chore: stop publishing skills to npm

[thymikee]

Summary

Stop shipping repository skills inside the npm CLI package. Skills remain discoverable and installable from GitHub, while npm now owns only the CLI/runtime distribution.

Keep npm installation as a user-owned prerequisite in the iOS Simulator and Android Emulator skills, while matching the canonical agent-device startup contract: begin normal work directly with platform-specific open, do not probe with version or help commands, and consult version-matched help only for specialized or unclear work. Apply the same open-first guidance to reusable agent rules and client examples in the setup documentation. Add packaging and startup regression guards, and align update wording with the new distribution boundary.

Touches 9 files; scope remains within skill distribution, packaging policy, and its documentation/tests.

Validation

pnpm check:affected --run passed every runnable local gate, including formatting, lint, typecheck, layering, Fallow, build, clean-install package verification, integration smoke, affected coverage, replay compatibility, and daemon wire compatibility.

The packed npm package contains no skills/** entries, and the focused packaging/skill/setup contract suite passes 21 tests. Runtime device validation does not apply because command behavior and platform implementations are unchanged.

[github-actions]

Size Report

Metric	Base	Current	Diff
JS raw	2.17 MB	2.17 MB	+311 B
JS gzip	709.4 kB	709.4 kB	+84 B
npm tarball	836.8 kB	835.6 kB	-1.2 kB
npm unpacked	2.91 MB	2.91 MB	-2.7 kB

Startup median (7 runs, lower is better):

Scenario	Base	Current	Diff
CLI --version	27.2 ms	27.4 ms	+0.3 ms
CLI --help	66.1 ms	65.7 ms	-0.5 ms

Top changed chunks:

Chunk	Raw diff	Gzip diff
dist/src/session.js	+190 B	+58 B
dist/src/screenshot-result.js	+61 B	+32 B
dist/src/interaction.js	+23 B	+8 B
dist/src/selector-runtime.js	+41 B	+1 B

[github-actions]

PR Preview Action v1.8.1
Preview removed because the pull request was closed.
2026-08-11 09:47 UTC

[thymikee]

Exact-head review at 5be3a2c: code/docs review is clean. Removing both skill paths from package.json’s explicit files allowlist excludes the repository skills from npm while preserving GitHub distribution; the real npm-pack/clean-consumer package lane and the manifest regression make that change load-bearing. The open-first skill/setup guidance matches the intended separately-installed CLI boundary, and its focused regressions fail against the old mandatory-probe wording. Runtime/device behavior is unchanged, so live device evidence is not applicable. All completed checks are green; Android and iOS Smoke Tests are still in progress. Ready for human review from a code/readiness standpoint, with final merge gated on those authoritative lanes.