feat(construct-cli): Phase 4 — skill ship (edit -> commit -> push -> sync)

Adds `construct skill ship`: detects local skill edits in the construct clone, ENFORCES the .zip/.skill bundling discipline (refuses a skill-dir change whose bundles weren't rebuilt, exit 5 with the exact rebuild command — it does not rebuild them), stages shipped paths explicitly by name (never git add -A), makes a signed UTC commit via the repo's gitway config, pushes origin main, then runs skill sync. All git ops shell out to system git. Validates the origin is the Construct remote. flake.nix adds git to nativeCheckInputs for the ship tests. 20 tests, clippy -D warnings, reuse lint, nix build all pass.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: UnbreakableMJ

construct-cli/src/cli.rs

@@ -190,6 +190,12 @@ pub(crate) enum SkillCommand {
         after_help = "Examples:\n  construct skill sync\n  construct skill sync --json\n  construct skill sync --flake-dir /etc/nixos --dry-run"
     )]
     Sync(SyncArgs),
+
+    /// Ship local skill edits: commit (signed) + push, then sync.
+    #[command(
+        after_help = "Examples:\n  construct skill ship --dry-run\n  construct skill ship --skills spacecraft-rust-guidelines\n  construct skill ship --message \"docs: clarify X\" --json"
+    )]
+    Ship(ShipArgs),
 }
 
 /// Arguments for `construct skill add` / `construct skill update`.
@@ -284,6 +290,31 @@ pub(crate) struct SyncArgs {
     pub(crate) flake_dir: Option<PathBuf>,
 }
 
+/// Arguments for `construct skill ship`.
+#[derive(Debug, Args)]
+pub(crate) struct ShipArgs {
+    /// The Construct clone to ship from (default: the local catalogue clone).
+    #[arg(long, value_name = "DIR")]
+    pub(crate) repo: Option<PathBuf>,
+
+    /// Restrict to these skills (comma-separated); defaults to all changed.
+    #[arg(
+        short = 's',
+        long = "skills",
+        value_delimiter = ',',
+        value_name = "NAME[,NAME...]"
+    )]
+    pub(crate) skills: Vec<String>,
+
+    /// Commit message subject (default: derived from shipped skills).
+    #[arg(short = 'm', long = "message", value_name = "MSG")]
+    pub(crate) message: Option<String>,
+
+    /// Commit and push but skip the final `skill sync` step.
+    #[arg(long)]
+    pub(crate) no_sync: bool,
+}
+
 /// Render a clap parse outcome (help, version, or error) and return the exit
 /// code to use. Help and version are successes; everything else is a usage
 /// error reported structurally in machine mode (Standard §1 item 8).

construct-cli/src/commands/mod.rs

@@ -11,6 +11,7 @@
 pub(crate) mod agent;
 pub(crate) mod describe;
 pub(crate) mod schema;
+pub(crate) mod ship;
 pub(crate) mod skill;
 pub(crate) mod sync;
 
@@ -33,6 +34,7 @@ pub(crate) fn dispatch(cli: &Cli, ctx: &Context) -> Result<Option<CommandOutput>
             SkillCommand::Remove(args) => skill::remove(ctx, args).map(Some),
             SkillCommand::Update(args) => skill::update(ctx, args).map(Some),
             SkillCommand::Sync(args) => sync::run(ctx, args).map(Some),
+            SkillCommand::Ship(args) => ship::run(ctx, args).map(Some),
         },
         Some(Command::Agent { verb }) => match verb {
             AgentCommand::List => Ok(Some(agent::list(ctx))),