result)?;
-            }
-        }
+        collect_walk_entries(walk.not(negation.clone())?, workspace_root, &mut result)?;
     }
 
     Ok(result)

crates/vite_task_bin/tests/e2e_snapshots/fixtures/inputs-glob-meta-in-path/package.json

@@ -0,0 +1,4 @@
+{
+  "name": "inputs-glob-meta-in-path",
+  "private": true
+}

crates/vite_task_bin/tests/e2e_snapshots/fixtures/inputs-glob-meta-in-path/packages/[lib]/package.json

@@ -0,0 +1,4 @@
+{
+  "name": "[lib]",
+  "private": true
+}

crates/vite_task_bin/tests/e2e_snapshots/fixtures/inputs-glob-meta-in-path/packages/[lib]/src/main.ts

@@ -0,0 +1 @@
+export const lib = 'initial';

crates/vite_task_bin/tests/e2e_snapshots/fixtures/inputs-glob-meta-in-path/packages/[lib]/vite-task.json

@@ -0,0 +1,9 @@
+{
+  "tasks": {
+    "build": {
+      "command": "print-file src/main.ts",
+      "inputs": ["src/**/*.ts"],
+      "cache": true
+    }
+  }
+}

crates/vite_task_bin/tests/e2e_snapshots/fixtures/inputs-glob-meta-in-path/pnpm-workspace.yaml

@@ -0,0 +1,2 @@
+packages:
+  - 'packages/*'

crates/vite_task_bin/tests/e2e_snapshots/fixtures/inputs-glob-meta-in-path/snapshots.toml

@@ -0,0 +1,12 @@
+# Test that glob meta characters in package paths are correctly escaped by wax::escape.
+# Without escaping, "packages/[lib]/src/**/*.ts" would interpret [lib] as a character
+# class matching 'l', 'i', or 'b' instead of the literal directory name.
+
+[[e2e]]
+name = "cache hit then miss on file change"
+steps = [
+  "vp run [lib]#build",
+  "vp run [lib]#build",
+  "replace-file-content packages/[lib]/src/main.ts initial modified",
+  "vp run [lib]#build",
+]

crates/vite_task_bin/tests/e2e_snapshots/fixtures/inputs-glob-meta-in-path/snapshots/cache hit then miss on file change.snap

@@ -0,0 +1,18 @@
+---
+source: crates/vite_task_bin/tests/e2e_snapshots/main.rs
+expression: e2e_outputs
+---
+> vp run [lib]#build
+~/packages/[lib]$ print-file src/main.ts
+export const lib = 'initial';
+> vp run [lib]#build
+~/packages/[lib]$ print-file src/main.ts ✓ cache hit, replaying
+export const lib = 'initial';
+
+---
+[vp run] cache hit, <duration> saved.
+> replace-file-content packages/[lib]/src/main.ts initial modified
+
+> vp run [lib]#build
+~/packages/[lib]$ print-file src/main.ts ✗ cache miss: content of input 'packages/[lib]/src/main.ts' changed, executing
+export const lib = 'modified';