feat(cli): filesmith command line and Claude skill (#30)

.gitattributes

@@ -0,0 +1,6 @@
+# The sh shim must keep LF or Git Bash fails with "$'\r': command not found".
+resources/cli/filesmith text eol=lf
+resources/cli/*.cmd text eol=crlf
+resources/cli/*.ps1 text eol=crlf
+# Skill files (Task 17): their frontmatter is matched with LF in tests.
+resources/skill/** text eol=lf

.github/workflows/release.yml

@@ -39,6 +39,11 @@ on:
       - 'scripts/verify-bundle.mjs'
       - 'electron-builder.yml'
       - 'package.json'
+      - 'src/cli/**'
+      - 'resources/cli/**'
+      - 'resources/skill/**'
+      - 'build/installer.nsh'
+      - 'build/installer/**'
   workflow_dispatch:
 
 concurrency:
@@ -110,6 +115,30 @@ jobs:
       - name: Verify bundled tools (packed app)
         run: node scripts/verify-bundle.mjs dist/win-unpacked/resources --manifest dist/packed-manifest.txt
 
+      # The command line in the packed app (spec 7.3): the shim must run the
+      # app's own exe in Node mode, print the package.json version, pass
+      # doctor's core checks and convert one file. This also fails loudly if the
+      # runAsNode Electron fuse is ever turned off.
+      - name: Smoke-test the packed CLI
+        shell: pwsh
+        run: |
+          $ErrorActionPreference = 'Stop'
+          $PSNativeCommandUseErrorActionPreference = $false
+          $shim = 'dist\win-unpacked\resources\cli\filesmith.cmd'
+          $v = (& $shim --version | Out-String).Trim()
+          if ($v -ne '${{ steps.ver.outputs.version }}') { throw "filesmith --version printed '$v'" }
+          $env:FILESMITH_USER_DATA = Join-Path $env:RUNNER_TEMP 'fs-ud'
+          $events = & $shim doctor --json | ForEach-Object { $_ | ConvertFrom-Json }
+          $bad = @($events | Where-Object { $_.event -eq 'check' -and $_.group -eq 'core' -and $_.status -eq 'fail' })
+          if ($bad.Count) { throw "doctor core checks failed: $($bad.id -join ', ')" }
+          $png = Join-Path $env:RUNNER_TEMP 'smoke.png'
+          [IO.File]::WriteAllBytes($png, [Convert]::FromBase64String('iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAADUlEQVR42mP8z8BQDwAEhQGAhKmMIQAAAABJRU5ErkJggg=='))
+          & $shim convert $png --to webp --json | Out-Host
+          if ($LASTEXITCODE -ne 0) { throw "filesmith convert exited $LASTEXITCODE" }
+          if (-not (Test-Path (Join-Path $env:RUNNER_TEMP 'smoke.webp'))) { throw 'smoke.webp was not written' }
+          "- packed CLI ``$v``: doctor core checks ok, convert ok" >> $env:GITHUB_STEP_SUMMARY
+          $global:LASTEXITCODE = 0
+
       - name: Check installer
         id: exe
         shell: pwsh

.prettierignore

@@ -8,3 +8,6 @@ docs/mockups
 # The NSIS setup kit keeps its own (Prism-derived) formatting.
 build/installer
 patches
+
+# Design and plan documents: their code blocks are partial snippets, not code.
+docs/superpowers

CLAUDE.md

@@ -67,7 +67,10 @@ src/
                views/ (Generate, Tools, Completed, Settings), ui/ (primitives), icons/, theme/ (tokens, CSS)
   shared/      types.ts — Job, ToolId, FileKind, Options, progress events
                tabs.ts  — the VERB-first navigation model (rail tabs + Tools cards)
+  cli/         the filesmith command line: parse, plan, run, report
 resources/bin/ bundled CLI binaries (gitignored; fetched by scripts, packed by electron-builder)
+resources/cli/ PATH shims + path.ps1
+resources/skill/ Claude Code skill
 ```
 
 ## Build, test, run
@@ -80,6 +83,8 @@ resources/bin/ bundled CLI binaries (gitignored; fetched by scripts, packed by e
 - `npm run package` — electron-vite build + electron-builder NSIS installer to `dist/`.
 - `npm run test:e2e` — Playwright end-to-end (launches the built app via `_electron`; run
   `npm run build` first). Covers the preload/IPC/engine chain unit tests can't reach.
+- `npm run cli -- <args>` runs the command line from `out/main/cli.js` (build first). Reference:
+  `docs/cli.md`. The engine never imports `electron`; it reads paths from `src/main/env.ts`.
 - Releases: push to main runs `.github/workflows/release.yml` (gates, then requires a NEW
   `package.json` version, builds with `fetch-binaries --pinned`, publishes `v<version>`). Bump the
   version in the PR. Tool versions + SHA-256 live in `scripts/pinned-tools.mjs`; PRs touching

build/installer.nsh

@@ -16,6 +16,19 @@
   ManifestDPIAware true
 !macroend
 
+; PATH entry for the command line (spec 7.2). Outside the guard: the uninstaller
+; compiles from this file and removes the entry.
+!include "installer\path.nsh"
+
+; Uninstall drops the PATH entry, except during an update: electron-builder
+; runs the old uninstaller with --updated, and the new version re-adds the same
+; folder at once, so the entry should not blink out in between.
+!macro customUnInstall
+  ${ifNot} ${isUpdated}
+    !insertmacro filesmithPathRemove
+  ${endIf}
+!macroend
+
 ; The uninstaller is compiled from this same script with BUILD_UNINSTALLER set,
 ; and it has none of these pages. Without the guard its pass would resize a
 ; window it never draws, and warn about every function it does not call.

build/installer/pages.nsh

@@ -25,7 +25,9 @@
 
 ; When the section ends, autoclose walks on to the finish page by itself: the
 ; Next button it would otherwise wait for has been hidden since .onGUIInit.
+; Before that, put the command line on the per-user PATH (path.nsh).
 !macro customInstall
+  !insertmacro filesmithPathAdd
   SetAutoClose true
 !macroend
 

build/installer/path.nsh

@@ -0,0 +1,21 @@
+;
+; Filesmith on the per-user PATH (spec 7.2). The edit itself is path.ps1, which
+; keeps REG_EXPAND_SZ and never truncates a long PATH. Only resources\cli goes
+; on PATH: putting resources\bin there would shadow the user's own ffmpeg,
+; magick and 7z.
+;
+!include "WinMessages.nsh"
+
+!define FILESMITH_PS '"$SYSDIR\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -NonInteractive -ExecutionPolicy Bypass -File "$INSTDIR\resources\cli\path.ps1"'
+
+!macro filesmithPathAdd
+  nsExec::ExecToLog '${FILESMITH_PS} add "$INSTDIR\resources\cli"'
+  Pop $0
+  SendMessage ${HWND_BROADCAST} ${WM_SETTINGCHANGE} 0 "STR:Environment" /TIMEOUT=5000
+!macroend
+
+!macro filesmithPathRemove
+  nsExec::ExecToLog '${FILESMITH_PS} remove "$INSTDIR\resources\cli"'
+  Pop $0
+  SendMessage ${HWND_BROADCAST} ${WM_SETTINGCHANGE} 0 "STR:Environment" /TIMEOUT=5000
+!macroend