fix(skills): keep catalog bundles consistent and surface partial installs

Stop treating a failed sandbox as a full success, avoid writing a SHA
when the catalog archive is missing, and pick the newest stored fork
on migrate so files and chips match the catalog users actually see.

Author: lyingbug

frontend/src/api/skill/index.ts

@@ -15,6 +15,7 @@ export interface SkillCatalogInstall {
   status: string;
   enabled: boolean;
   error?: string;
+  bundle_sha256?: string;
   updated_at: string;
 }
 
@@ -66,7 +67,7 @@ export function registerSkillCatalogFromFile(
 }
 
 export function installSkillCatalog(catalogId: string, sandboxConfigIds: string[]) {
-  return post<{ data: { installs: Record<string, string> } }>(
+  return post<{ data: { installs: Record<string, string>; errors?: Record<string, string> } }>(
     `/api/v1/skills/catalog/${catalogId}/install`,
     { sandbox_config_ids: sandboxConfigIds },
   );

frontend/src/components/SandboxSkillsPanel.test.mjs

@@ -11,6 +11,7 @@ const manageBlock = source.slice(
 test('focused skill management expands env vars and transcript without a mid-page save button', () => {
   assert.match(manageBlock, /skillHasDeclaredEnvs\(managedSkill\)/)
   assert.match(manageBlock, /onEnvFieldBlur/)
+  assert.match(source, /isBusy\(skill\) \|\| !hasEnvEdits\(skill\)/)
   assert.match(manageBlock, /SkillInstallTimeline/)
   assert.match(manageBlock, /settings\.skills\.manageUninstall/)
   assert.match(manageBlock, /skill-manage__progress/)

frontend/src/components/SandboxSkillsPanel.vue

@@ -87,7 +87,7 @@
                 :value="managedSkill.enabled"
                 :disabled="isBusy(managedSkill)"
                 :loading="togglingId === managedSkill.id"
-                @change="(v: any) => toggleEnabled(managedSkill, Boolean(v))"
+                @change="(v: any) => managedSkill && toggleEnabled(managedSkill, Boolean(v))"
               />
               <t-tooltip
                 v-if="managedSkill.status === 'failed'"
@@ -157,15 +157,15 @@
                     type="password"
                     autocomplete="new-password"
                     :name="`wk-se-focus-${envIdx}`"
-                    :readonly="!isEnvInputUnlocked(managedSkill.id, env.name)"
+                    :readonly="isBusy(managedSkill) || !isEnvInputUnlocked(managedSkill.id, env.name)"
                     spellcheck="false"
                     :placeholder="
                       env.is_set
                         ? $t('settings.sandbox.skillEnv.placeholderSet')
                         : $t('settings.sandbox.skillEnv.placeholderUnset')
                     "
                     @focus="unlockEnvInput(managedSkill.id, env.name)"
-                    @update:value="(v: string) => setEnvDraft(managedSkill.id, env.name, v)"
+                    @update:value="(v: string) => managedSkill && setEnvDraft(managedSkill.id, env.name, v)"
                     @enter="saveEnvs(managedSkill, true)"
                     @blur="onEnvFieldBlur(managedSkill)"
                   />
@@ -841,6 +841,7 @@ function envSaveInFlight(skill: ConfigSkill): boolean {
 }
 
 async function saveEnvs(skill: ConfigSkill, silent = false) {
+  if (isBusy(skill)) return
   const envs = envPayload(skill)
   if (Object.keys(envs).length === 0) return
   if (Object.values(envs).some((value) => !isValidEnvValueLength(value))) {
@@ -853,7 +854,7 @@ async function saveEnvs(skill: ConfigSkill, silent = false) {
 }
 
 function onEnvFieldBlur(skill: ConfigSkill) {
-  if (!hasEnvEdits(skill) || envSaveInFlight(skill)) return
+  if (isBusy(skill) || !hasEnvEdits(skill) || envSaveInFlight(skill)) return
   void saveEnvs(skill, true)
 }
 

frontend/src/i18n/locales/en-US.ts

@@ -1023,7 +1023,7 @@ export default {
       selectSkills: 'Select skills',
       selectSkillsDesc: 'Choose which skills to enable. Uninstalled or not-ready skills cannot be checked.',
       skillsAllListHint: 'Ready skills on this sandbox will be enabled. Uninstalled ones are not included until you install them.',
-      skillsListSummary: '{ready} ready, {pending} not installed on this sandbox',
+      skillsListSummary: '{ready} ready, {pending} not ready on this sandbox',
       skillsListSummaryReadyOnly: '{ready} ready',
       noSkillsAvailable: 'The workspace catalog has no skills yet.',
       skillsNeedSandbox: 'Select a sandbox first.',
@@ -1432,6 +1432,8 @@ export default {
       deleteSuccess: 'Removed from catalog',
       registerAccepted: 'Added to catalog',
       installAccepted: 'Install started',
+      installPartial: 'Started on some sandboxes. {failed} could not start.',
+      installOutdated: 'Differs from catalog',
       loadFailed: 'Failed to load',
     },
     mcpService: 'MCP Service',

frontend/src/i18n/locales/ko-KR.ts

@@ -5329,6 +5329,8 @@ export default {
       deleteSuccess: '카탈로그에서 삭제했습니다',
       registerAccepted: '카탈로그에 추가했습니다',
       installAccepted: '설치를 시작했습니다',
+      installPartial: '일부 샌드박스에서 설치를 시작했습니다. {failed}곳은 시작하지 못했습니다.',
+      installOutdated: '카탈로그와 버전이 다름',
       loadFailed: '불러오지 못했습니다',
     },
     mcpService: 'MCP 서비스',
@@ -5733,7 +5735,7 @@ export default {
       selectSkills: '스킬 선택',
       selectSkillsDesc: '사용할 스킬을 선택하세요. 설치되지 않았거나 아직 준비되지 않은 스킬은 선택할 수 없습니다.',
       skillsAllListHint: '이 샌드박스에서 준비된 스킬이 사용됩니다. 설치되지 않은 스킬은 설치해야 「전체」에 포함됩니다.',
-      skillsListSummary: '준비됨 {ready}개, 이 샌드박스에 미설치 {pending}개',
+      skillsListSummary: '준비됨 {ready}개, 이 샌드박스에서 아직 사용 불가 {pending}개',
       skillsListSummaryReadyOnly: '준비됨 {ready}개',
       noSkillsAvailable: '워크스페이스 카탈로그에 스킬이 없습니다.',
       skillsNeedSandbox: '먼저 실행 샌드박스를 선택하세요.',

frontend/src/i18n/locales/ru-RU.ts

@@ -5329,6 +5329,8 @@ export default {
       deleteSuccess: 'Удалено из каталога',
       registerAccepted: 'Добавлено в каталог',
       installAccepted: 'Установка начата',
+      installPartial: 'Установка начата на части песочниц. {failed} не удалось запустить.',
+      installOutdated: 'Отличается от каталога',
       loadFailed: 'Не удалось загрузить',
     },
     mcpService: 'Сервис MCP',
@@ -5733,7 +5735,7 @@ export default {
       selectSkills: 'Выбрать навыки',
       selectSkillsDesc: 'Отметьте навыки, которые нужно включить. Неустановленные или неготовые навыки выбрать нельзя.',
       skillsAllListHint: 'Будут включены готовые навыки в этой песочнице. Неустановленные не попадут в «Все», пока их не установить.',
-      skillsListSummary: '{ready} готовы, {pending} не установлены в эту песочницу',
+      skillsListSummary: '{ready} готовы, {pending} ещё нельзя включить в этой песочнице',
       skillsListSummaryReadyOnly: '{ready} готовы',
       noSkillsAvailable: 'В каталоге пространства ещё нет навыков.',
       skillsNeedSandbox: 'Сначала выберите песочницу.',

frontend/src/i18n/locales/zh-CN.ts

@@ -5331,6 +5331,8 @@ export default {
       deleteSuccess: '已从目录删除',
       registerAccepted: '已添加到目录',
       installAccepted: '已开始安装',
+      installPartial: '部分沙箱已开始安装，{failed} 个未能开始。',
+      installOutdated: '与目录版本不同',
       loadFailed: '加载失败',
     },
     mcpService: 'MCP服务',
@@ -5735,7 +5737,7 @@ export default {
       selectSkills: '选择技能',
       selectSkillsDesc: '勾选要启用的技能。未安装或未就绪的不能勾选。',
       skillsAllListHint: '将启用此沙箱上已就绪的技能。未安装的不会自动带上，装好后才会纳入「全部」。',
-      skillsListSummary: '{ready} 个已就绪，{pending} 个未安装到此沙箱',
+      skillsListSummary: '{ready} 个已就绪，{pending} 个尚未可在此沙箱启用',
       skillsListSummaryReadyOnly: '{ready} 个已就绪',
       noSkillsAvailable: '空间目录里还没有技能。',
       skillsNeedSandbox: '请先选择运行沙箱。',

frontend/src/views/agent/AgentEditorModal.test.mjs

@@ -135,6 +135,8 @@ test('agent skill picker uses the catalog and only enables ready installs', () =
   assert.match(source, /showCatalogSkillList/)
   assert.match(source, /skillsSelectionMode\.value !== 'none'/)
   assert.match(source, /:disabled="!skill\.selectable"/)
+  assert.match(source, /catalogPendingCount/)
+  assert.match(source, /installPartial/)
   assert.match(source, /installCatalogToCurrent/)
   assert.match(source, /agent\.editor\.installToThisSandbox/)
   assert.match(source, /skill-pick-list/)

frontend/src/views/agent/AgentEditorModal.vue

@@ -2044,7 +2044,7 @@ const catalogReadyCount = computed(() =>
 )
 
 const catalogPendingCount = computed(() =>
-  catalogSkillRows.value.filter((skill) => !skill.installed || skill.installStatus === 'failed').length,
+  catalogSkillRows.value.filter((skill) => !skill.selectable).length,
 )
 
 const skillListSummary = computed(() => {
@@ -2117,8 +2117,13 @@ async function installCatalogToCurrent(skill: CatalogSkillRow) {
   if (!configId || installingCatalogId.value) return
   installingCatalogId.value = skill.id
   try {
-    await installSkillCatalog(skill.id, [configId])
-    MessagePlugin.success(t('settings.skills.installAccepted'))
+    const res = await installSkillCatalog(skill.id, [configId])
+    const failed = Object.keys(res?.data?.errors || {}).length
+    if (failed > 0) {
+      MessagePlugin.warning(t('settings.skills.installPartial', { failed }))
+    } else {
+      MessagePlugin.success(t('settings.skills.installAccepted'))
+    }
     await syncInstalledSkills(true)
   } catch (e: any) {
     MessagePlugin.error(e?.message || t('settings.sandbox.skillUploadFailed'))

frontend/src/views/settings/SkillSettings.test.mjs

@@ -26,7 +26,10 @@ test('catalog cards can install onto sandboxes and manage one install', () => {
   assert.match(source, /skill-card__icon-btn/)
   assert.match(source, /openCatalogFiles/)
   assert.match(source, /SkillFilesDrawer/)
-  assert.match(source, /skill-card__chip-status/)
+  assert.match(source, /installPartial/)
+  assert.match(source, /installOutdated/)
+  assert.match(source, /skill-card__chip--stale/)
+  assert.match(source, /catalogInstallFailedCount/)
   assert.match(source, /chevron-right/)
   assert.match(source, /skill-card__heading/)
   assert.match(source, /align-items: center/)