feat(skills): store skills in a tenant catalog and install per sandbox

A skill is a workspace definition, not a sandbox setting. Keep one catalog
row and run a full image install for each backend, so agents only enable
skills that are already ready on the sandbox they use.

Author: lyingbug

frontend/src/api/skill/index.ts

@@ -1,15 +1,87 @@
-import { get } from "../../utils/request";
+import { del, get, post, postUpload } from "../../utils/request";
+import type { ConfigSkillFileContent, ConfigSkillFileEntry } from "../system";
 
 // Skill信息
 export interface SkillInfo {
   name: string;
   description: string;
 }
 
+export interface SkillCatalogInstall {
+  skill_id: string;
+  sandbox_config_id: string;
+  sandbox_config_name?: string;
+  sandbox_type?: string;
+  status: string;
+  enabled: boolean;
+  error?: string;
+  updated_at: string;
+}
+
+export interface SkillCatalogItem {
+  id: string;
+  name: string;
+  version?: string;
+  description?: string;
+  bundle_sha256?: string;
+  created_at: string;
+  updated_at: string;
+  installations: SkillCatalogInstall[];
+}
+
+export interface SkillCatalogRegisterResult {
+  id: string;
+  name: string;
+  version?: string;
+  description?: string;
+}
+
 // 获取当前沙箱配置上可执行的 Skills；未传 sandboxConfigId 或
 // skills_available 为 false 时，前端应隐藏/禁用 Skills 配置
 export function listSkills(sandboxConfigId?: string) {
   return get<{ data: SkillInfo[]; skills_available?: boolean }>('/api/v1/skills', {
     params: sandboxConfigId ? { sandbox_config_id: sandboxConfigId } : {},
   });
 }
+
+export function listSkillCatalog() {
+  return get<{ data: SkillCatalogItem[] }>('/api/v1/skills/catalog');
+}
+
+export function registerSkillCatalogFromSource(source: string) {
+  return post<{ data: SkillCatalogRegisterResult }>('/api/v1/skills/catalog', { source }, {
+    timeout: 2 * 60 * 1000,
+  });
+}
+
+export function registerSkillCatalogFromFile(
+  file: File,
+  onProgress?: (percent: number) => void,
+) {
+  const form = new FormData();
+  form.append('file', file);
+  return postUpload('/api/v1/skills/catalog', form, (e: any) => {
+    if (e.total) onProgress?.(Math.round((e.loaded * 100) / e.total));
+  }, { timeout: 5 * 60 * 1000 }) as Promise<{ data: SkillCatalogRegisterResult }>;
+}
+
+export function installSkillCatalog(catalogId: string, sandboxConfigIds: string[]) {
+  return post<{ data: { installs: Record<string, string> } }>(
+    `/api/v1/skills/catalog/${catalogId}/install`,
+    { sandbox_config_ids: sandboxConfigIds },
+  );
+}
+
+export function deleteSkillCatalog(catalogId: string) {
+  return del(`/api/v1/skills/catalog/${catalogId}`);
+}
+
+export function listCatalogSkillFiles(catalogId: string) {
+  return get<{ data: ConfigSkillFileEntry[] }>(`/api/v1/skills/catalog/${catalogId}/files`);
+}
+
+export function getCatalogSkillFile(catalogId: string, path: string) {
+  return get<{ data: ConfigSkillFileContent }>(`/api/v1/skills/catalog/${catalogId}/files/content`, {
+    params: { path },
+  });
+}

frontend/src/components/SandboxSkillsPanel.test.mjs

@@ -0,0 +1,20 @@
+import assert from 'node:assert/strict'
+import { readFileSync } from 'node:fs'
+import test from 'node:test'
+
+const source = readFileSync(new URL('./SandboxSkillsPanel.vue', import.meta.url), 'utf8')
+const manageBlock = source.slice(
+  source.indexOf('mode === \'list\' && focusSkillId'),
+  source.indexOf('v-else-if="mode === \'list\'"'),
+)
+
+test('focused skill management expands env vars and transcript without a mid-page save button', () => {
+  assert.match(manageBlock, /skillHasDeclaredEnvs\(managedSkill\)/)
+  assert.match(manageBlock, /onEnvFieldBlur/)
+  assert.match(manageBlock, /SkillInstallTimeline/)
+  assert.match(manageBlock, /settings\.skills\.manageUninstall/)
+  assert.match(manageBlock, /skill-manage__progress/)
+  assert.match(manageBlock, /v-if="!isBusy\(managedSkill\)"/)
+  assert.doesNotMatch(manageBlock, /skill-manage__footer/)
+  assert.doesNotMatch(manageBlock, /settings\.sandbox\.skillEnv\.save/)
+})