Fix verified install telemetry

[Leon-Drq]

What changed

• replace the misleading detail-page Downloads metric with Verified installs
• derive verified installs from idempotent successful agent outcome receipts
• add install receipt instructions to Codex, Claude Code, Cursor, and install handoff APIs
• invalidate cached skill pages and agent APIs after outcome reports
• surface skill-event ingestion failures instead of silently returning success
• correct the telemetry documentation
• add and apply Supabase migrations for the verified install aggregate

Root cause

The UI read the static skills.downloads field while install-copy events and agent outcomes were stored separately. Direct agent installs had no receipt guidance, and cached pages could remain stale after a successful report.

Validation

• pnpm lint — 0 errors (25 pre-existing warnings)
• pnpm exec tsc --noEmit
• pnpm build
• transactional Supabase test: success increments once, retry is idempotent, failed outcome is not counted, rollback leaves no test data
• Supabase security advisor: no new security findings

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
openagentskill	Ready	Preview	Aug 9, 2026 10:25am
v0-agent-skill	Ready	Preview, v0	Aug 9, 2026 10:25am