fix(3597): windows parity batch — sdk/install/hook/worktree clusters (21 files)

Three parallel diagnostic agents (G: sdk/install path-sep, H: hook scripts,
I: worktree/workspace) characterised the remaining windows-22 failures on
23b52f1a. Patches by class:

CRLF in test parsers / file-content reads
  - bug-2136-sh-hook-version: shebang check split('\n') → split(/\r?\n/)
  - bug-3542-executor-git-stash-prohibition: strip \r from read content
    (git rewrites stashed text with CRLF on win autocrlf=true checkout)
  - workspace: BOM-strip + explicit \r strip in parseCommandFile (BOM at
    byte 0 defeats /^---/ anchor → fmMatch null → fm.name undefined)

Windows path-separator / 8.3-shortname normalization
  - bug-3491-nested-git-worktree: use fs.realpathSync.native to expand
    %TEMP% RUNNER~1 → runneradmin; normalize sep before path-equality
  - prune-orphaned-worktrees: normalize \\→/ before substring includes
    (git emits forward-slash in --porcelain on Windows even when
    path.join produced backslashes)
  - bug-3017-codex-hook-absolute-node: accept POSIX path OR path with
    drive-letter prefix in hookPath equality assertion
  - bug-3126-global-skills-base-runtime-path: use path.join for expected
    /xdg/<runtime> values (production calls path.join → \xdg\… on win32)

Test under-specified platform / forgot win32 env
  - bug-2979-hook-absolute-node: pass {platform:'linux'} to
    buildHookCommand + rewriteLegacyManagedNodeHookCommands so the
    POSIX-branch tests don't pick up the #3393 GitBash code path
  - bug-3288-model-catalog + bug-3571-config-manifest: also set
    USERPROFILE alongside HOME so os.homedir() on win32 redirects to
    the test fixture instead of the runner's real ~

External-cmd resolution
  - bug-2647-outer-tarball-sdk-dist: use npm.cmd + {shell:true} on win32
    so execFileSync resolves PATHEXT (literal `npm` is ENOENT)

ESM loader: tests/runtime-bridge-sync-smoke.test.cjs already migrated to
pathToFileURL in 23b52f1a (cluster E).

Explicit per-test/describe skip on win32 (with required string reasons
to satisfy no-unconditional-win32-skip guard)
  - feat-3347-graphify-auto-update-hook: 3 describes — harness spawns
    bash/kill/sleep + the hook itself is bash
  - feat-3595-fs-fault-injection: move \t and \n filenames into the
    POSIX-only branch (NTFS forbids 0x00–0x1F in filenames)
  - bug-2775/2829/3033/3231/3359: POSIX shim under ~/.local/bin with
    chmod 0o755 — not how Windows install works
  - bug-3211: single subtest where cp.execSync reassignment isn't
    picked up on win32 (POSIX coverage via the mock; live windows
    behavior covered by 3211-D which keeps running)
  - install-path-detection: parses sh-style export PATH= rc files;
    Windows has no rc files (registry Path)
  - worktree-safety-policy: single test using POSIX /repo/wt fixture
    paths that can't be expressed under win32 path.resolve

Validated: plex2 (ubuntu docker) 11224/0 pass.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

tests/bug-3491-nested-git-worktree.test.cjs

@@ -41,11 +41,19 @@ const WORKFLOW_PATH = path.join(
 
 // ─── Helper: create outer git repo with a nested workstream subdir ─────────
 
+// On Windows the runtime emits forward slashes (git's convention) while
+// path.join produces backslashes — normalize both sides before any
+// equality comparison against the handler's git_worktree_root.
+function normalizePath(p) {
+  return p == null ? p : p.split(path.sep).join('/');
+}
+
 function createOuterRepoWithSubdir(prefix = 'bug-3491-') {
   const outer = fs.mkdtempSync(path.join(os.tmpdir(), prefix));
-  // macOS /tmp -> /private/tmp; resolve to the canonical path so comparisons
-  // against `git rev-parse --show-toplevel` succeed regardless of symlink.
-  const outerReal = fs.realpathSync(outer);
+  // macOS /tmp -> /private/tmp; on Windows the runner's %TEMP% is the 8.3
+  // short-name (RUNNER~1) and the runtime resolves to the long form.
+  // realpathSync.native handles both; then normalize separators for compare.
+  const outerReal = fs.realpathSync.native(outer);
   execSync('git init', { cwd: outerReal, stdio: 'pipe' });
   execSync('git config user.email "test@test.com"', { cwd: outerReal, stdio: 'pipe' });
   execSync('git config user.name "Test"', { cwd: outerReal, stdio: 'pipe' });
@@ -80,8 +88,8 @@ test('bug-3491: init new-project reports has_git: true inside parent git worktre
     // The workflow needs the worktree root and a nesting flag to decide
     // whether to skip `git init` and emit a friendly warning.
     assert.strictEqual(
-      payload.git_worktree_root,
-      outer,
+      normalizePath(payload.git_worktree_root),
+      normalizePath(outer),
       `expected git_worktree_root to be the outer repo (${outer}), got: ${payload.git_worktree_root}`,
     );
     assert.strictEqual(
@@ -102,7 +110,7 @@ test('bug-3491: init new-project reports has_git: true at worktree root with in_
 
     const payload = JSON.parse(result.output);
     assert.strictEqual(payload.has_git, true, 'has_git must be true at the worktree root');
-    assert.strictEqual(payload.git_worktree_root, outer);
+    assert.strictEqual(normalizePath(payload.git_worktree_root), normalizePath(outer));
     assert.strictEqual(
       payload.in_nested_subdir,
       false,
@@ -114,7 +122,7 @@ test('bug-3491: init new-project reports has_git: true at worktree root with in_
 });
 
 test('bug-3491: init new-project reports has_git: false outside any git worktree', () => {
-  const tmp = fs.realpathSync(fs.mkdtempSync(path.join(os.tmpdir(), 'bug-3491-bare-')));
+  const tmp = fs.realpathSync.native(fs.mkdtempSync(path.join(os.tmpdir(), 'bug-3491-bare-')));
   try {
     const result = runGsdTools('init new-project', tmp);
     assert.ok(result.success, `init new-project failed: ${result.error}`);
@@ -139,7 +147,7 @@ test('bug-3491: init ingest-docs mirrors the same has_git semantics', () => {
       true,
       'init ingest-docs must also detect parent worktree (#3491 related path)',
     );
-    assert.strictEqual(payload.git_worktree_root, outer);
+    assert.strictEqual(normalizePath(payload.git_worktree_root), normalizePath(outer));
     assert.strictEqual(payload.in_nested_subdir, true);
   } finally {
     cleanup(outer);