@foggy-projects/deepseek-harness-plugin 0.4.0-beta.13 → 0.4.0-beta.15

package/README.md

@@ -14,7 +14,7 @@ modify `PATH`, or register Python globally. Advanced users may explicitly set
 ## Local beta installation
 
 ```powershell
-dsh plugin --profile web add --workspace-root ./foggy-projects-deepseek-harness-plugin-0.4.0-beta.13.tgz
+dsh plugin --profile web add --workspace-root ./foggy-projects-deepseek-harness-plugin-0.4.0-beta.15.tgz
 ```
 
 Restart `dsh web`, use the browser it opens (or the complete printed URL,
@@ -30,9 +30,13 @@ dsh plugin --profile web add --workspace-root @foggy-projects/deepseek-harness-p
 For development, `FOGGY_ASSET_CACHE_DIRS` can contain platform-delimited verified
 asset-cache directories. It is not required for a normal install.
 
-Database credentials remain outside the ordinary DSH settings document. The
-bundled onboarding Skill drives datasource discovery, semantic drafting,
-checkpointed publication, and bounded read-only query verification.
+The bundled onboarding Skill is intentionally development-first. Users may
+provide a local datasource password in the conversation, a user-managed
+connection file, an Agent environment variable, or a compatible Runtime
+Console. Direct passwords are submitted to the already-running Runtime without
+being copied into onboarding state or evidence. The Skill then drives schema
+discovery, semantic drafting, local Bundle registration, and bounded query
+verification without restarting Runtime.
 
 ## Native Skill and workspace contract
 
@@ -42,14 +46,12 @@ are available in every DSH workspace without copying or symlinking `.agents`.
 The current session `cwd` remains the workspace boundary for semantic drafts and
 evidence.
 
-Opaque CLI profiles default to the private persistent
-`<dataRoot>/cli-profiles` directory. Composite onboarding commands are
+Opaque CLI profiles remain available for users who prefer them and default to
+the private persistent `<dataRoot>/cli-profiles` directory, but they are not a
+prerequisite for ordinary development. Composite onboarding commands are
 idempotent: unchanged completed phases are resumed rather than re-adding a
-datasource or re-registering a published bundle. Settings detects legacy
-temporary profiles and offers an explicit, validated migration into the
-persistent store. A completed profile can also be bound non-destructively to an
-additional DSH workspace when its reviewed connection contract and published
-semantic digest are unchanged.
+datasource or re-registering a local Bundle. Settings detects legacy temporary
+profiles and offers an explicit, validated migration into the persistent store.
 
 Private Python, CLI, Launcher, the analysis Skill, install state, and Runtime
 state live in the user-level Foggy component directories. The managed CLI is intentionally isolated
@@ -67,9 +69,17 @@ the managed Runtime directory. Runtime start monitors the Launcher PID during
 process is verified with `wait-ready` and `capabilities` instead of being treated as a
 failed second start.
 
-This beta remains a local dev/test integration. The bundled Runtime reports
-`securityMode=none-dev-test-only` and must not be exposed to a network or used as
-a production service.
+The same settings tab owns a persistent local Runtime port. New installations default
+to `18166`; users can choose another port while Runtime is stopped. Startup checks the
+same wildcard binding used by the Java server, so a conflicting application or Windows
+port proxy produces an immediate, high-visibility error instead of a readiness timeout.
+The CLI and Skills resolve the resulting stable Runtime URL from managed state.
+
+This beta remains a local dev/test integration. It does not automatically extend
+local credentials or approvals into a formal environment. Production model
+publication should use a separate manual or dedicated deployment workflow with
+an explicit target, model Git commit/tag, credentials, verification, and
+rollback plan.
 
 See [`docs/PUBLIC-BETA-READINESS.md`](./docs/PUBLIC-BETA-READINESS.md) for the
 tested public Beta scope, release gates, and stable-release blockers.

package/docs/PUBLIC-BETA-READINESS.md

@@ -1,10 +1,10 @@
-# Public beta readiness: 0.4.0-beta.13
+# Public beta readiness: 0.4.0-beta.15
 
 Assessment date: 2026-09-04
 
 ## Verdict
 
-`0.4.0-beta.13` is suitable for a scoped public beta on Windows 10/11 x64 and
+`0.4.0-beta.15` is suitable for a scoped public beta on Windows 10/11 x64 and
 Linux/WSL2 x64. It is not a general-availability release.
 
 The plugin package stays small and downloads large components only during
@@ -14,7 +14,7 @@ system PATH, registry, or a user's existing Python installation.
 
 ## Verified behavior
 
-- The npm tarball is about 67 KB compressed and contains no Python or Java
+- The npm tarball is about 78 KB compressed and contains no Python or Java
   runtime binary.
 - Managed CPython assets are pinned by URL, byte size, and SHA256 for Windows,
   Linux, and macOS on x64 and arm64.
@@ -26,8 +26,22 @@ system PATH, registry, or a user's existing Python installation.
 - WSL2 reported the existing managed Python, CLI, Launcher, and analysis Skill
   as ready; an isolated Windows profile correctly reported its fresh component
   state and rejected the host's Java 12 as below the Java 17 prerequisite.
+- Onboarding is development-first: a direct password or Agent environment
+  variable is submitted to the public datasource API of an already-running
+  Runtime. The password is excluded from onboarding state and evidence, and
+  datasource setup does not trigger Runtime restart. Opaque profiles remain an
+  optional advanced path.
+- A real Launcher 0.1.18 smoke on Java 17 accepted a synthetic inline-password
+  datasource through the public Runtime API while retaining the same Java PID.
+  The isolated registry confirmed the documented local-development plaintext
+  persistence boundary; the test datasource was then removed and the temporary
+  Runtime stopped.
+- A full isolated `onboard-datasource-run` then created, tested, bound, and
+  inspected a SQLite datasource containing one table. Runtime retained the same
+  PID, while the persisted onboarding state and command evidence contained no
+  copy of the synthetic password.
 - The UI reported Python 3.12.13 as `Foggy private`, and CLI 0.1.23, Launcher
-  0.1.18, analysis Skill 0.1.17, and onboarding Skill 0.4.0-beta.13 as installed.
+  0.1.18, analysis Skill 0.1.17, and onboarding Skill 0.4.0-beta.15 as installed.
 - Runtime startup now reports the current phase, elapsed/timeout seconds, and a
   bounded progress value. A real Windows launch with Temurin 17 reached readiness
   and passed capabilities in 18.9 seconds. A controlled post-launch Java exit was
@@ -37,12 +51,20 @@ system PATH, registry, or a user's existing Python installation.
   error, including the generated local JSON path. Exported failures include
   bounded sanitized Runtime log tails and reject log paths outside the managed
   Runtime directory.
+- Runtime port configuration is persisted below the private Foggy data root and
+  defaults to `18166`. The settings UI validates `1024–65535`, prevents changes
+  while Runtime is active, and shows port conflicts as an assertive, red bordered
+  alert. Preflight now checks `0.0.0.0` with exclusive Windows binding semantics,
+  matching the Java server closely enough to detect address-specific `portproxy`
+  conflicts that a loopback-only probe missed.
 - Interrupted downloads resume with HTTP Range when the server supports it;
   downloaded artifacts are not trusted until the complete SHA256 matches.
 - Windows progress writes tolerate transient sharing violations without losing
   the previous valid progress document or leaving temporary files behind.
-- Automated regression passed on Windows and Linux/WSL2: 17 Node tests and 10
-  Python tests on each platform, plus shell and PowerShell syntax checks.
+- Current automated regression passes 20 Node tests and 20 Python tests. The
+  new datasource tests cover secret-free persisted state, direct Runtime API
+  submission, CLI bypass for inline development credentials, and output
+  redaction.
 
 ## Beta boundaries
 
@@ -57,6 +79,10 @@ system PATH, registry, or a user's existing Python installation.
 - Runtime production authentication is outside this beta's default local
   onboarding mode. The UI and doctor continue to report `productionReady=false`
   for the development-only no-auth mode.
+- Direct development passwords are stored by the current Runtime in its private
+  local datasource registry. Production publication is a separate manual or
+  future dedicated deployment workflow and should use the target environment's
+  credential controls.
 
 ## Release gate after publication
 

package/docs/WINDOWS-BETA-ACCEPTANCE.md

@@ -1,7 +1,7 @@
 # Native Windows Beta acceptance
 
 This runbook validates DeepSeek Harness `0.1.2-rc.1` with Foggy plugin
-`0.4.0-beta.13` on a clean 64-bit Windows 10 or Windows 11 machine. Use a local
+`0.4.0-beta.15` on a clean 64-bit Windows 10 or Windows 11 machine. Use a local
 directory that is not synchronized by OneDrive.
 
 ## Prerequisites
@@ -43,13 +43,18 @@ temporary local access material and do not paste it into chat or diagnostics.
 Configure an LLM provider, select the `C:\FoggyAcceptance` workspace, then open
 **Settings → Plugins → Foggy Data Analysis** and choose **Initialize Foggy**.
 
+Before starting Runtime, confirm the configured port in **Runtime connection
+settings**. A fresh profile defaults to `18166`. To use another port, enter an
+integer from `1024` through `65535` and choose **Save port**. The value remains
+stable across DSH restarts and cannot be changed while Runtime is running.
+
 Expected component state:
 
 - Python 3.12.13, source `Foggy private`;
 - CLI 0.1.23;
 - Launcher 0.1.18;
 - analysis Skill 0.1.17;
-- onboarding Skill 0.4.0-beta.13;
+- onboarding Skill 0.4.0-beta.15;
 - Java 17+ available;
 - native DSH Skill registration available.
 
@@ -61,23 +66,32 @@ readiness. On failure, export diagnostics before retrying; the report includes
 the startup phase, PID state, evidence directory, Runtime log locations, and
 bounded sanitized log tails.
 
+If the configured port is occupied, startup must fail during preflight instead
+of waiting for the readiness deadline. The settings page displays a red bordered
+alert naming the port conflict and tells the user to save another port or release
+the conflicting application or Windows port proxy. Saving a free port and
+starting again must clear the applicable conflict state.
+
 ## Database and semantic-layer acceptance
 
-Keep database credentials out of this public repository. Create a private CLI
-profile outside the DSH conversation, pass only its opaque profile ID and
-revision to the onboarding workflow, and use a test-only database account with
-read-only permissions.
+Use a development or test database. For this local acceptance run, connection
+details and a password may be supplied directly in the prompt or in a local
+connection JSON file. The onboarding wrapper must configure the datasource
+online without stopping or restarting an already-running Runtime. It must not
+copy the password into onboarding state, evidence, TM/QM files, or Git.
 
 Use a natural prompt such as:
 
 ```text
-请帮我用 Foggy 分析这个测试数据库。我已经按验收手册创建了私有连接
-profile。请先确认连接和表结构，再围绕订单数据创建一个简单的语义层，
-包含订单数量、状态和开单时间，最后执行一个不超过 20 行的只读查询。
-不要修改数据库，也不要在对话或验收文件中输出密码。
+请帮我用 Foggy 分析这个测试数据库：地址、数据库名、账号和密码分别是
+<连接信息>。直接创建开发数据源并绑定一个合适的 namespace，不要重启
+Runtime。读取表结构后，在当前工作目录创建订单语义模型，包含订单数量、
+状态和开单时间，调试到模型通过，并执行一个不超过 20 行的只读查询。
 ```
 
-Pass only when Runtime readiness and capabilities succeed, datasource metadata
-can be discovered, TM/QM models validate and publish, the bounded read-only
-query succeeds, diagnostics contain no credentials, and stopping Runtime frees
-port 18066.
+Pass only when Runtime readiness and capabilities succeed, datasource setup
+does not restart Runtime, metadata can be discovered, TM/QM models validate and
+become effective in the local Runtime, the bounded read-only query succeeds,
+diagnostics contain no credentials, and stopping Runtime frees the configured
+port (default `18166`). Recommend Git management for the completed model files;
+do not treat this acceptance run as production publication.

package/experience/linux/prepare.sh

@@ -3,7 +3,7 @@ set -euo pipefail
 
 DSH_VERSION="0.1.2-rc.1"
 PNPM_VERSION="11.7.0"
-PLUGIN_VERSION="0.4.0-beta.13"
+PLUGIN_VERSION="0.4.0-beta.15"
 PLUGIN_REF="v${PLUGIN_VERSION}"
 PLUGIN_REPOSITORY="https://github.com/foggy-projects/foggy-deepseek-harness-plugin.git"
 

package/lib/client.js

@@ -8,25 +8,47 @@ window.__ModuleLoader__.load({
 
     const NS = 'settings.foggy'
     const passthroughSchema = { parse: (value) => value }
+    const runtimeSettingsInputSchema = {
+      parse: (value) => {
+        const port = value?.port
+        if (!Number.isInteger(port) || port < 1024 || port > 65535 || Object.keys(value || {}).some((key) => key !== 'port')) {
+          throw new Error('Runtime port must be an integer between 1024 and 65535')
+        }
+        return { port }
+      },
+    }
+    const descriptor = (method, parameters = []) => ({
+      id: `@foggy-projects/deepseek-harness-plugin#foggyIntegration/${method}`,
+      service: 'foggyIntegration',
+      namespace: 'foggyIntegration',
+      method,
+      invocation: { kind: 'direct' },
+      parameters,
+      result: {
+        mode: 'strict',
+        typeSymbol: '@foggy-projects/deepseek-harness-plugin#FoggyIntegrationResult',
+        schema: passthroughSchema,
+      },
+      sourceLocation: { file: 'lib/index.js', line: 1, column: 1 },
+    })
     const TYPERT_REMOTE = {
       package: '@foggy-projects/deepseek-harness-plugin',
       descriptors: [
+        ...[
         'status', 'plan', 'initialize', 'repair', 'repairPython', 'repairCli', 'repairLauncher', 'repairAnalysisSkill',
         'migrateProfiles', 'diagnostics', 'runtimeStart', 'runtimeStop',
-      ].map((method) => ({
-        id: `@foggy-projects/deepseek-harness-plugin#foggyIntegration/${method}`,
-        service: 'foggyIntegration',
-        namespace: 'foggyIntegration',
-        method,
-        invocation: { kind: 'direct' },
-        parameters: [],
-        result: {
-          mode: 'strict',
-          typeSymbol: '@foggy-projects/deepseek-harness-plugin#FoggyIntegrationResult',
-          schema: passthroughSchema,
-        },
-        sourceLocation: { file: 'lib/index.js', line: 1, column: 1 },
-      })),
+        ].map((method) => descriptor(method)),
+        descriptor('saveRuntimeSettings', [{
+          name: 'input',
+          wire: 'input',
+          source: 'json',
+          codec: {
+            mode: 'strict',
+            typeSymbol: '@foggy-projects/deepseek-harness-plugin#FoggyRuntimeSettingsInput',
+            schema: runtimeSettingsInputSchema,
+          },
+        }]),
+      ],
     }
 
     const zh = {
@@ -108,6 +130,21 @@ window.__ModuleLoader__.load({
       stepSemanticPublished: '发布',
       stepSemanticVerified: '首次查询',
       runtimeUrl: 'Runtime 地址',
+      runtimeSettingsTitle: 'Runtime 连接设置',
+      runtimePort: 'Runtime 端口',
+      runtimePortHint: '端口会持久保存，CLI 与 Skill 将使用同一个 Runtime 地址。',
+      configuredRuntimeUrl: '下次启动地址',
+      saveRuntimePort: '保存端口',
+      runtimePortSaved: 'Runtime 端口已保存',
+      stopToChangePort: 'Runtime 运行时不能修改端口，请先停止 Runtime。',
+      errorTitle: 'Foggy 操作失败',
+      portUnavailableTitle: 'Runtime 端口被占用',
+      portUnavailableMessage: '已被其他程序或 Windows 端口代理占用，Runtime 无法启动。',
+      portUnavailableHelp: '请更换端口后保存并重新启动；也可以先释放占用该端口的程序或 Windows 端口代理。',
+      portInvalidTitle: '端口配置无效',
+      portInvalidMessage: '当前值无法保存为 Runtime 端口。',
+      portInvalidHelp: '请输入 1024 到 65535 之间的整数端口。',
+      settingsInvalidTitle: 'Runtime 设置文件异常',
       nextTitle: '后续配置',
       nextCopy: 'Skills 已通过 DeepSeek Harness 原生注册表提供给所有工作区；每个会话直接使用自己的工作目录。Runtime 启动成功后，将继续进入数据库连接与语义层向导。',
       beta: 'Beta',
@@ -192,6 +229,21 @@ window.__ModuleLoader__.load({
       stepSemanticPublished: 'Publish',
       stepSemanticVerified: 'First query',
       runtimeUrl: 'Runtime URL',
+      runtimeSettingsTitle: 'Runtime connection settings',
+      runtimePort: 'Runtime port',
+      runtimePortHint: 'The port is persisted so the CLI and Skills use one stable Runtime URL.',
+      configuredRuntimeUrl: 'Next startup URL',
+      saveRuntimePort: 'Save port',
+      runtimePortSaved: 'Runtime port saved',
+      stopToChangePort: 'Stop Runtime before changing its port.',
+      errorTitle: 'Foggy operation failed',
+      portUnavailableTitle: 'Runtime port is already in use',
+      portUnavailableMessage: 'is already used by another application or Windows port proxy, so Runtime cannot start.',
+      portUnavailableHelp: 'Save a different port and start again, or release the application or Windows port proxy using this port.',
+      portInvalidTitle: 'Invalid port setting',
+      portInvalidMessage: 'The current value cannot be saved as the Runtime port.',
+      portInvalidHelp: 'Enter an integer port between 1024 and 65535.',
+      settingsInvalidTitle: 'Runtime settings file is invalid',
       nextTitle: 'Next configuration',
       nextCopy: 'Skills are provided to every workspace through the native DeepSeek Harness registry, and each session uses its own working directory. After Runtime starts, the database connection and semantic-layer wizard comes next.',
       beta: 'Beta',
@@ -206,8 +258,10 @@ window.__ModuleLoader__.load({
       .foggy-actions{display:flex;gap:8px;flex-wrap:wrap}.foggy-button{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-1);color:var(--dsw-alias-label-primary);font:inherit;border-radius:8px;padding:7px 12px;cursor:pointer}.foggy-button:hover{background:var(--dsw-alias-interactive-bg-hover)}.foggy-button:disabled{opacity:.55;cursor:not-allowed}.foggy-button-primary{border-color:var(--dsw-alias-state-business-primary);background:var(--dsw-alias-state-business-primary);color:white}
       .foggy-grid{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:10px}.foggy-card{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-3);border-radius:10px;padding:13px 14px}.foggy-card-head{display:flex;justify-content:space-between;gap:8px}.foggy-card strong{font-size:13px}.foggy-badge{font-size:11px;color:var(--dsw-alias-label-secondary)}.foggy-card code{display:block;margin-top:8px;color:var(--dsw-alias-label-tertiary);font-size:11px;overflow-wrap:anywhere}
       .foggy-progress{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-3);border-radius:10px;padding:13px 14px}.foggy-progress-head{display:flex;align-items:center;justify-content:space-between;gap:12px;font-size:13px}.foggy-progress-head strong{font-weight:600}.foggy-progress-percent{color:var(--dsw-alias-label-secondary);font-variant-numeric:tabular-nums}.foggy-progress-track{height:8px;margin-top:10px;border-radius:999px;background:var(--dsw-alias-bg-layer-1);overflow:hidden}.foggy-progress-fill{height:100%;border-radius:inherit;background:var(--dsw-alias-state-business-primary);transition:width .25s ease}.foggy-progress-meta{display:flex;justify-content:space-between;gap:12px;margin-top:8px;color:var(--dsw-alias-label-tertiary);font-size:11px;line-height:16px}.foggy-progress-file{min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+      .foggy-runtime-settings{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-3);border-radius:10px;padding:14px}.foggy-runtime-settings h4{margin:0;font-size:13px}.foggy-runtime-settings-row{display:grid;grid-template-columns:minmax(150px,220px) minmax(0,1fr) auto;align-items:end;gap:10px;margin-top:10px}.foggy-field{display:flex;flex-direction:column;gap:6px}.foggy-field label{font-size:12px;font-weight:600}.foggy-input{width:100%;box-sizing:border-box;border:1px solid var(--dsw-alias-border-l2);border-radius:8px;background:var(--dsw-alias-bg-layer-1);color:var(--dsw-alias-label-primary);font:inherit;font-variant-numeric:tabular-nums;padding:8px 10px;outline:none}.foggy-input:focus{border-color:var(--dsw-alias-state-business-primary);box-shadow:0 0 0 3px color-mix(in srgb,var(--dsw-alias-state-business-primary) 18%,transparent)}.foggy-input[aria-invalid=true]{border-color:var(--dsw-alias-state-error-primary);box-shadow:0 0 0 3px color-mix(in srgb,var(--dsw-alias-state-error-primary) 14%,transparent)}.foggy-setting-meta{display:flex;flex-direction:column;gap:4px;min-width:0;color:var(--dsw-alias-label-tertiary);font-size:11px}.foggy-setting-meta code{overflow-wrap:anywhere;color:var(--dsw-alias-label-secondary)}
+      .foggy-error-panel{border:2px solid var(--dsw-alias-state-error-primary);background:color-mix(in srgb,var(--dsw-alias-state-error-primary) 10%,var(--dsw-alias-bg-layer-3));border-radius:10px;padding:13px 14px;box-shadow:0 6px 18px color-mix(in srgb,var(--dsw-alias-state-error-primary) 13%,transparent)}.foggy-error-panel-head{display:flex;align-items:center;gap:8px;color:var(--dsw-alias-state-error-primary);font-size:14px;font-weight:700}.foggy-error-icon{display:grid;place-items:center;width:22px;height:22px;border-radius:50%;background:var(--dsw-alias-state-error-primary);color:white;font-size:14px}.foggy-error-panel p{margin:7px 0 0;color:var(--dsw-alias-label-primary);font-size:13px;line-height:20px;overflow-wrap:anywhere}.foggy-error-help{color:var(--dsw-alias-state-error-primary)!important;font-weight:600}
       .foggy-message{margin:0;font-size:13px;line-height:20px;color:var(--dsw-alias-label-secondary)}.foggy-message[data-error=true]{color:var(--dsw-alias-state-error-primary)}.foggy-paths,.foggy-next,.foggy-section{border-top:1px solid var(--dsw-alias-border-l2);padding-top:14px}.foggy-paths h4,.foggy-next h4,.foggy-section h4{margin:0 0 8px;font-size:13px}.foggy-paths dl{display:grid;grid-template-columns:100px minmax(0,1fr);gap:6px 10px;margin:0}.foggy-paths dt{color:var(--dsw-alias-label-tertiary);font-size:12px}.foggy-paths dd{margin:0;min-width:0;overflow-wrap:anywhere;font-family:var(--ds-font-family-code);font-size:11px}.foggy-next p,.foggy-section p{margin:0;color:var(--dsw-alias-label-secondary);font-size:13px;line-height:20px}.foggy-section-actions{display:flex;gap:8px;flex-wrap:wrap;margin-top:10px}.foggy-onboarding-head{display:flex;justify-content:space-between;gap:12px;align-items:start}.foggy-onboarding-head code{font-size:11px;color:var(--dsw-alias-label-tertiary);overflow-wrap:anywhere}.foggy-step-list{display:grid;grid-template-columns:repeat(4,minmax(0,1fr));gap:7px;margin-top:10px}.foggy-step{border:1px solid var(--dsw-alias-border-l2);border-radius:8px;padding:8px;font-size:11px;color:var(--dsw-alias-label-tertiary)}.foggy-step[data-state=completed]{border-color:color-mix(in srgb,var(--dsw-alias-state-success-primary) 45%,var(--dsw-alias-border-l2));color:var(--dsw-alias-state-success-primary)}.foggy-step[data-state=failed],.foggy-step[data-state=invalid]{border-color:var(--dsw-alias-state-error-primary);color:var(--dsw-alias-state-error-primary)}.foggy-warning{border:1px solid color-mix(in srgb,var(--dsw-alias-state-warning-primary) 55%,var(--dsw-alias-border-l2));background:color-mix(in srgb,var(--dsw-alias-state-warning-primary) 8%,transparent);border-radius:10px;padding:12px}
-      @media (width<=680px){.foggy-grid{grid-template-columns:minmax(0,1fr)}}
+      @media (width<=680px){.foggy-grid{grid-template-columns:minmax(0,1fr)}.foggy-runtime-settings-row{grid-template-columns:minmax(0,1fr)}.foggy-runtime-settings-row .foggy-button{width:100%}}
     `
 
     if (typeof document !== 'undefined' && !document.querySelector('style[data-foggy-settings]')) {
@@ -347,18 +401,44 @@ window.__ModuleLoader__.load({
       ] })
     }
 
+    function errorPanel(title, message, help) {
+      if (!message) return null
+      return jsxs('div', {
+        className: 'foggy-error-panel',
+        role: 'alert',
+        'aria-live': 'assertive',
+        children: [
+          jsxs('div', { className: 'foggy-error-panel-head', children: [
+            jsx('span', { className: 'foggy-error-icon', 'aria-hidden': true, children: '!' }),
+            jsx('strong', { children: title }),
+          ] }),
+          jsx('p', { children: message }),
+          help ? jsx('p', { className: 'foggy-error-help', children: help }) : null,
+        ],
+      })
+    }
+
     function FoggySettingsTab({ api, t }) {
-      const [view, setView] = useState({ phase: 'loading', status: null, message: '', error: false })
+      const [view, setView] = useState({ phase: 'loading', status: null, message: '', error: false, errorCode: null })
+      const [portDraft, setPortDraft] = useState('')
+      const [portDirty, setPortDirty] = useState(false)
 
       const refresh = useCallback(async () => {
         setView((current) => ({ ...current, phase: current.status ? 'ready' : 'loading', error: false }))
         try {
           const status = unwrap(await api.status(), 'status')
-          setView((current) => ({ ...current, phase: 'ready', status, error: false }))
+          setView((current) => ({
+            ...current,
+            phase: 'ready',
+            status,
+            error: false,
+            message: current.message === t('accepted') && status.operation?.state !== 'running' ? '' : current.message,
+          }))
+          if (!portDirty) setPortDraft(String(status.runtimeSettings?.port ?? 18166))
         } catch (error) {
           setView((current) => ({ ...current, phase: current.status ? 'ready' : 'error', message: String(error.message || error), error: true }))
         }
-      }, [api])
+      }, [api, portDirty, t])
 
       useEffect(() => { refresh() }, [refresh])
       useEffect(() => {
@@ -368,18 +448,40 @@ window.__ModuleLoader__.load({
       }, [refresh, view.status?.operation?.state])
 
       const run = async (method) => {
-        setView((current) => ({ ...current, message: t('working'), error: false }))
+        setView((current) => ({ ...current, message: t('working'), error: false, errorCode: null }))
         try {
           const result = unwrap(await api[method](), method)
           const message = result.accepted
             ? t('accepted')
             : result.path
               ? `${t('diagnosticsSaved')}: ${result.path}`
-              : ''
-          setView((current) => ({ ...current, message, error: result.success === false }))
+              : result.error?.message || ''
+          setView((current) => ({ ...current, message, error: result.success === false, errorCode: result.error?.code || null }))
           await refresh()
         } catch (error) {
-          setView((current) => ({ ...current, message: `${t('actionFailed')}: ${String(error.message || error)}`, error: true }))
+          setView((current) => ({ ...current, message: `${t('actionFailed')}: ${String(error.message || error)}`, error: true, errorCode: 'REMOTE_ERROR' }))
+        }
+      }
+
+      const saveRuntimePort = async () => {
+        const port = Number(portDraft)
+        if (!Number.isInteger(port) || port < 1024 || port > 65535) {
+          setView((current) => ({ ...current, message: t('portInvalidMessage'), error: true, errorCode: 'RUNTIME_PORT_INVALID' }))
+          return
+        }
+        setView((current) => ({ ...current, message: t('working'), error: false, errorCode: null }))
+        try {
+          const result = unwrap(await api.saveRuntimeSettings({ port }), 'saveRuntimeSettings')
+          if (result.success === false) {
+            setView((current) => ({ ...current, message: result.error?.message || t('actionFailed'), error: true, errorCode: result.error?.code || null }))
+            return
+          }
+          setPortDirty(false)
+          setPortDraft(String(result.settings.port))
+          setView((current) => ({ ...current, message: `${t('runtimePortSaved')}: ${result.settings.runtimeUrl}`, error: false, errorCode: null }))
+          await refresh()
+        } catch (error) {
+          setView((current) => ({ ...current, message: `${t('actionFailed')}: ${String(error.message || error)}`, error: true, errorCode: 'REMOTE_ERROR' }))
         }
       }
 
@@ -391,9 +493,38 @@ window.__ModuleLoader__.load({
 
       const status = view.status
       const busy = status.operation?.state === 'running'
+      const portNumber = Number(portDraft)
+      const portValid = Number.isInteger(portNumber) && portNumber >= 1024 && portNumber <= 65535
       const operationError = status.operation?.state === 'failed'
         ? status.operation.error || status.operation.result?.error?.message || t('actionFailed')
         : ''
+      const operationErrorCode = status.operation?.state === 'failed' ? status.operation.result?.error?.code || null : null
+      const settingsError = status.runtimeSettings?.valid === false
+        ? status.runtimeSettings.error || t('settingsInvalidTitle')
+        : ''
+      const portConflict = status.runtimeSettings?.conflictApplies ? status.runtimeSettings.lastConflict : null
+      const validationError = portDirty && !portValid ? t('portInvalidMessage') : ''
+      const rawAlertMessage = validationError || (view.error ? view.message : '') || operationError || settingsError || portConflict?.message || ''
+      const alertCode = validationError
+        ? 'RUNTIME_PORT_INVALID'
+        : view.error
+          ? view.errorCode
+          : operationErrorCode || (settingsError ? 'RUNTIME_SETTINGS_INVALID' : portConflict ? 'RUNTIME_PORT_UNAVAILABLE' : null)
+      const alertTitle = alertCode === 'RUNTIME_PORT_UNAVAILABLE'
+        ? t('portUnavailableTitle')
+        : alertCode === 'RUNTIME_PORT_INVALID'
+          ? t('portInvalidTitle')
+          : alertCode === 'RUNTIME_SETTINGS_INVALID'
+            ? t('settingsInvalidTitle')
+            : t('errorTitle')
+      const alertMessage = alertCode === 'RUNTIME_PORT_UNAVAILABLE'
+        ? `${t('runtimePort')} ${portConflict?.port ?? status.runtimeSettings?.port ?? portNumber} ${t('portUnavailableMessage')}`
+        : rawAlertMessage
+      const alertHelp = alertCode === 'RUNTIME_PORT_UNAVAILABLE'
+        ? t('portUnavailableHelp')
+        : alertCode === 'RUNTIME_PORT_INVALID'
+          ? t('portInvalidHelp')
+          : ''
       const progress = busy ? progressPanel(status.operation?.progress, t) : null
       const stateLabels = { 'not-installed': 'notInstalled', degraded: 'degraded', ready: 'ready', running: 'running' }
       return jsxs('section', { className: 'foggy-settings', children: [
@@ -412,10 +543,46 @@ window.__ModuleLoader__.load({
             status.running ? jsx('button', { className: 'foggy-button', type: 'button', disabled: busy, onClick: () => run('runtimeStop'), children: t('stop') }) : null,
           ] }),
         ] }),
+        errorPanel(alertTitle, alertMessage, alertHelp),
         progress,
         busy ? jsx('p', { className: 'foggy-message', children: t('working') }) : null,
-        operationError ? jsx('p', { className: 'foggy-message', 'data-error': 'true', children: operationError }) : null,
-        !busy && view.message ? jsx('p', { className: 'foggy-message', 'data-error': view.error ? 'true' : undefined, children: view.message }) : null,
+        !busy && view.message && !view.error && !operationError ? jsx('p', { className: 'foggy-message', children: view.message }) : null,
+        jsxs('div', { className: 'foggy-runtime-settings', children: [
+          jsx('h4', { children: t('runtimeSettingsTitle') }),
+          jsxs('div', { className: 'foggy-runtime-settings-row', children: [
+            jsxs('div', { className: 'foggy-field', children: [
+              jsx('label', { htmlFor: 'foggy-runtime-port', children: t('runtimePort') }),
+              jsx('input', {
+                id: 'foggy-runtime-port',
+                className: 'foggy-input',
+                type: 'number',
+                min: 1024,
+                max: 65535,
+                step: 1,
+                value: portDraft,
+                disabled: busy || status.running,
+                'aria-invalid': portDirty && !portValid ? 'true' : undefined,
+                onChange: (event) => {
+                  setPortDraft(event.target.value)
+                  setPortDirty(true)
+                  setView((current) => ({ ...current, message: '', error: false, errorCode: null }))
+                },
+              }),
+            ] }),
+            jsxs('div', { className: 'foggy-setting-meta', children: [
+              jsx('span', { children: t('runtimePortHint') }),
+              jsx('code', { children: `${t('configuredRuntimeUrl')}: http://127.0.0.1:${portValid ? portNumber : '—'}` }),
+              status.running ? jsx('span', { children: t('stopToChangePort') }) : null,
+            ] }),
+            jsx('button', {
+              className: 'foggy-button foggy-button-primary',
+              type: 'button',
+              disabled: busy || status.running || !portDirty || !portValid,
+              onClick: saveRuntimePort,
+              children: t('saveRuntimePort'),
+            }),
+          ] }),
+        ] }),
         jsxs('div', { className: 'foggy-grid', children: [
           componentCard(t('python'), status.components.python, 'tool', t),
           componentCard(t('java'), status.components.java, 'tool', t),