feat(catalog): clone-on-first-run — remove bundled corpus baseline

[msitarzewski]

Summary

The app bundled a snapshot of the agent catalog (resources/corpus-baseline, ~210 files) and seeded it as the default Bundled source. That snapshot perpetually drifted — this week it was 29 agents behind and missed a flat→nested game-dev restructure — and re-vendoring it by hand still shipped stale on fresh installs.

This drops the bundle entirely and makes the app clone the live catalog instead. Replaces the closed #61 (re-vendoring) with a fix at the root.

Changes

• Remove CatalogSource::Bundled (Rust + TS) and the baseline seed path (seed_from_baseline, baseline_dir, the resolve_active baseline param). Default source is now a managed clone at ~/.agency-agents, empty until provisioned; resolve_active indexes the active root and degrades to an empty "no agents" corpus (never panics) before the first clone.
• Delete resources/corpus-baseline/ + its tauri.conf.json bundle entry. Both existing fallbacks (git clone, codeload tarball) already fetch from GitHub, so nothing else used it. ~58k fewer lines, smaller binary.
• First run: CatalogFirstRun now offers Download from GitHub (emphasized default; needs network) and Use my own clone (offline/existing escape hatch). Bundled card + the Settings switcher's Bundled option removed.
• Migration: catalog_configured returns false when the persisted source can't parse as a current variant, so a pre-existing {"kind":"bundled"} re-shows the first-run picker instead of stranding the user in an empty app.

Why

Eliminates baseline drift at the root — a fresh clone always has every division (gis/healthcare/strategy included), so empty divisions and Runbooks "sync to unlock" simply don't occur — and dissolves the app↔catalog snapshot-coordination question.

Tradeoff: first run needs network (or a local clone), by design. Small user base, clear consent prompt.

Verification

• Backend: cargo test → 270 passing. New resolve_active_indexes_the_clone, unprovisioned_source_serves_empty_corpus, and a {"kind":"bundled"}→re-prompt migration assertion. Clean build, no warnings.
• Frontend: npm run check 0 errors; build clean.
• Modal: reworked first-run verified visually against the component's real styles (Download-primary + folder option, no Bundled).
• Not covered here (honest): the full GUI click-through on a fresh machine (launch → Download → clone → agents populate) needs a real WKWebView run, which isn't CDP-drivable from here — worth a manual smoke on a clean profile before release. The clone→index mechanic itself is unit-tested and uses the same git clone that already works.

Related

• Closes the direction of fix(corpus): re-vendor gis/healthcare/strategy into bundled baseline (#51) #61 (re-vendoring), which is closed in favor of this.
• Independent of the other open PRs (feat(runbooks): scenario-doc markdown render + staged per-phase activation #62 Runbooks polish, fix(install): explain project-only tools instead of a dead "—" (#40) #63 Cannot install globally? #40 UX, feat(tools): add ZCode support (Z.ai GLM agent harness) #64 ZCode).

🤖 Generated with Claude Code