chore(skills): remove bundled Skills with unresolved provenance

[likun666661]

Summary

• remove the 29 bundled Skills introduced by feat(skills): built-in skill catalog with install-on-demand #842 whose provenance has not been established
• retain computer-use, which has a separate introducing PR and provenance review
• regenerate the byte-pinned bundled catalog and guard it against stale legacy trust entries
• document and test the upgrade behavior for previously installed local copies

Rationale

Issue #2669 records a provenance evidence gap for these 29 Markdown Skills. This change takes the conservative removal path: it does not assert infringement or an incompatible license, but removes material whose origin cannot currently be established.

The bundled catalog now contains only computer-use. This PR resolves the unresolved #842 set by removal; it does not close #2669 because computer-use still needs its independent provenance review.

Upgrade behavior

This PR only stops distributing and trusting the removed bundled sources. An upgrade does not delete, rewrite, migrate, or silently disable a copy already installed under skills/<id>. If that local copy is otherwise valid and enabled, Runtime continues to treat it as user-provided content and it remains invocable under the ordinary permission and host-capability rules.

The obsolete bundled lock is reported as metadata_error, so Maka no longer treats the retained copy as a trusted bundled source or offers bundled-source update behavior.

Validation

• npm --workspace @maka/runtime-host run build
• node --test --test-name-pattern='removed bundled sources lose provenance trust without disabling the local copy' packages/runtime-host/dist/__tests__/skill-catalog-repository.test.js
• git diff --check
• CI: test_runtime_host, test_workspaces, test, Storybook, and Windows jobs passed before the latest main sync; the refreshed run is tracked on this PR

Refs #2669

[hqhq1025]

Thanks for taking the conservative removal path here. There is one blocking cross-package test left behind: packages/runtime-host/src/__tests__/skill-catalog-protocol.test.ts still asserts that the actual bundled catalog contains deep-research. That makes test_runtime_host fail on this PR; I also reproduced the focused failure from the PR head in a clean worktree. Please update the assertion to the retained computer-use entry, or derive it from the current catalog contract so this removal is covered end to end.

Please also remove the stale drafter-diagram entry from LEGACY_CONTENT_SHA256_BY_ID in scripts/gen-bundled-skill-catalog.mjs. Leaving that legacy hash behind means a future same-id reintroduction would automatically trust the old unresolved-provenance content, which works against the purpose of this cleanup. A small guard requiring every legacy-hash key to exist in the current source catalog would prevent this from recurring.

[MicroGery]

One upgrade behavior seems worth making explicit (not necessarily blocking): removing these entries from BUNDLED_SKILL_CATALOG makes an existing bundled lock for one of the 29 removed IDs fail isTrustedBundledLock() and surface as metadata_error, but listInvocableSkills() / resolveSkillInvocations() still derive invocability directly from the enabled local scan without consulting that governance result. As a result, a copy installed by an older Maka release can remain locally invocable after upgrade even though its former bundled source is no longer trusted by the current catalog.

If this PR's boundary is only “stop distributing these 29 source files in new releases while preserving user-owned installed copies,” that behavior is reasonable. If the intended boundary is also “disable unresolved-provenance copies after upgrade,” this removal alone does not enforce it and would need an explicit migration or invocation-time gate. Could we document the intended upgrade behavior and add a regression test for it, so the compliance boundary remains deliberate?

[hqhq1025]

Re-reviewed at 4e7d66043437511086dd4fec9900cd143875315b. Both requested changes are addressed: the Runtime Host assertion now matches the retained computer-use catalog, and the stale drafter-diagram legacy hash is removed with a fail-closed orphan guard. The focused catalog check, Biome check, and diff check pass, and the Runtime Host CI lane is green.

The remaining format and desktop E2E failures reproduce on current main with the same hidden-composer failure shape, so they are not attributable to this diff. I agree that preserving already-installed workspace copies is a reasonable non-blocking boundary for this removal PR; documenting that upgrade behavior would still be useful follow-up work.

[hqhq1025]

I traced the upgrade path from the legacy bundled lock through the Host-owned governance and invocable snapshots. The existing behavior is deliberate: provenance determines whether Maka still recognizes and manages a source, while a valid local Skill remains user-provided content rather than becoming silently disabled because its former catalog source disappeared.

Commit 44dfa5c10 now makes that boundary explicit in docs/skill-catalog-policy.md and adds a Runtime Host regression test proving that an older bundled lock becomes metadata_error, the local file remains untouched, and the enabled copy remains in the invocable catalog. The focused test and build pass; the full Runtime Host suite passed 847/848 on the first run with one unrelated Electron candidate exit timeout, and that exact failing test passed on immediate isolated rerun.

[hqhq1025]

Re-approved at 44dfa5c108c27b66802d8c1fff1aed9967c6b8d1. The upgrade boundary is now explicit and regression-tested: catalog removal revokes Maka's bundled provenance without deleting or silently disabling a valid user-owned local copy. Runtime Host, workspace, Storybook, and aggregate CI lanes pass; the remaining format and desktop E2E failures are the same failures present on current main.

[hqhq1025]

Follow-up is now complete in 44dfa5c10 and merge commit 8eff71cab. The upgrade boundary is documented and covered by a Runtime Host regression test: removing a bundled source revokes Maka's provenance trust and reports metadata_error, while preserving the valid user-owned local file and its ordinary invocability instead of deleting or silently disabling it.

I also merged the current main and resolved the only conflict in skills-governance.test.ts by preserving main's test-pruning decision; the retained Host-level catalog assertion and generator fail-closed guard remain the authoritative coverage. The PR is mergeable again. Generator --check, the relevant package builds, the two focused catalog tests, test_runtime_host, test_workspaces, Storybook, and the aggregate CI lane pass. The remaining repository-wide formatting and hidden-composer E2E failures are reproduced on current main and are outside this diff.

[hqhq1025]

Final approval at 8eff71cabc83cd4d8a06e2c03358af768287593d after merging current main and resolving the sole test conflict. The PR is mergeable, the catalog upgrade boundary remains covered, and the Runtime Host, workspace, aggregate, Windows baseline, and Windows recovery checks pass. The only remaining failure is the repository-wide formatting check already failing on main.

[Astro-Han]

Approved. This PR removes the 29 Skills introduced by #842 and keeps computer-use. It also updates the generated catalog, removes the stale drafter-diagram hash, and documents what happens to copies installed by an older release.

I ran the generator check, focused formatting checks, and the two affected Runtime Host test files. All 39 tests passed. The remaining repository-wide CI failure also occurs on main and is unrelated to this change.

Please merge this before #2676. That PR can then remove the deleted Skills from the unresolved section of provenance.json.

AI assistance: Codex checked the diff, git history, generated catalog, upgrade behavior, focused tests, and merge result. I reviewed the evidence and take responsibility for this approval.

中文对照

批准。这个 PR 删除了 #842 引入的 29 个 Skills，保留了 computer-use，同时更新了生成的 catalog，移除了过期的 drafter-diagram 哈希，并说明了升级后如何处理旧版本已经安装的副本。

我运行了生成器检查、聚焦格式检查，以及两个受影响的 Runtime Host 测试文件。39 项测试全部通过。剩余的仓库级 CI 失败在 main 上也存在，与本次改动无关。

请先合并这个 PR。之后 #2676 可以从 provenance.json 的 unresolved 部分移除这些已删除的 Skills。

AI 辅助说明：Codex 协助检查了 diff、Git 历史、生成的 catalog、升级行为、聚焦测试和合并结果。我审阅了相关证据，并对本次批准负责。

[likun666661]

@MicroGery Thanks for calling this out. The intended boundary is the first one: this PR stops distributing and trusting the 29 removed bundled sources, but it does not delete, migrate, or disable copies already installed in a user's local skills/<id> directory.

An older bundled lock now reports metadata_error, so the retained copy is no longer treated as a trusted Maka-bundled source or eligible for bundled-source updates. If the local copy is otherwise valid and enabled, it remains user-controlled content and stays invocable under the normal permission and host-capability rules.

This is now explicit in docs/skill-catalog-policy.md, with a Runtime Host regression test covering both the governance status and continued invocability in 44dfa5c. The focused test passes locally.