@foggy-projects/deepseek-harness-plugin 0.4.0-beta.11 → 0.4.0-beta.13

package/README.md

@@ -14,7 +14,7 @@ modify `PATH`, or register Python globally. Advanced users may explicitly set
 ## Local beta installation
 
 ```powershell
-dsh plugin --profile web add --workspace-root ./foggy-projects-deepseek-harness-plugin-0.4.0-beta.11.tgz
+dsh plugin --profile web add --workspace-root ./foggy-projects-deepseek-harness-plugin-0.4.0-beta.13.tgz
 ```
 
 Restart `dsh web`, use the browser it opens (or the complete printed URL,
@@ -60,9 +60,12 @@ and is restored by reinstalling or upgrading the plugin package.
 
 The Foggy settings tab shows the persisted database/semantic onboarding stages,
 offers pinned checks and repair for CLI, Launcher, and the managed analysis
-Skill, private Python, and exports a private redacted diagnostics report. Runtime start is
-idempotent: an already-recorded process is verified with `wait-ready` and
-`capabilities` instead of being treated as a failed second start.
+Skill, private Python, and exports a private redacted diagnostics report. The report
+includes bounded, sanitized tails of Runtime logs while refusing to read paths outside
+the managed Runtime directory. Runtime start monitors the Launcher PID during
+`wait-ready`, fails promptly if Java exits, and remains idempotent: an already-recorded
+process is verified with `wait-ready` and `capabilities` instead of being treated as a
+failed second start.
 
 This beta remains a local dev/test integration. The bundled Runtime reports
 `securityMode=none-dev-test-only` and must not be exposed to a network or used as

package/docs/PUBLIC-BETA-READINESS.md

@@ -1,10 +1,10 @@
-# Public beta readiness: 0.4.0-beta.11
+# Public beta readiness: 0.4.0-beta.13
 
 Assessment date: 2026-09-04
 
 ## Verdict
 
-`0.4.0-beta.11` is suitable for a scoped public beta on Windows 10/11 x64 and
+`0.4.0-beta.13` is suitable for a scoped public beta on Windows 10/11 x64 and
 Linux/WSL2 x64. It is not a general-availability release.
 
 The plugin package stays small and downloads large components only during
@@ -21,16 +21,22 @@ system PATH, registry, or a user's existing Python installation.
 - The component installer code is unchanged from beta.9, whose Windows x64 run
   completed a cold Python download, checksum verification, extraction,
   initialization, forced Python repair, and doctor run.
-- DeepSeek Harness `0.1.2-rc.1` loaded the beta.11 candidate Bundle, web client,
+- DeepSeek Harness `0.1.2-rc.1` loaded the beta.12 candidate Bundle, web client,
   remote status service, and native Skill provider on both Windows and WSL2.
 - WSL2 reported the existing managed Python, CLI, Launcher, and analysis Skill
   as ready; an isolated Windows profile correctly reported its fresh component
   state and rejected the host's Java 12 as below the Java 17 prerequisite.
 - The UI reported Python 3.12.13 as `Foggy private`, and CLI 0.1.23, Launcher
-  0.1.18, analysis Skill 0.1.17, and onboarding Skill 0.4.0-beta.11 as installed.
+  0.1.18, analysis Skill 0.1.17, and onboarding Skill 0.4.0-beta.13 as installed.
 - Runtime startup now reports the current phase, elapsed/timeout seconds, and a
-  bounded progress value. A real WSL2 launch reached readiness in 13.4 seconds;
-  a forced timeout recorded failure evidence and cleaned up the Java process.
+  bounded progress value. A real Windows launch with Temurin 17 reached readiness
+  and passed capabilities in 18.9 seconds. A controlled post-launch Java exit was
+  detected after about 1 second instead of waiting for the 180-second deadline;
+  a restored healthy launch then passed again in 15.9 seconds.
+- Diagnostic export success remains visible alongside a prior Runtime startup
+  error, including the generated local JSON path. Exported failures include
+  bounded sanitized Runtime log tails and reject log paths outside the managed
+  Runtime directory.
 - Interrupted downloads resume with HTTP Range when the server supports it;
   downloaded artifacts are not trusted until the complete SHA256 matches.
 - Windows progress writes tolerate transient sharing violations without losing

package/docs/WINDOWS-BETA-ACCEPTANCE.md

@@ -1,7 +1,7 @@
 # Native Windows Beta acceptance
 
 This runbook validates DeepSeek Harness `0.1.2-rc.1` with Foggy plugin
-`0.4.0-beta.11` on a clean 64-bit Windows 10 or Windows 11 machine. Use a local
+`0.4.0-beta.13` on a clean 64-bit Windows 10 or Windows 11 machine. Use a local
 directory that is not synchronized by OneDrive.
 
 ## Prerequisites
@@ -49,15 +49,17 @@ Expected component state:
 - CLI 0.1.23;
 - Launcher 0.1.18;
 - analysis Skill 0.1.17;
-- onboarding Skill 0.4.0-beta.11;
+- onboarding Skill 0.4.0-beta.13;
 - Java 17+ available;
 - native DSH Skill registration available.
 
 Runtime startup shows its current phase, elapsed time, and the 180-second
 readiness deadline. Typical startup is 15–30 seconds on the validated WSL2 host
 and may take up to 60 seconds on Windows with cold JVM or antivirus scanning.
-On timeout, export diagnostics before retrying; the report includes the startup
-phase, PID state, evidence directory, and Runtime log locations.
+The plugin monitors the Launcher PID and fails promptly when Java exits before
+readiness. On failure, export diagnostics before retrying; the report includes
+the startup phase, PID state, evidence directory, Runtime log locations, and
+bounded sanitized log tails.
 
 ## Database and semantic-layer acceptance
 

package/experience/linux/prepare.sh

@@ -3,7 +3,7 @@ set -euo pipefail
 
 DSH_VERSION="0.1.2-rc.1"
 PNPM_VERSION="11.7.0"
-PLUGIN_VERSION="0.4.0-beta.11"
+PLUGIN_VERSION="0.4.0-beta.13"
 PLUGIN_REF="v${PLUGIN_VERSION}"
 PLUGIN_REPOSITORY="https://github.com/foggy-projects/foggy-deepseek-harness-plugin.git"
 

package/lib/client.js

@@ -413,7 +413,9 @@ window.__ModuleLoader__.load({
           ] }),
         ] }),
         progress,
-        busy || operationError || view.message ? jsx('p', { className: 'foggy-message', 'data-error': operationError || view.error ? 'true' : undefined, children: busy ? t('working') : operationError || view.message }) : null,
+        busy ? jsx('p', { className: 'foggy-message', children: t('working') }) : null,
+        operationError ? jsx('p', { className: 'foggy-message', 'data-error': 'true', children: operationError }) : null,
+        !busy && view.message ? jsx('p', { className: 'foggy-message', 'data-error': view.error ? 'true' : undefined, children: view.message }) : null,
         jsxs('div', { className: 'foggy-grid', children: [
           componentCard(t('python'), status.components.python, 'tool', t),
           componentCard(t('java'), status.components.java, 'tool', t),

package/lib/diagnostics.js

@@ -0,0 +1,86 @@
+import { open } from 'node:fs/promises'
+import { isAbsolute, join, relative, resolve, sep } from 'node:path'
+
+const DEFAULT_MAX_BYTES = 32 * 1024
+const DEFAULT_MAX_LINES = 120
+const ANSI_ESCAPE = /\u001b(?:\[[0-?]*[ -/]*[@-~]|\][^\u0007]*(?:\u0007|\u001b\\))/g
+const BEARER_SECRET = /\bBearer\s+[A-Za-z0-9._~+/=-]{8,}/gi
+const API_KEY_SECRET = /\bsk-[A-Za-z0-9._-]{12,}/g
+const JDBC_URL = /\bjdbc:[^\s"'<>]+/gi
+const URL_CREDENTIALS = /(\b[a-z][a-z0-9+.-]*:\/\/)[^\s/@:]+:[^\s/@]+@/gi
+const SENSITIVE_QUERY_VALUE = /([?&](?:password|passwd|pwd|secret|token|api[_-]?key|auth[_-]?code)=)[^&#\s]*/gi
+const SENSITIVE_ASSIGNMENT = /\b([A-Za-z0-9_.-]*(?:password|passwd|pwd|secret|token|api[_-]?key|authorization|auth[_-]?code)[A-Za-z0-9_.-]*)(\s*[:=]\s*)(?:"[^"]*"|'[^']*'|[^\s,;]+)/gi
+
+export function sanitizeDiagnosticText(value) {
+  return String(value ?? '')
+    .replace(ANSI_ESCAPE, '')
+    .replace(BEARER_SECRET, 'Bearer [REDACTED]')
+    .replace(API_KEY_SECRET, '[REDACTED_API_KEY]')
+    .replace(JDBC_URL, 'jdbc:[REDACTED_CONNECTION_URL]')
+    .replace(URL_CREDENTIALS, '$1[REDACTED]@')
+    .replace(SENSITIVE_QUERY_VALUE, '$1[REDACTED]')
+    .replace(SENSITIVE_ASSIGNMENT, '$1$2[REDACTED]')
+    .replace(/[\u0000-\u0008\u000b\u000c\u000e-\u001f\u007f]/g, '')
+}
+
+function isInside(root, candidate) {
+  const value = relative(resolve(root), resolve(candidate))
+  return value !== '' && value !== '..' && !value.startsWith(`..${sep}`) && !isAbsolute(value)
+}
+
+export async function readDiagnosticLogTail(path, {
+  allowedRoot,
+  maxBytes = DEFAULT_MAX_BYTES,
+  maxLines = DEFAULT_MAX_LINES,
+} = {}) {
+  if (!path || !allowedRoot || !isInside(allowedRoot, path)) {
+    return { sanitizedTail: '', tailTruncated: false, tailError: 'LOG_PATH_OUTSIDE_RUNTIME_ROOT' }
+  }
+
+  let handle
+  try {
+    handle = await open(path, 'r')
+    const details = await handle.stat()
+    const bytesToRead = Math.min(details.size, maxBytes)
+    const buffer = Buffer.alloc(bytesToRead)
+    if (bytesToRead > 0) await handle.read(buffer, 0, bytesToRead, details.size - bytesToRead)
+    let text = buffer.toString('utf8')
+    let truncated = details.size > bytesToRead
+    if (truncated) {
+      const firstLineEnd = text.indexOf('\n')
+      if (firstLineEnd >= 0) text = text.slice(firstLineEnd + 1)
+    }
+    const lines = text.split(/\r?\n/)
+    if (lines.length > maxLines) {
+      text = lines.slice(-maxLines).join('\n')
+      truncated = true
+    }
+    return {
+      sanitizedTail: sanitizeDiagnosticText(text).trim(),
+      tailTruncated: truncated,
+      tailBytesRead: bytesToRead,
+    }
+  } catch (error) {
+    return {
+      sanitizedTail: '',
+      tailTruncated: false,
+      tailError: error?.code || 'LOG_READ_FAILED',
+    }
+  } finally {
+    await handle?.close()
+  }
+}
+
+export async function enrichRuntimeStartFailure(failure, dataRoot) {
+  if (!failure || typeof failure !== 'object') return failure
+  const runtimeRoot = join(dataRoot, 'runtime')
+  const logs = Array.isArray(failure.logs)
+    ? await Promise.all(failure.logs.map(async (entry) => ({
+        ...entry,
+        ...(entry?.exists && entry?.path
+          ? await readDiagnosticLogTail(entry.path, { allowedRoot: runtimeRoot })
+          : {}),
+      })))
+    : []
+  return { ...failure, logs }
+}

package/lib/index.js

@@ -9,6 +9,7 @@ import { createFoggySkillProvider } from './skill-provider.js'
 import { writeJsonAtomic } from './atomic-json.js'
 import { ensurePythonRuntime, probePythonRuntime } from './python-runtime.js'
 import { compatible, compatibleNode } from './version.js'
+import { enrichRuntimeStartFailure } from './diagnostics.js'
 
 const execFileAsync = promisify(execFile)
 const packageRoot = dirname(dirname(fileURLToPath(import.meta.url)))
@@ -332,6 +333,10 @@ export class FoggyIntegrationGateway extends TypertRemoteService {
   async diagnostics() {
     const roots = defaultRoots()
     const status = await this.status()
+    const lastRuntimeStartFailure = await enrichRuntimeStartFailure(
+      await readOptionalJson(join(roots.dataRoot, 'last-runtime-start-failure.json')),
+      roots.dataRoot,
+    )
     let doctor
     try {
       doctor = await runOnboarding(['doctor', '--no-fail'])
@@ -350,7 +355,7 @@ export class FoggyIntegrationGateway extends TypertRemoteService {
       components: status.components,
       onboarding: status.onboarding,
       profileMigration: status.profileMigration,
-      lastRuntimeStartFailure: await readOptionalJson(join(roots.dataRoot, 'last-runtime-start-failure.json')),
+      lastRuntimeStartFailure,
       doctor,
     }
     const directory = join(roots.dataRoot, 'diagnostics')

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@foggy-projects/deepseek-harness-plugin",
-  "version": "0.4.0-beta.11",
+  "version": "0.4.0-beta.13",
   "description": "Foggy Java data analysis engine integration for DeepSeek Harness",
   "type": "module",
   "main": "./lib/index.js",
@@ -57,7 +57,7 @@
     "@deepseek-ai/dsh-typert-protocol": "^0.1.2-rc.1"
   },
   "scripts": {
-    "check": "node --check lib/index.js && node --check lib/atomic-json.js && node --check lib/python-runtime.js && node --check lib/skill-provider.js && node --check lib/client.js && node --check lib/typert.js && node --check lib/remote.js",
+    "check": "node --check lib/index.js && node --check lib/atomic-json.js && node --check lib/diagnostics.js && node --check lib/python-runtime.js && node --check lib/skill-provider.js && node --check lib/client.js && node --check lib/typert.js && node --check lib/remote.js",
     "test": "node --test test/package.test.js && node test/run-onboarding-tests.js"
   }
 }

package/skills/foggy-deepseek-onboarding/assets/versions.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": "foggy-deepseek-onboarding-versions/v1",
-  "packageVersion": "0.4.0-beta.11",
+  "packageVersion": "0.4.0-beta.13",
   "validatedAt": "2026-09-04",
   "components": {
     "deepseekHarness": {

package/skills/foggy-deepseek-onboarding/scripts/onboarding.py

@@ -277,6 +277,46 @@ def command_result(command: list[str], timeout: int = 30, check: bool = False) -
     return payload
 
 
+def process_running(pid: int) -> bool:
+    """Check liveness without spawning a shell or waiting on the target process."""
+    if pid <= 0:
+        return False
+    if os.name == "nt":
+        import ctypes
+
+        synchronize = 0x00100000
+        wait_timeout = 0x00000102
+        kernel32 = ctypes.WinDLL("kernel32", use_last_error=True)
+        kernel32.OpenProcess.argtypes = [ctypes.c_uint32, ctypes.c_int, ctypes.c_uint32]
+        kernel32.OpenProcess.restype = ctypes.c_void_p
+        kernel32.WaitForSingleObject.argtypes = [ctypes.c_void_p, ctypes.c_uint32]
+        kernel32.WaitForSingleObject.restype = ctypes.c_uint32
+        kernel32.CloseHandle.argtypes = [ctypes.c_void_p]
+        handle = kernel32.OpenProcess(synchronize, False, pid)
+        if not handle:
+            return ctypes.get_last_error() == 5  # Access denied still proves the PID exists.
+        try:
+            return kernel32.WaitForSingleObject(handle, 0) == wait_timeout
+        finally:
+            kernel32.CloseHandle(handle)
+    proc_stat = Path("/proc") / str(pid) / "stat"
+    if proc_stat.is_file():
+        try:
+            fields = proc_stat.read_text(encoding="utf-8", errors="replace").rsplit(") ", 1)[1]
+            return bool(fields) and fields[0] != "Z"
+        except (OSError, IndexError):
+            pass
+    try:
+        os.kill(pid, 0)
+    except ProcessLookupError:
+        return False
+    except PermissionError:
+        return True
+    except OSError:
+        return False
+    return True
+
+
 def command_result_with_progress(
     command: list[str],
     timeout: int,
@@ -289,6 +329,8 @@ def command_result_with_progress(
     start_percent: int,
     end_percent: int,
     poll_interval: float = 1.0,
+    watched_pid: int | None = None,
+    watched_label: str = "Runtime",
 ) -> dict:
     started = time.monotonic()
     try:
@@ -318,6 +360,13 @@ def command_result_with_progress(
             break
         except subprocess.TimeoutExpired:
             elapsed = time.monotonic() - started
+            if watched_pid and not process_running(watched_pid):
+                process.kill()
+                process.communicate()
+                raise OnboardingError(
+                    f"{watched_label} process PID {watched_pid} exited before becoming ready "
+                    f"after {round(elapsed * 1000)} ms"
+                )
             readiness_fraction = min(elapsed / max(readiness_timeout, 1), 1.0)
             percent = round(start_percent + (end_percent - start_percent) * readiness_fraction)
             progress.update(
@@ -1463,6 +1512,7 @@ def runtime_start_command(args: argparse.Namespace) -> dict:
                 readiness_timeout=readiness_timeout,
                 start_percent=30,
                 end_percent=85,
+                watched_pid=int(prior["pid"]),
             )
             wait_payload = parse_json_output(wait_result, "wait-ready")
             if wait_payload.get("success") is not True:
@@ -1577,6 +1627,7 @@ def runtime_start_command(args: argparse.Namespace) -> dict:
             readiness_timeout=readiness_timeout,
             start_percent=30,
             end_percent=85,
+            watched_pid=pid,
         )
         wait_payload = parse_json_output(wait_result, "wait-ready")
         if wait_payload.get("success") is not True: