@foggy-projects/deepseek-harness-plugin 0.4.0-beta.10

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -0,0 +1,81 @@
+# Foggy for DeepSeek Harness (Beta)
+
+This package is the lightweight DeepSeek Harness Bundle for Foggy's Java data
+analysis engine. Installing the Bundle adds a native Foggy tab under **Settings
+→ Plugins**. The private Python runtime, Launcher, and isolated CLI environment
+are downloaded only when the user selects **Initialize Foggy**.
+
+DeepSeek Harness uses a system Node.js (`^22.19.0 || >=24.0.0`) and Foggy's Java
+Launcher uses a system Java 17+. Foggy manages its own pinned Python 3.12 runtime
+inside the per-user component directory; it does not require a system Python,
+modify `PATH`, or register Python globally. Advanced users may explicitly set
+`FOGGY_PYTHON` to a compatible Python 3.11+ executable.
+
+## Local beta installation
+
+```powershell
+dsh plugin --profile web add --workspace-root ./foggy-projects-deepseek-harness-plugin-0.4.0-beta.10.tgz
+```
+
+Restart `dsh web`, use the browser it opens (or the complete printed URL,
+including `?token=...`), open Settings → Plugins → Foggy Data Analysis, and
+initialize the components from there. Do not share the launch-token URL.
+
+After npm beta publication, the corresponding one-line install is:
+
+```powershell
+dsh plugin --profile web add --workspace-root @foggy-projects/deepseek-harness-plugin@beta
+```
+
+For development, `FOGGY_ASSET_CACHE_DIRS` can contain platform-delimited verified
+asset-cache directories. It is not required for a normal install.
+
+Database credentials remain outside the ordinary DSH settings document. The
+bundled onboarding Skill drives datasource discovery, semantic drafting,
+checkpointed publication, and bounded read-only query verification.
+
+## Native Skill and workspace contract
+
+The Bundle registers `foggy-deepseek-onboarding` and the downloaded
+`foggy-ai-analysis` through DeepSeek Harness's native Skill provider API. Skills
+are available in every DSH workspace without copying or symlinking `.agents`.
+The current session `cwd` remains the workspace boundary for semantic drafts and
+evidence.
+
+Opaque CLI profiles default to the private persistent
+`<dataRoot>/cli-profiles` directory. Composite onboarding commands are
+idempotent: unchanged completed phases are resumed rather than re-adding a
+datasource or re-registering a published bundle. Settings detects legacy
+temporary profiles and offers an explicit, validated migration into the
+persistent store. A completed profile can also be bound non-destructively to an
+additional DSH workspace when its reviewed connection contract and published
+semantic digest are unchanged.
+
+Private Python, CLI, Launcher, the analysis Skill, install state, and Runtime
+state live in the user-level Foggy component directories. The managed CLI is intentionally isolated
+and does not need to be on `PATH`. **Re-download / Repair** verifies the global
+analysis Skill, backs up modified or outdated managed content, restores it, and
+invalidates DSH's Skill catalog. The onboarding Skill is bundled with the plugin
+and is restored by reinstalling or upgrading the plugin package.
+
+The Foggy settings tab shows the persisted database/semantic onboarding stages,
+offers pinned checks and repair for CLI, Launcher, and the managed analysis
+Skill, private Python, and exports a private redacted diagnostics report. Runtime start is
+idempotent: an already-recorded process is verified with `wait-ready` and
+`capabilities` instead of being treated as a failed second start.
+
+This beta remains a local dev/test integration. The bundled Runtime reports
+`securityMode=none-dev-test-only` and must not be exposed to a network or used as
+a production service.
+
+See [`docs/PUBLIC-BETA-READINESS.md`](./docs/PUBLIC-BETA-READINESS.md) for the
+tested public Beta scope, release gates, and stable-release blockers.
+Native Windows acceptance instructions are in
+[`docs/WINDOWS-BETA-ACCEPTANCE.md`](./docs/WINDOWS-BETA-ACCEPTANCE.md); database
+credentials intentionally remain outside the public repository.
+
+## Linux and WSL2 experience
+
+Ubuntu and WSL2 users can use the checked-in preflighted installer under
+[`experience/linux`](./experience/linux/README.md). It keeps DSH, its profile,
+the project workspace, and Foggy data on the Linux-native filesystem.

package/THIRD-PARTY-RUNTIME-NOTICES.md

@@ -0,0 +1,16 @@
+# Third-party runtime notices
+
+Foggy for DeepSeek Harness downloads a pinned CPython runtime on first
+initialization. The runtime is not included in the npm package and is installed
+only inside Foggy's per-user component directory.
+
+- CPython is provided under the Python Software Foundation License Version 2.
+- Portable distributions are produced by
+  [astral-sh/python-build-standalone](https://github.com/astral-sh/python-build-standalone),
+  whose build tooling is provided under MPL-2.0.
+- The downloaded distribution contains its own license and attribution files.
+
+The exact build release, platform assets, sizes, URLs, and SHA256 digests are
+recorded in `skills/foggy-deepseek-onboarding/assets/versions.json`. Foggy
+verifies the selected digest before extraction and does not add the interpreter
+to `PATH` or register it as a system Python installation.

package/cordis.patch.yml

@@ -0,0 +1,6 @@
+# Foggy host service and its browser-side Settings contribution share one
+# dual-face package. dsh-client-modules discovers the client declaration in
+# package.json after this Host row becomes active.
+- insert:
+    - id: foggy-data-analysis
+      name: '@foggy-projects/deepseek-harness-plugin'

package/docs/PUBLIC-BETA-READINESS.md

@@ -0,0 +1,57 @@
+# Public beta readiness: 0.4.0-beta.10
+
+Assessment date: 2026-09-04
+
+## Verdict
+
+`0.4.0-beta.10` is suitable for a scoped public beta on Windows 10/11 x64 and
+Linux/WSL2 x64. It is not a general-availability release.
+
+The plugin package stays small and downloads large components only during
+initialization. Node.js and Java remain system prerequisites. Python 3.12.13 is
+installed privately below Foggy's component directory and does not change the
+system PATH, registry, or a user's existing Python installation.
+
+## Verified behavior
+
+- The npm tarball is about 67 KB compressed and contains no Python or Java
+  runtime binary.
+- Managed CPython assets are pinned by URL, byte size, and SHA256 for Windows,
+  Linux, and macOS on x64 and arm64.
+- The component installer code is unchanged from beta.9, whose Windows x64 run
+  completed a cold Python download, checksum verification, extraction,
+  initialization, forced Python repair, and doctor run.
+- DeepSeek Harness `0.1.2-rc.1` loaded the beta.10 candidate Bundle, web client,
+  remote status service, and native Skill provider on both Windows and WSL2.
+- WSL2 reported the existing managed Python, CLI, Launcher, and analysis Skill
+  as ready; an isolated Windows profile correctly reported its fresh component
+  state and rejected the host's Java 12 as below the Java 17 prerequisite.
+- The UI reported Python 3.12.13 as `Foggy private`, and CLI 0.1.23, Launcher
+  0.1.18, analysis Skill 0.1.17, and onboarding Skill 0.4.0-beta.10 as installed.
+- Interrupted downloads resume with HTTP Range when the server supports it;
+  downloaded artifacts are not trusted until the complete SHA256 matches.
+- Windows progress writes tolerate transient sharing violations without losing
+  the previous valid progress document or leaving temporary files behind.
+- Automated regression passed on Windows and Linux/WSL2: 17 Node tests and 10
+  Python tests on each platform, plus shell and PowerShell syntax checks.
+
+## Beta boundaries
+
+- Supported public-beta targets: Windows 10/11 x64 and Linux/WSL2 x64.
+- Windows users must install a supported system Node.js line (`^22.19.0` or
+  `>=24.0.0`) and Java 17 or later. They do not need to install Python.
+- macOS and arm64 assets are pinned and integrity-checked but have not received
+  the same end-to-end host validation; treat those targets as experimental.
+- DeepSeek Harness itself is consumed at `0.1.2-rc.1`. Its authenticated Web UI
+  launch URL, plugin installation, and supply-chain policy behavior may change
+  before a stable Harness release.
+- Runtime production authentication is outside this beta's default local
+  onboarding mode. The UI and doctor continue to report `productionReady=false`
+  for the development-only no-auth mode.
+
+## Release gate after publication
+
+Before broad announcement, complete the native Windows fresh-machine checklist
+in [WINDOWS-BETA-ACCEPTANCE.md](./WINDOWS-BETA-ACCEPTANCE.md). Record the exact
+Node, Java, DeepSeek Harness, and plugin versions and confirm that initialization
+works without a system Python executable.

package/docs/WINDOWS-BETA-ACCEPTANCE.md

@@ -0,0 +1,75 @@
+# Native Windows Beta acceptance
+
+This runbook validates DeepSeek Harness `0.1.2-rc.1` with Foggy plugin
+`0.4.0-beta.10` on a clean 64-bit Windows 10 or Windows 11 machine. Use a local
+directory that is not synchronized by OneDrive.
+
+## Prerequisites
+
+Install a system Node.js matching `^22.19.0 || >=24.0.0` and a system Java 17+
+JRE/JDK. Windows must also provide `tar` (included in supported Windows 10/11
+versions). A system Python is neither required nor used by default.
+
+```powershell
+node --version
+npm --version
+java -version
+tar --version
+```
+
+Foggy downloads a pinned private CPython 3.12.13 runtime during initialization.
+It remains below `%LOCALAPPDATA%\Foggy\DeepSeekHarness`, is not added to `PATH`,
+and is not registered as a system Python.
+
+## Install and start
+
+```powershell
+New-Item -ItemType Directory -Force C:\FoggyAcceptance | Out-Null
+Set-Location C:\FoggyAcceptance
+
+npx --yes --package=@deepseek-ai/dsh@0.1.2-rc.1 --package=pnpm@11.7.0 `
+  dsh plugin --profile web add --workspace-root `
+  "@foggy-projects/deepseek-harness-plugin@beta"
+
+npx --yes --package=@deepseek-ai/dsh@0.1.2-rc.1 --package=pnpm@11.7.0 dsh web
+```
+
+Let DSH open the browser automatically. If it does not, copy the complete URL
+printed by `dsh web`, including its `?token=...` query, into the browser. A new
+browser session cannot use the bare `http://127.0.0.1:3080/` URL until that
+token has established its local authentication cookie. Treat the launch URL as
+temporary local access material and do not paste it into chat or diagnostics.
+
+Configure an LLM provider, select the `C:\FoggyAcceptance` workspace, then open
+**Settings → Plugins → Foggy Data Analysis** and choose **Initialize Foggy**.
+
+Expected component state:
+
+- Python 3.12.13, source `Foggy private`;
+- CLI 0.1.23;
+- Launcher 0.1.18;
+- analysis Skill 0.1.17;
+- onboarding Skill 0.4.0-beta.10;
+- Java 17+ available;
+- native DSH Skill registration available.
+
+## Database and semantic-layer acceptance
+
+Keep database credentials out of this public repository. Create a private CLI
+profile outside the DSH conversation, pass only its opaque profile ID and
+revision to the onboarding workflow, and use a test-only database account with
+read-only permissions.
+
+Use a natural prompt such as:
+
+```text
+请帮我用 Foggy 分析这个测试数据库。我已经按验收手册创建了私有连接
+profile。请先确认连接和表结构，再围绕订单数据创建一个简单的语义层，
+包含订单数量、状态和开单时间，最后执行一个不超过 20 行的只读查询。
+不要修改数据库，也不要在对话或验收文件中输出密码。
+```
+
+Pass only when Runtime readiness and capabilities succeed, datasource metadata
+can be discovered, TM/QM models validate and publish, the bounded read-only
+query succeeds, diagnostics contain no credentials, and stopping Runtime frees
+port 18066.

package/experience/linux/README.md

@@ -0,0 +1,53 @@
+# Linux and WSL2 experience
+
+This entry prepares a clean, user-owned DeepSeek Harness web profile with the public Foggy Bundle.
+It has been designed for Ubuntu 22.04/24.04 x86_64 and WSL2.
+
+## Prerequisites
+
+- Node.js `^22.19.0` or `>=24.0.0`
+- Java 17 or newer
+- Git, npm, and `tar`
+- At least 4 GiB free disk space and 2 GiB available memory; 4 GiB memory is recommended
+
+Keep the experience root on the Linux-native filesystem, such as under `$HOME`. In WSL2, do not
+put DSH, `node_modules`, Foggy's private Python environment, or Foggy data under `/mnt/c` or `/mnt/d`.
+
+## Prepare
+
+```bash
+git clone https://github.com/foggy-projects/foggy-deepseek-harness-plugin.git
+cd foggy-deepseek-harness-plugin
+bash experience/linux/prepare.sh --dry-run
+bash experience/linux/prepare.sh
+```
+
+The script installs pinned pnpm and DeepSeek Harness versions inside
+`~/.local/share/foggy-deepseek-harness-experience`, clones and packs the public Foggy Bundle, and
+adds it to a clean DSH web profile. It does not use `sudo`, install operating-system packages, write
+model credentials, initialize Foggy components, or start the web process.
+
+Start the prepared profile with:
+
+```bash
+~/.local/share/foggy-deepseek-harness-experience/run.sh
+```
+
+Open the URL printed by DSH, then choose **Settings → Plugins → Foggy Data Analysis** and select
+**Initialize Foggy**. Private Python, the CLI, Launcher, and analysis Skill are downloaded from their
+pinned public Releases and verified before installation. A system Python is not required.
+
+Provider configuration remains a separate DSH setup step. Store API keys in a private environment
+file or secret manager; do not add them to the DSH settings document or the project repository.
+
+## Custom roots
+
+```bash
+bash experience/linux/prepare.sh \
+  --experience-root "$HOME/.local/share/my-foggy-experience" \
+  --project-root "$HOME/my-foggy-workspace"
+```
+
+The script refuses a non-empty experience root. This prevents an existing profile from being
+silently overwritten. Remove an abandoned test root yourself after confirming that it contains no
+data you need, or choose a new root.