fix(orchestrate): resolve test CLI paths with fileURLToPath

[SurefireStudios]

What

Three test files in orchestrate/skills/orchestrate/scripts/__tests__/ build a path with new URL("../cli.ts", import.meta.url).pathname.

On Windows that returns a leading-slash path (/C:/Users/me/...) rather than C:\Users\me\..., so spawnSync can't launch it and the CLI never starts.

The assertions then see exit status 1 instead of the expected 2 — a failure that points at plan validation rather than at the path.

.pathname also leaves percent-encoding in place, so a checkout under a directory containing a space breaks the same way on any platform.

The fix

Use fileURLToPath, which __tests__/checkpoint-restart.test.ts in the same directory already does:

const SCRIPTS_DIR = dirname(
  fileURLToPath(new URL("../cli.ts", import.meta.url))
);

Five call sites already use fileURLToPath; these were the remaining four on .pathname. 11 lines across 3 files, no behaviour change on macOS or Linux.

Verification

Windows 11, bun 1.2.10:

	before	after
bun test	200 pass / 9 fail	208 pass / 1 fail
bun run typecheck	exit 0	exit 0
biome check (changed files)	clean	clean

The one failure left

operator boundary > requires a current-user 0600 operator flag still fails on Windows, because it calls chmodSync(flagPath, 0o600) and NTFS has no POSIX mode bits.

The check is correct and deliberately strict, so I left it alone — happy to add a test.skipIf(process.platform === "win32") if you would prefer it green, but that is your call on a security-relevant test.

Why this wasn't caught

.github/workflows/validate-plugins.yml is the only workflow and it's path-filtered to marketplace.json, **/plugin.json and schemas/**, so nothing in CI invokes orchestrate's test, typecheck, lint or check scripts.

Glad to open a separate PR adding that job — I didn't want to bundle a CI change into a bug fix.

---

Note

Low Risk
Test-only path resolution changes with no impact on production orchestrate CLI behavior.

Overview
Fixes orchestrate CLI integration tests that spawn cli.ts via spawnSync by resolving import.meta.url with fileURLToPath instead of URL.pathname.

Previously, .pathname produced invalid paths on Windows (leading /C:/…) and could leave percent-encoded segments in paths with spaces, so the CLI often failed to start and tests misreported exit codes. comment-cli, kickoff-dedupe, and prompt-plan-validation now match the existing checkpoint-restart pattern; SCRIPTS_DIR is derived via dirname of the resolved CLI path where needed.

No production CLI behavior changes—test-only path resolution for cross-platform reliability.

^{Reviewed by Cursor Bugbot for commit 13fe00e. Bugbot is set up for automated code reviews on this repo. Configure here.}

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.