@foggy-projects/deepseek-harness-plugin 0.4.0-beta.6 → 0.4.0-beta.7

package/README.md

@@ -8,7 +8,7 @@ only when the user selects **Initialize Foggy**.
 ## Local beta installation
 
 ```powershell
-dsh plugin --profile web add --workspace-root ./foggy-projects-deepseek-harness-plugin-0.4.0-beta.6.tgz
+dsh plugin --profile web add --workspace-root ./foggy-projects-deepseek-harness-plugin-0.4.0-beta.7.tgz
 ```
 
 Restart `dsh web`, open Settings → Plugins → Foggy Data Analysis, and initialize
@@ -38,7 +38,11 @@ evidence.
 Opaque CLI profiles default to the private persistent
 `<dataRoot>/cli-profiles` directory. Composite onboarding commands are
 idempotent: unchanged completed phases are resumed rather than re-adding a
-datasource or re-registering a published bundle.
+datasource or re-registering a published bundle. Settings detects legacy
+temporary profiles and offers an explicit, validated migration into the
+persistent store. A completed profile can also be bound non-destructively to an
+additional DSH workspace when its reviewed connection contract and published
+semantic digest are unchanged.
 
 CLI, Launcher, the analysis Skill, install state, and Runtime state live in the
 user-level Foggy component directories. The managed CLI is intentionally isolated
@@ -47,6 +51,19 @@ analysis Skill, backs up modified or outdated managed content, restores it, and
 invalidates DSH's Skill catalog. The onboarding Skill is bundled with the plugin
 and is restored by reinstalling or upgrading the plugin package.
 
+The Foggy settings tab shows the persisted database/semantic onboarding stages,
+offers pinned checks and repair for CLI, Launcher, and the managed analysis
+Skill, and exports a private redacted diagnostics report. Runtime start is
+idempotent: an already-recorded process is verified with `wait-ready` and
+`capabilities` instead of being treated as a failed second start.
+
+This beta remains a local dev/test integration. The bundled Runtime reports
+`securityMode=none-dev-test-only` and must not be exposed to a network or used as
+a production service.
+
+See [`docs/PUBLIC-BETA-READINESS.md`](./docs/PUBLIC-BETA-READINESS.md) for the
+tested public Beta scope, release gates, and stable-release blockers.
+
 ## Linux and WSL2 experience
 
 Ubuntu and WSL2 users can use the checked-in preflighted installer under

package/lib/client.js

@@ -10,7 +10,10 @@ window.__ModuleLoader__.load({
     const passthroughSchema = { parse: (value) => value }
     const TYPERT_REMOTE = {
       package: '@foggy-projects/deepseek-harness-plugin',
-      descriptors: ['status', 'plan', 'initialize', 'repair', 'runtimeStart', 'runtimeStop'].map((method) => ({
+      descriptors: [
+        'status', 'plan', 'initialize', 'repair', 'repairCli', 'repairLauncher', 'repairAnalysisSkill',
+        'migrateProfiles', 'diagnostics', 'runtimeStart', 'runtimeStop',
+      ].map((method) => ({
         id: `@foggy-projects/deepseek-harness-plugin#foggyIntegration/${method}`,
         service: 'foggyIntegration',
         namespace: 'foggyIntegration',
@@ -51,6 +54,12 @@ window.__ModuleLoader__.load({
       unavailable: '不可用',
       initialize: '初始化 Foggy',
       repair: '重新下载 / 修复',
+      repairTitle: '分组件检查与修复',
+      repairCli: '检查 / 修复 CLI',
+      repairLauncher: '检查 / 修复 Launcher',
+      repairAnalysisSkill: '检查 / 修复分析 Skill',
+      diagnostics: '导出诊断报告',
+      diagnosticsSaved: '诊断报告已保存',
       start: '启动 Runtime',
       stop: '停止 Runtime',
       working: '操作进行中…',
@@ -69,6 +78,22 @@ window.__ModuleLoader__.load({
       installRoot: '组件目录',
       dataRoot: '数据目录',
       profileStore: 'CLI Profile',
+      profileMigrationTitle: '旧 Profile 迁移',
+      profileMigrationPending: '检测到旧版临时 Profile。迁移只转移连接元数据和密码环境变量引用，不复制密码值。',
+      profileMigrationConflict: '旧 Profile 存在冲突或格式问题，请先导出诊断报告。',
+      migrateProfiles: '迁移到持久目录',
+      onboardingProgress: '数据库与语义层进度',
+      noOnboarding: '尚无数据库引导记录；请在对话中调用 Foggy onboarding Skill。',
+      projectRoot: '工作区',
+      resumeInChat: '未完成步骤应回到对应工作区，在对话中继续。',
+      stepPlanned: '规划',
+      stepDatasourceConfigured: '数据库连接',
+      stepDatasourceVerified: '连接验证',
+      stepSchemaDiscovered: 'Schema 发现',
+      stepSemanticDrafted: '语义层草拟',
+      stepSemanticValidated: '模型校验',
+      stepSemanticPublished: '发布',
+      stepSemanticVerified: '首次查询',
       runtimeUrl: 'Runtime 地址',
       nextTitle: '后续配置',
       nextCopy: 'Skills 已通过 DeepSeek Harness 原生注册表提供给所有工作区；每个会话直接使用自己的工作目录。Runtime 启动成功后，将继续进入数据库连接与语义层向导。',
@@ -100,6 +125,12 @@ window.__ModuleLoader__.load({
       unavailable: 'Unavailable',
       initialize: 'Initialize Foggy',
       repair: 'Re-download / Repair',
+      repairTitle: 'Component checks and repair',
+      repairCli: 'Check / repair CLI',
+      repairLauncher: 'Check / repair Launcher',
+      repairAnalysisSkill: 'Check / repair analysis Skill',
+      diagnostics: 'Export diagnostics',
+      diagnosticsSaved: 'Diagnostics saved',
       start: 'Start Runtime',
       stop: 'Stop Runtime',
       working: 'Operation in progress…',
@@ -118,6 +149,22 @@ window.__ModuleLoader__.load({
       installRoot: 'Components',
       dataRoot: 'Data',
       profileStore: 'CLI profiles',
+      profileMigrationTitle: 'Legacy profile migration',
+      profileMigrationPending: 'Legacy temporary profiles were found. Migration transfers connection metadata and password environment-variable references, never password values.',
+      profileMigrationConflict: 'A legacy profile has a conflict or invalid format. Export diagnostics before continuing.',
+      migrateProfiles: 'Move to persistent store',
+      onboardingProgress: 'Database and semantic-layer progress',
+      noOnboarding: 'No database onboarding record yet. Invoke the Foggy onboarding Skill in a conversation.',
+      projectRoot: 'Workspace',
+      resumeInChat: 'Resume incomplete steps from a conversation in the matching workspace.',
+      stepPlanned: 'Plan',
+      stepDatasourceConfigured: 'Database connection',
+      stepDatasourceVerified: 'Connection test',
+      stepSchemaDiscovered: 'Schema discovery',
+      stepSemanticDrafted: 'Semantic draft',
+      stepSemanticValidated: 'Model validation',
+      stepSemanticPublished: 'Publish',
+      stepSemanticVerified: 'First query',
       runtimeUrl: 'Runtime URL',
       nextTitle: 'Next configuration',
       nextCopy: 'Skills are provided to every workspace through the native DeepSeek Harness registry, and each session uses its own working directory. After Runtime starts, the database connection and semantic-layer wizard comes next.',
@@ -133,7 +180,7 @@ window.__ModuleLoader__.load({
       .foggy-actions{display:flex;gap:8px;flex-wrap:wrap}.foggy-button{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-1);color:var(--dsw-alias-label-primary);font:inherit;border-radius:8px;padding:7px 12px;cursor:pointer}.foggy-button:hover{background:var(--dsw-alias-interactive-bg-hover)}.foggy-button:disabled{opacity:.55;cursor:not-allowed}.foggy-button-primary{border-color:var(--dsw-alias-state-business-primary);background:var(--dsw-alias-state-business-primary);color:white}
       .foggy-grid{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:10px}.foggy-card{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-3);border-radius:10px;padding:13px 14px}.foggy-card-head{display:flex;justify-content:space-between;gap:8px}.foggy-card strong{font-size:13px}.foggy-badge{font-size:11px;color:var(--dsw-alias-label-secondary)}.foggy-card code{display:block;margin-top:8px;color:var(--dsw-alias-label-tertiary);font-size:11px;overflow-wrap:anywhere}
       .foggy-progress{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-3);border-radius:10px;padding:13px 14px}.foggy-progress-head{display:flex;align-items:center;justify-content:space-between;gap:12px;font-size:13px}.foggy-progress-head strong{font-weight:600}.foggy-progress-percent{color:var(--dsw-alias-label-secondary);font-variant-numeric:tabular-nums}.foggy-progress-track{height:8px;margin-top:10px;border-radius:999px;background:var(--dsw-alias-bg-layer-1);overflow:hidden}.foggy-progress-fill{height:100%;border-radius:inherit;background:var(--dsw-alias-state-business-primary);transition:width .25s ease}.foggy-progress-meta{display:flex;justify-content:space-between;gap:12px;margin-top:8px;color:var(--dsw-alias-label-tertiary);font-size:11px;line-height:16px}.foggy-progress-file{min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
-      .foggy-message{margin:0;font-size:13px;line-height:20px;color:var(--dsw-alias-label-secondary)}.foggy-message[data-error=true]{color:var(--dsw-alias-state-error-primary)}.foggy-paths,.foggy-next{border-top:1px solid var(--dsw-alias-border-l2);padding-top:14px}.foggy-paths h4,.foggy-next h4{margin:0 0 8px;font-size:13px}.foggy-paths dl{display:grid;grid-template-columns:100px minmax(0,1fr);gap:6px 10px;margin:0}.foggy-paths dt{color:var(--dsw-alias-label-tertiary);font-size:12px}.foggy-paths dd{margin:0;min-width:0;overflow-wrap:anywhere;font-family:var(--ds-font-family-code);font-size:11px}.foggy-next p{margin:0;color:var(--dsw-alias-label-secondary);font-size:13px;line-height:20px}
+      .foggy-message{margin:0;font-size:13px;line-height:20px;color:var(--dsw-alias-label-secondary)}.foggy-message[data-error=true]{color:var(--dsw-alias-state-error-primary)}.foggy-paths,.foggy-next,.foggy-section{border-top:1px solid var(--dsw-alias-border-l2);padding-top:14px}.foggy-paths h4,.foggy-next h4,.foggy-section h4{margin:0 0 8px;font-size:13px}.foggy-paths dl{display:grid;grid-template-columns:100px minmax(0,1fr);gap:6px 10px;margin:0}.foggy-paths dt{color:var(--dsw-alias-label-tertiary);font-size:12px}.foggy-paths dd{margin:0;min-width:0;overflow-wrap:anywhere;font-family:var(--ds-font-family-code);font-size:11px}.foggy-next p,.foggy-section p{margin:0;color:var(--dsw-alias-label-secondary);font-size:13px;line-height:20px}.foggy-section-actions{display:flex;gap:8px;flex-wrap:wrap;margin-top:10px}.foggy-onboarding-head{display:flex;justify-content:space-between;gap:12px;align-items:start}.foggy-onboarding-head code{font-size:11px;color:var(--dsw-alias-label-tertiary);overflow-wrap:anywhere}.foggy-step-list{display:grid;grid-template-columns:repeat(4,minmax(0,1fr));gap:7px;margin-top:10px}.foggy-step{border:1px solid var(--dsw-alias-border-l2);border-radius:8px;padding:8px;font-size:11px;color:var(--dsw-alias-label-tertiary)}.foggy-step[data-state=completed]{border-color:color-mix(in srgb,var(--dsw-alias-state-success-primary) 45%,var(--dsw-alias-border-l2));color:var(--dsw-alias-state-success-primary)}.foggy-step[data-state=failed],.foggy-step[data-state=invalid]{border-color:var(--dsw-alias-state-error-primary);color:var(--dsw-alias-state-error-primary)}.foggy-warning{border:1px solid color-mix(in srgb,var(--dsw-alias-state-warning-primary) 55%,var(--dsw-alias-border-l2));background:color-mix(in srgb,var(--dsw-alias-state-warning-primary) 8%,transparent);border-radius:10px;padding:12px}
       @media (width<=680px){.foggy-grid{grid-template-columns:minmax(0,1fr)}}
     `
 
@@ -215,6 +262,41 @@ window.__ModuleLoader__.load({
       })
     }
 
+    function onboardingPanel(onboarding, t) {
+      const profile = onboarding?.profiles?.[0]
+      if (!profile) return jsxs('div', { className: 'foggy-section', children: [
+        jsx('h4', { children: t('onboardingProgress') }),
+        jsx('p', { children: t('noOnboarding') }),
+      ] })
+      const steps = [
+        ['planned', 'stepPlanned'],
+        ['datasourceConfigured', 'stepDatasourceConfigured'],
+        ['datasourceVerified', 'stepDatasourceVerified'],
+        ['schemaDiscovered', 'stepSchemaDiscovered'],
+        ['semanticDrafted', 'stepSemanticDrafted'],
+        ['semanticValidated', 'stepSemanticValidated'],
+        ['semanticPublished', 'stepSemanticPublished'],
+        ['semanticVerified', 'stepSemanticVerified'],
+      ]
+      const percent = Math.round(((profile.completedSteps || 0) / Math.max(profile.totalSteps || 8, 1)) * 100)
+      return jsxs('div', { className: 'foggy-section', children: [
+        jsxs('div', { className: 'foggy-onboarding-head', children: [
+          jsxs('div', { children: [
+            jsx('h4', { children: `${t('onboardingProgress')} · ${profile.profile}` }),
+            jsx('code', { children: `${t('projectRoot')}: ${profile.projectRoot || '—'}` }),
+          ] }),
+          jsx('span', { className: 'foggy-progress-percent', children: `${percent}%` }),
+        ] }),
+        jsx('div', { className: 'foggy-step-list', children: steps.map(([name, label]) => jsx('div', {
+          className: 'foggy-step',
+          'data-state': profile.steps?.[name]?.status || 'pending',
+          title: profile.steps?.[name]?.status || 'pending',
+          children: t(label),
+        }, name)) }),
+        profile.next?.status !== 'completed' ? jsx('p', { style: { marginTop: '9px' }, children: t('resumeInChat') }) : null,
+      ] })
+    }
+
     function FoggySettingsTab({ api, t }) {
       const [view, setView] = useState({ phase: 'loading', status: null, message: '', error: false })
 
@@ -239,7 +321,12 @@ window.__ModuleLoader__.load({
         setView((current) => ({ ...current, message: t('working'), error: false }))
         try {
           const result = unwrap(await api[method](), method)
-          setView((current) => ({ ...current, message: result.accepted ? t('accepted') : '', error: result.success === false }))
+          const message = result.accepted
+            ? t('accepted')
+            : result.path
+              ? `${t('diagnosticsSaved')}: ${result.path}`
+              : ''
+          setView((current) => ({ ...current, message, error: result.success === false }))
           await refresh()
         } catch (error) {
           setView((current) => ({ ...current, message: `${t('actionFailed')}: ${String(error.message || error)}`, error: true }))
@@ -268,6 +355,7 @@ window.__ModuleLoader__.load({
           jsxs('div', { className: 'foggy-state', children: [jsx('span', { className: 'foggy-dot', 'data-state': status.state }), jsx('span', { children: t(stateLabels[status.state] || 'notInstalled') })] }),
           jsxs('div', { className: 'foggy-actions', children: [
             jsx('button', { className: 'foggy-button', type: 'button', disabled: busy, onClick: refresh, children: t('refresh') }),
+            jsx('button', { className: 'foggy-button', type: 'button', disabled: busy, onClick: () => run('diagnostics'), children: t('diagnostics') }),
             status.state === 'not-installed' ? jsx('button', { className: 'foggy-button foggy-button-primary', type: 'button', disabled: busy, onClick: () => run('initialize'), children: t('initialize') }) : null,
             status.state !== 'not-installed' ? jsx('button', { className: 'foggy-button', type: 'button', disabled: busy, onClick: () => run('repair'), children: t('repair') }) : null,
             status.installed && !status.running && status.components.java.available ? jsx('button', { className: 'foggy-button foggy-button-primary', type: 'button', disabled: busy, onClick: () => run('runtimeStart'), children: t('start') }) : null,
@@ -285,6 +373,23 @@ window.__ModuleLoader__.load({
           componentCard(t('onboardingSkill'), status.components.onboardingSkill, 'runtime', t),
           componentCard(t('skillRegistry'), { installed: status.components.onboardingSkill?.provider === 'foggy-managed-skills', version: 'native' }, 'runtime', t),
         ] }),
+        jsxs('div', { className: 'foggy-section', children: [
+          jsx('h4', { children: t('repairTitle') }),
+          jsx('div', { className: 'foggy-section-actions', children: [
+            jsx('button', { className: 'foggy-button', type: 'button', disabled: busy, onClick: () => run('repairCli'), children: t('repairCli') }),
+            jsx('button', { className: 'foggy-button', type: 'button', disabled: busy, onClick: () => run('repairLauncher'), children: t('repairLauncher') }),
+            jsx('button', { className: 'foggy-button', type: 'button', disabled: busy, onClick: () => run('repairAnalysisSkill'), children: t('repairAnalysisSkill') }),
+          ] }),
+        ] }),
+        status.profileMigration?.pendingCount || status.profileMigration?.conflictCount ? jsxs('div', { className: 'foggy-warning', children: [
+          jsx('h4', { children: t('profileMigrationTitle') }),
+          jsx('p', { children: status.profileMigration.conflictCount ? t('profileMigrationConflict') : t('profileMigrationPending') }),
+          !status.profileMigration.conflictCount ? jsx('div', { className: 'foggy-section-actions', children: jsx('button', {
+            className: 'foggy-button foggy-button-primary', type: 'button', disabled: busy,
+            onClick: () => run('migrateProfiles'), children: t('migrateProfiles'),
+          }) }) : null,
+        ] }) : null,
+        onboardingPanel(status.onboarding, t),
         jsxs('div', { className: 'foggy-paths', children: [
           jsx('h4', { children: t('roots') }),
           jsxs('dl', { children: [

package/lib/index.js

@@ -1,5 +1,5 @@
 import { execFile } from 'node:child_process'
-import { access, readFile } from 'node:fs/promises'
+import { access, mkdir, readFile, writeFile } from 'node:fs/promises'
 import { constants as fsConstants } from 'node:fs'
 import { dirname, join, delimiter } from 'node:path'
 import { fileURLToPath } from 'node:url'
@@ -157,6 +157,16 @@ export class FoggyIntegrationGateway extends TypertRemoteService {
     let runtime = null
     try { state = await readJson(statePath) } catch {}
     try { runtime = await readJson(runtimeStatePath) } catch {}
+    let onboarding = { success: true, profiles: [], profileCount: 0 }
+    let profileMigration = { success: true, entries: [], pendingCount: 0, conflictCount: 0, profileStore: roots.profileStore }
+    if (state) {
+      try { onboarding = await runOnboarding(['onboard-list']) } catch (error) {
+        onboarding = { success: false, profiles: [], profileCount: 0, error: String(error.message ?? error) }
+      }
+      try { profileMigration = await runOnboarding(['profile-migration-status']) } catch (error) {
+        profileMigration = { success: false, entries: [], pendingCount: 0, conflictCount: 0, profileStore: roots.profileStore, error: String(error.message ?? error) }
+      }
+    }
     const cliPath = state?.cli?.command
     const launcherPath = state?.launcher?.path
     const analysisSkillPath = state?.skills?.analysis?.path || join(roots.installRoot, 'skills', 'foggy-ai-analysis')
@@ -218,6 +228,8 @@ export class FoggyIntegrationGateway extends TypertRemoteService {
       roots,
       components,
       operation,
+      onboarding,
+      profileMigration,
       next: installed ? (running ? 'configure-database' : 'start-runtime') : 'initialize',
     }
   }
@@ -249,6 +261,49 @@ export class FoggyIntegrationGateway extends TypertRemoteService {
     return this.startOperation('repair', true)
   }
 
+  async repairCli() {
+    return this.startOperation('repair-cli', false, ['install', '--repair-component', 'cli'])
+  }
+
+  async repairLauncher() {
+    return this.startOperation('repair-launcher', false, ['install', '--repair-component', 'launcher'])
+  }
+
+  async repairAnalysisSkill() {
+    return this.startOperation('repair-analysis-skill', true, ['install', '--repair-component', 'analysis-skill'])
+  }
+
+  async migrateProfiles() {
+    return this.startOperation('profile-migration', false, ['profile-migrate', '--approve'])
+  }
+
+  async diagnostics() {
+    const roots = defaultRoots()
+    const [status, doctor] = await Promise.all([
+      this.status(),
+      runOnboarding(['doctor', '--no-fail']),
+    ])
+    const report = {
+      schemaVersion: 'foggy-deepseek-diagnostics/v1',
+      generatedAt: new Date().toISOString(),
+      packageVersion: status.packageVersion,
+      state: status.state,
+      installed: status.installed,
+      running: status.running,
+      runtimeUrl: status.runtimeUrl,
+      roots: status.roots,
+      components: status.components,
+      onboarding: status.onboarding,
+      profileMigration: status.profileMigration,
+      doctor,
+    }
+    const directory = join(roots.dataRoot, 'diagnostics')
+    await mkdir(directory, { recursive: true })
+    const path = join(directory, `diagnostics-${Date.now()}.json`)
+    await writeFile(path, `${JSON.stringify(report, null, 2)}\n`, { encoding: 'utf8', mode: 0o600 })
+    return { success: true, path, report }
+  }
+
   async runtimeStart() {
     return this.startOperation('runtime-start', false, ['runtime-start'])
   }
@@ -263,7 +318,8 @@ export class FoggyIntegrationGateway extends TypertRemoteService {
     }
     const id = `${Date.now()}-${Math.random().toString(16).slice(2, 10)}`
     const args = explicitArgs ?? ['install']
-    if (!explicitArgs) {
+    const reportsProgress = args[0] === 'install'
+    if (reportsProgress) {
       const roots = defaultRoots()
       args.push('--progress-file', join(roots.dataRoot, 'operation-progress.json'), '--operation-id', id, '--operation-kind', kind)
     }
@@ -279,7 +335,7 @@ export class FoggyIntegrationGateway extends TypertRemoteService {
       finishedAt: null,
       result: null,
       error: null,
-      progress: !explicitArgs ? {
+      progress: reportsProgress ? {
         schemaVersion: 'foggy-deepseek-onboarding-progress/v1',
         operationId: id,
         kind,
@@ -327,7 +383,10 @@ export class FoggyIntegrationGateway extends TypertRemoteService {
 }
 
 const markerInitializers = []
-for (const method of ['status', 'plan', 'initialize', 'repair', 'runtimeStart', 'runtimeStop']) {
+for (const method of [
+  'status', 'plan', 'initialize', 'repair', 'repairCli', 'repairLauncher', 'repairAnalysisSkill',
+  'migrateProfiles', 'diagnostics', 'runtimeStart', 'runtimeStop',
+]) {
   Remote(method)(FoggyIntegrationGateway.prototype[method], {
     kind: 'method',
     name: method,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@foggy-projects/deepseek-harness-plugin",
-  "version": "0.4.0-beta.6",
+  "version": "0.4.0-beta.7",
   "description": "Foggy Java data analysis engine integration for DeepSeek Harness",
   "type": "module",
   "main": "./lib/index.js",

package/skills/foggy-deepseek-onboarding/SKILL.md

@@ -22,7 +22,7 @@ copy this Skill into the current workspace.
   its absolute command in the global install state.
 - Do not independently download or reinstall the CLI. If the global install state, managed marker, or
   analysis Skill is missing or invalid, ask the user to open the Foggy plugin settings and use
-  **Re-download / Repair**. Repair restores the global managed analysis Skill and invalidates the
+  the matching component repair action. Repair restores managed components and invalidates the
   native DSH Skill catalog. Reinstall or upgrade the plugin itself to restore this bundled Skill.
 - Treat the current DSH session workspace as the authoritative `projectRoot` for the whole onboarding
   run. Do not redirect semantic drafts or contracts to a different repository merely because another
@@ -75,7 +75,9 @@ For every new-database onboarding session, this Skill is the orchestration autho
    plugin's Repair action. Use the matching install script only when the plugin UI is unavailable;
    use `--dry-run` first when paths or permissions are uncertain.
 3. Run `runtime-start` and require successful `wait-ready` plus `capabilities`. Record engine,
-   Runtime API version, schema version, security mode, URL, namespace, PID, and evidence path.
+   Runtime API version, schema version, security mode, URL, namespace, PID, and evidence path. If the
+   recorded Runtime is already running, `runtime-start` verifies and reuses it instead of starting a
+   second process.
 4. Load `foggy-ai-analysis` from the native DSH Skill registry. Do not require a workspace copy.
 5. For a new business database, read [references/onboarding-workflow.md](references/onboarding-workflow.md)
    and prefer its two composite `onboard-datasource-run` / `onboard-semantic-run` commands. Require the
@@ -84,6 +86,9 @@ For every new-database onboarding session, this Skill is the orchestration autho
    (`<dataRoot>/cli-profiles`), never `/tmp`. Accept only the opaque profile
    ID, exact revision, datasource name/type, and namespace; never request JDBC URL, username,
    password, or password environment-variable name in Harness.
+   If plugin settings report a legacy temporary profile, use the explicit migration action before
+   onboarding. It moves only validated connection metadata and environment-variable references; it
+   never copies a password value and leaves a recoverable private backup below the Foggy data root.
 6. After schema discovery, use `foggy-ai-analysis` only to author TM/QM files in the standard project-local
    draft directory. Register, validate, publish, and verify them through this Skill's wrapper using the deterministic commands in
    [references/onboarding-workflow.md](references/onboarding-workflow.md). Do not publish, prune, replace
@@ -114,5 +119,13 @@ publication, and verification phases when the approved contract and draft digest
 query payload in place and rerun the same semantic composite command; do not remove a successfully
 published bundle merely to recover from a later query-validation failure.
 
+An already-completed profile may be reused from another DSH workspace when the approved connection
+contract is byte-for-byte equivalent. Run the datasource composite in the new workspace first; it adds
+that workspace as a non-destructive binding and reuses datasource/schema checkpoints. Then pass the
+current workspace explicitly as `--project-root` to the semantic composite. A secondary workspace may
+reuse an identical published semantic digest and run its own bounded verification query, but it cannot
+replace the published semantic layer; changes must be published from the original workspace or a new
+profile.
+
 Keep user business data separate from the sales-drop SQLite demo. Prefer a read-only database account,
 opaque CLI profile references, and bounded query limits.

package/skills/foggy-deepseek-onboarding/assets/onboarding-state.schema.json

@@ -13,6 +13,26 @@
     "installRoot": {"type": "string"},
     "dataRoot": {"type": "string"},
     "projectRoot": {"type": "string"},
+    "workspaceBindings": {
+      "type": "array",
+      "items": {"type": "string"},
+      "uniqueItems": true
+    },
+    "workspaceVerifications": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": ["projectRoot", "queryModel", "queryPayloadDigest", "verifiedAt"],
+        "properties": {
+          "projectRoot": {"type": "string"},
+          "queryModel": {"type": "string"},
+          "queryPayloadDigest": {"type": "string", "pattern": "^[a-f0-9]{64}$"},
+          "rowCount": {"type": ["integer", "null"], "minimum": 0},
+          "verifiedAt": {"type": "string", "format": "date-time"}
+        },
+        "additionalProperties": false
+      }
+    },
     "runtime": {"type": "object"},
     "connection": {"$ref": "connection.schema.json"},
     "semantic": {"type": "object"},

package/skills/foggy-deepseek-onboarding/assets/versions.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": "foggy-deepseek-onboarding-versions/v1",
-  "packageVersion": "0.4.0-beta.6",
+  "packageVersion": "0.4.0-beta.7",
   "validatedAt": "2026-09-01",
   "components": {
     "deepseekHarness": {

package/skills/foggy-deepseek-onboarding/references/onboarding-workflow.md

@@ -33,6 +33,12 @@ The wrapper defaults `FOGGY_RUNTIME_PROFILE_STORE` to the private persistent dir
 `<dataRoot>/cli-profiles`. An explicit operator-provided value still wins. Do not use `/tmp` for a profile
 that must survive a WSL or Harness restart.
 
+If plugin settings detect profiles in the legacy temporary store, use **Move to persistent store**.
+Migration validates the opaque profile schema, rejects embedded passwords and conflicts, writes the
+destination with private permissions, verifies it, and moves the legacy JSON to a recoverable private
+backup below the Foggy data root.
+Do not manually copy or edit opaque profile JSON.
+
 Treat every user-supplied identifier and bound as immutable input: profile, datasource, namespace,
 models directory, bundle name, TM/QM name, query fields, and limit. Do not swap in demo names, add
 fields, raise the limit, or introduce replacement flags. If one of these inputs is missing, pause for
@@ -52,11 +58,13 @@ For Harness-driven onboarding, use the two composite commands below. Each writes
 evidence internally and refuses to cross an unapproved mutation gate:
 
 ```text
-onboard-datasource-run --connection-file <approved-json> \
+onboard-datasource-run --project-root <current-session-workspace> \
+  --connection-file <approved-json> \
   --approve-configure --approve-bind --include-indexes
 
 # After authoring the registered TM/QM draft from schema metadata:
-onboard-semantic-run --semantic-plan <approved-json> --query-payload <approved-json> \
+onboard-semantic-run --project-root <current-session-workspace> \
+  --semantic-plan <approved-json> --query-payload <approved-json> \
   --approve-validate --approve-publish --approve-execute
 ```
 
@@ -70,6 +78,12 @@ payload and rerun `onboard-semantic-run`; it resumes at query verification and l
 place. A same-name datasource is accepted idempotently only when its public name and database type match
 the approved plan; otherwise replacement still requires explicit approval.
 
+When a completed profile already belongs to another workspace, the datasource composite may add the
+current workspace as a binding only if the approved connection contract is identical and the datasource,
+schema, and semantic publication checkpoints are complete. The semantic composite then accepts the same
+published draft digest from the bound workspace and performs a workspace-specific bounded verification
+query. It refuses semantic replacement from the secondary workspace.
+
 The granular commands below remain available for manual troubleshooting and resumption. Do not expand
 the composite commands into this list during a normal Harness turn.
 
@@ -85,8 +99,8 @@ semantic-validate --profile <profile>
 semantic-validate --profile <profile> --apply
 semantic-publish --profile <profile>
 semantic-publish --profile <profile> --apply
-semantic-verify --profile <profile> --query-payload <json>
-semantic-verify --profile <profile> --query-payload <json> --execute
+semantic-verify --profile <profile> --project-root <current-session-workspace> --query-payload <json>
+semantic-verify --profile <profile> --project-root <current-session-workspace> --query-payload <json> --execute
 onboard-status --profile <profile>
 ```
 

package/skills/foggy-deepseek-onboarding/scripts/onboarding.py

@@ -34,6 +34,7 @@ PROFILE_PATTERN = re.compile(r"^[a-z0-9][a-z0-9._-]{0,62}$")
 ENV_NAME_PATTERN = re.compile(r"^[A-Za-z_][A-Za-z0-9_]*$")
 OPAQUE_PROFILE_PATTERN = re.compile(r"^fop_[a-f0-9]{32}$")
 OPAQUE_REVISION_PATTERN = re.compile(r"^sha256:[a-f0-9]{64}$")
+OPAQUE_PROFILE_SCHEMA = "foggy-runtime-onboarding-profile/v1"
 MODEL_NAME_PATTERN = re.compile(r"^[A-Za-z_][A-Za-z0-9_]{0,127}$")
 
 
@@ -283,11 +284,20 @@ def materialize(
     progress_index: int = 0,
     progress_total: int = 1,
     progress_message: str = "Downloading and verifying asset",
+    replace_corrupt: bool = False,
 ) -> dict:
     destination.parent.mkdir(parents=True, exist_ok=True)
     if destination.is_file():
-        verify_asset(destination, asset["sha256"])
-        return {"file": asset["file"], "path": str(destination), "source": "existing", "sha256": asset["sha256"]}
+        try:
+            verify_asset(destination, asset["sha256"])
+            return {"file": asset["file"], "path": str(destination), "source": "existing", "sha256": asset["sha256"]}
+        except OnboardingError:
+            if not replace_corrupt:
+                raise
+            quarantine = destination.with_name(
+                destination.name + f".corrupt-{dt.datetime.now().strftime('%Y%m%d-%H%M%S-%f')}"
+            )
+            destination.replace(quarantine)
     cached = cached_asset(asset["file"], asset["sha256"], cache_dirs)
     if cached:
         shutil.copy2(cached, destination)
@@ -461,6 +471,153 @@ def configure_profile_store(data_root: Path, *, create: bool = True) -> Path:
     return destination
 
 
+def legacy_profile_stores(destination: Path) -> list[Path]:
+    configured = [
+        normalized(item)
+        for item in os.environ.get("FOGGY_RUNTIME_PROFILE_LEGACY_STORES", "").split(os.pathsep)
+        if item.strip()
+    ]
+    default_legacy = Path(tempfile.gettempdir()) / "foggy-profiles"
+    candidates = [*configured, normalized(default_legacy)]
+    unique: list[Path] = []
+    for candidate in candidates:
+        if candidate == destination or candidate in unique:
+            continue
+        unique.append(candidate)
+    return unique
+
+
+def validate_opaque_profile_document(payload: dict, path: Path) -> dict:
+    allowed = {"schemaVersion", "profileId", "revision", "createdAt", "updatedAt", "connection"}
+    unexpected = sorted(set(payload) - allowed)
+    if unexpected:
+        raise OnboardingError(f"Unsupported opaque profile fields in {path.name}: {', '.join(unexpected)}")
+    if payload.get("schemaVersion") != OPAQUE_PROFILE_SCHEMA:
+        raise OnboardingError(f"Unexpected opaque profile schema in {path.name}")
+    profile_id = payload.get("profileId")
+    revision = payload.get("revision")
+    if not isinstance(profile_id, str) or not OPAQUE_PROFILE_PATTERN.fullmatch(profile_id):
+        raise OnboardingError(f"Invalid opaque profile ID in {path.name}")
+    if path.stem != profile_id:
+        raise OnboardingError(f"Opaque profile filename does not match its ID: {path.name}")
+    if not isinstance(revision, str) or not OPAQUE_REVISION_PATTERN.fullmatch(revision):
+        raise OnboardingError(f"Invalid opaque profile revision in {path.name}")
+    connection = payload.get("connection")
+    if not isinstance(connection, dict):
+        raise OnboardingError(f"Opaque profile connection is missing in {path.name}")
+    allowed_connection = {"name", "type", "jdbcUrl", "username", "passwordEnv", "namespace"}
+    unexpected_connection = sorted(set(connection) - allowed_connection)
+    if unexpected_connection:
+        raise OnboardingError(
+            f"Unsupported opaque connection fields in {path.name}: {', '.join(unexpected_connection)}"
+        )
+    for name in ("name", "type", "jdbcUrl", "namespace"):
+        if not isinstance(connection.get(name), str) or not connection[name].strip():
+            raise OnboardingError(f"Opaque profile connection.{name} is invalid in {path.name}")
+    password_env = connection.get("passwordEnv")
+    if password_env is not None and (
+        not isinstance(password_env, str) or not ENV_NAME_PATTERN.fullmatch(password_env)
+    ):
+        raise OnboardingError(f"Opaque profile passwordEnv is invalid in {path.name}")
+    jdbc_url = connection["jdbcUrl"]
+    if re.search(r"(?i)(?:password|passwd|pwd)\s*=", jdbc_url) or re.search(r"//[^/@:]+:[^/@]+@", jdbc_url):
+        raise OnboardingError(f"Opaque profile embeds a password in jdbcUrl: {path.name}")
+    return payload
+
+
+def profile_migration_inventory(data_root: Path) -> dict:
+    destination = configure_profile_store(data_root, create=False)
+    entries: list[dict] = []
+    for source in legacy_profile_stores(destination):
+        if not source.is_dir():
+            continue
+        for path in sorted(source.glob("fop_*.json")):
+            try:
+                payload = validate_opaque_profile_document(read_json_object(path, "Opaque profile"), path)
+                target = destination / path.name
+                status = "pending"
+                if target.is_file():
+                    existing = validate_opaque_profile_document(read_json_object(target, "Opaque profile"), target)
+                    status = "migrated" if existing == payload else "conflict"
+                entries.append({
+                    "profileId": payload["profileId"],
+                    "revision": payload["revision"],
+                    "source": str(source),
+                    "destination": str(destination),
+                    "status": status,
+                })
+            except OnboardingError as exc:
+                entries.append({
+                    "profileId": path.stem if OPAQUE_PROFILE_PATTERN.fullmatch(path.stem) else None,
+                    "source": str(source),
+                    "destination": str(destination),
+                    "status": "invalid",
+                    "error": str(exc),
+                })
+    return {
+        "schemaVersion": "foggy-deepseek-profile-migration-status/v1",
+        "profileStore": str(destination),
+        "legacyStores": [str(path) for path in legacy_profile_stores(destination)],
+        "entries": entries,
+        "pendingCount": sum(item["status"] == "pending" for item in entries),
+        "conflictCount": sum(item["status"] in {"conflict", "invalid"} for item in entries),
+    }
+
+
+def profile_migration_status_command(args: argparse.Namespace) -> dict:
+    install_root = normalized(args.install_root or default_install_root())
+    install_state = read_install_state(install_root)
+    data_root = normalized(args.data_root or install_state["dataRoot"])
+    return {"success": True, **profile_migration_inventory(data_root), "productionReady": False}
+
+
+def profile_migrate_command(args: argparse.Namespace) -> dict:
+    if not args.approve:
+        raise OnboardingError("Profile migration requires --approve")
+    install_root = normalized(args.install_root or default_install_root())
+    install_state = read_install_state(install_root)
+    data_root = normalized(args.data_root or install_state["dataRoot"])
+    inventory = profile_migration_inventory(data_root)
+    if inventory["conflictCount"]:
+        raise OnboardingError("Legacy profile migration has conflicts or invalid entries; inspect status first")
+    destination = configure_profile_store(data_root)
+    migrated: list[dict] = []
+    for item in inventory["entries"]:
+        if item["status"] != "pending":
+            continue
+        source = normalized(Path(item["source"]) / f"{item['profileId']}.json")
+        payload = validate_opaque_profile_document(read_json_object(source, "Opaque profile"), source)
+        target = destination / source.name
+        atomic_json(target, payload)
+        if os.name != "nt":
+            target.chmod(0o600)
+        if read_json_object(target, "Migrated opaque profile") != payload:
+            target.unlink(missing_ok=True)
+            raise OnboardingError(f"Migrated profile verification failed: {source.name}")
+        backup_root = data_root / "profile-migration-backups" / dt.datetime.now().strftime("%Y%m%d-%H%M%S-%f")
+        backup_root.mkdir(parents=True, exist_ok=True)
+        if os.name != "nt":
+            backup_root.chmod(0o700)
+        archived = backup_root / (source.name + ".bak")
+        source.replace(archived)
+        if os.name != "nt":
+            archived.chmod(0o600)
+        migrated.append({
+            "profileId": payload["profileId"],
+            "revision": payload["revision"],
+            "destination": str(target),
+            "legacyBackup": str(archived),
+        })
+    return {
+        "success": True,
+        "schemaVersion": "foggy-deepseek-profile-migration/v1",
+        "profileStore": str(destination),
+        "migrated": migrated,
+        "migratedCount": len(migrated),
+        "productionReady": False,
+    }
+
+
 def resolve_profile_name(data_root: Path, requested: str | None) -> str:
     if requested:
         return safe_profile(requested)
@@ -825,6 +982,7 @@ def install_command(args: argparse.Namespace) -> dict:
     data_root = normalized(args.data_root or default_data_root())
     cache_dirs = [normalized(item) for item in args.asset_cache_dir]
     components = versions["components"]
+    repair_component = getattr(args, "repair_component", None)
     assert_managed_root(install_root, "Install root")
     assert_managed_root(data_root, "Data root")
     if install_root == data_root:
@@ -837,6 +995,7 @@ def install_command(args: argparse.Namespace) -> dict:
         "profileStore": str(profile_store),
         "workspaceMode": "dsh-session-cwd",
         "versions": {name: value.get("version") for name, value in components.items()},
+        "repairComponent": repair_component,
         "operations": ["install isolated CLI", "verify Launcher assets", "install global analysis Skill", "write install state"],
         "productionReady": False,
     }
@@ -870,6 +1029,7 @@ def install_command(args: argparse.Namespace) -> dict:
             progress=progress, progress_phase="cli", progress_step=1,
             progress_index=index, progress_total=len(cli_assets),
             progress_message="Downloading and verifying CLI",
+            replace_corrupt=repair_component == "cli",
         ))
         progress.update(
             "cli", 1, "Downloading and verifying CLI",
@@ -925,6 +1085,7 @@ def install_command(args: argparse.Namespace) -> dict:
             progress=progress, progress_phase="launcher", progress_step=2,
             progress_index=index, progress_total=len(launcher_assets),
             progress_message="Downloading and verifying Launcher",
+            replace_corrupt=repair_component == "launcher",
         ))
         progress.update(
             "launcher", 2, "Downloading and verifying Launcher",
@@ -947,6 +1108,7 @@ def install_command(args: argparse.Namespace) -> dict:
             progress=progress, progress_phase="analysis-skill", progress_step=3,
             progress_index=index, progress_total=len(analysis_assets),
             progress_message="Downloading and verifying analysis Skill",
+            replace_corrupt=repair_component == "analysis-skill",
         ))
         progress.update(
             "analysis-skill", 3, "Downloading and verifying analysis Skill",
@@ -957,7 +1119,7 @@ def install_command(args: argparse.Namespace) -> dict:
     progress.update("analysis-skill", 3, "Installing analysis Skill", fraction=0.9, current_file=zip_asset["file"])
     analysis_skill = install_analysis_skill(
         downloads / "skill" / zip_asset["file"], install_root, components["analysisSkill"]["version"],
-        zip_asset["sha256"], versions["packageVersion"], args.replace_skill,
+        zip_asset["sha256"], versions["packageVersion"], args.replace_skill or repair_component == "analysis-skill",
     )
     progress.update("analysis-skill", 3, "Analysis Skill ready", fraction=1.0)
     progress.update("workspace-skills", 4, "Registering native DSH Skills", fraction=0.1)
@@ -1088,8 +1250,61 @@ def runtime_start_command(args: argparse.Namespace) -> dict:
     existing = data_root / "runtime-state.json"
     if existing.is_file():
         prior = json.loads(existing.read_text(encoding="utf-8"))
-        if process_info(int(prior.get("pid", 0)))["running"]:
-            raise OnboardingError(f"Recorded Runtime is already running with PID {prior['pid']}")
+        prior_info = process_info(int(prior.get("pid", 0)))
+        if prior_info["running"]:
+            expected_jar = f"foggy-runtime-launcher-{state['launcher']['version']}.jar"
+            if prior_info.get("commandLine") and expected_jar not in prior_info["commandLine"]:
+                raise OnboardingError(
+                    f"Recorded Runtime PID {prior['pid']} does not match the pinned Launcher"
+                )
+            cli = state["cli"]["command"]
+            namespace = args.namespace or prior.get("namespace") or versions["defaults"]["namespace"]
+            base_url = prior.get("runtimeUrl")
+            if not isinstance(base_url, str) or not base_url:
+                raise OnboardingError("Recorded Runtime does not contain runtimeUrl")
+            wait_result = command_result(
+                [cli, "--base-url", base_url, "--namespace", namespace, "--output", "json", "wait-ready",
+                 "--timeout-seconds", str(args.timeout or versions["defaults"]["readinessTimeoutSeconds"]),
+                 "--interval-seconds", "1"],
+                timeout=(args.timeout or versions["defaults"]["readinessTimeoutSeconds"]) + 30,
+            )
+            wait_payload = parse_json_output(wait_result, "wait-ready")
+            if wait_payload.get("success") is not True:
+                raise OnboardingError("wait-ready returned success=false for recorded Runtime")
+            capabilities = parse_json_output(
+                command_result(
+                    [cli, "--base-url", base_url, "--namespace", namespace, "--output", "json", "capabilities"],
+                    timeout=30,
+                ),
+                "capabilities",
+            )
+            expected_contract = versions["components"]["launcher"]["runtimeApiContract"]
+            if capabilities.get("success") is not True or capabilities.get("runtimeApiVersion") != expected_contract:
+                raise OnboardingError(f"Unexpected Runtime API contract; expected {expected_contract}")
+            if capabilities.get("data", {}).get("securityMode") != versions["defaults"]["securityMode"]:
+                raise OnboardingError("Recorded Runtime did not report the expected dev/test security mode")
+            verified_at = now_utc()
+            identity = {
+                "engine": capabilities.get("engine"),
+                "runtimeApiVersion": capabilities.get("runtimeApiVersion"),
+                "schemaVersion": capabilities.get("data", {}).get("schemaVersion"),
+                "securityMode": capabilities.get("data", {}).get("securityMode"),
+            }
+            return {
+                "success": True,
+                **prior,
+                "identity": identity,
+                "lastVerifiedAt": verified_at,
+                "verification": {
+                    "waitReady": True,
+                    "capabilities": identity,
+                    "persisted": False,
+                    "instruction": "Capture this JSON in the current workspace when fresh verification evidence is required",
+                },
+                "action": "already-running-verified",
+                "resumed": True,
+                "productionReady": False,
+            }
         existing.unlink()
     port = args.port or int(versions["defaults"]["port"])
     with socket.socket(socket.AF_INET, socket.SOCK_STREAM) as probe:
@@ -1834,7 +2049,9 @@ def semantic_verify_command(args: argparse.Namespace) -> dict:
         raise OnboardingError("--query-model must be declared in the registered semantic plan")
     if not args.query_payload:
         raise OnboardingError("--query-payload is required for semantic verification")
-    project_root = normalized(state["projectRoot"])
+    project_root = normalized(getattr(args, "project_root", None) or state["projectRoot"])
+    if not project_root_is_bound(state, project_root):
+        raise OnboardingError("Query projectRoot is not bound to this onboarding profile")
     payload_path = normalized(args.query_payload)
     if not is_child(payload_path, project_root):
         raise OnboardingError("Query payload must stay inside projectRoot")
@@ -1885,7 +2102,20 @@ def semantic_verify_command(args: argparse.Namespace) -> dict:
         queryExecuted=True,
         rowCount=row_count,
         queryPayloadDigest=sha256(payload_path),
+        projectRoot=str(project_root),
     )
+    workspace_verifications = state.setdefault("workspaceVerifications", [])
+    workspace_verifications[:] = [
+        item for item in workspace_verifications
+        if not (item.get("projectRoot") == str(project_root) and item.get("queryModel") == query_model)
+    ]
+    workspace_verifications.append({
+        "projectRoot": str(project_root),
+        "queryModel": query_model,
+        "queryPayloadDigest": sha256(payload_path),
+        "rowCount": row_count,
+        "verifiedAt": now_utc(),
+    })
     state.setdefault("artifacts", {})["semanticVerifyEvidence"] = str(evidence_dir)
     path = write_onboarding_state(data_root, state)
     return {
@@ -1944,12 +2174,63 @@ def onboarding_status_command(args: argparse.Namespace) -> dict:
         "passwordEnv": password_env,
         "passwordEnvPresent": bool(password_env and os.environ.get(password_env)),
         "steps": state["steps"],
+        "projectRoot": state.get("projectRoot"),
+        "workspaceBindings": [str(path) for path in bound_project_roots(state)],
+        "workspaceVerifications": state.get("workspaceVerifications", []),
         "artifacts": state.get("artifacts", {}),
         "next": next_onboarding_action(state),
         "productionReady": False,
     }
 
 
+def onboarding_list_command(args: argparse.Namespace) -> dict:
+    install_root = normalized(args.install_root or default_install_root())
+    install_state = read_install_state(install_root)
+    data_root = normalized(args.data_root or install_state["dataRoot"])
+    profiles_dir = data_root / "onboarding" / "profiles"
+    profiles: list[dict] = []
+    ordered_steps = [
+        "planned", "datasourceConfigured", "datasourceVerified", "schemaDiscovered",
+        "semanticDrafted", "semanticValidated", "semanticPublished", "semanticVerified",
+    ]
+    for path in sorted(profiles_dir.glob("*.json")):
+        if not PROFILE_PATTERN.fullmatch(path.stem):
+            continue
+        try:
+            state = read_onboarding_state(data_root, path.stem)
+            steps = state.get("steps", {})
+            completed = sum(steps.get(name, {}).get("status") == "completed" for name in ordered_steps)
+            profiles.append({
+                "profile": state["profile"],
+                "projectRoot": state.get("projectRoot"),
+                "workspaceBindings": [str(item) for item in bound_project_roots(state)],
+                "updatedAt": state.get("updatedAt"),
+                "completedSteps": completed,
+                "totalSteps": len(ordered_steps),
+                "steps": {name: steps.get(name, {"status": "pending"}) for name in ordered_steps},
+                "next": next_onboarding_action(state),
+            })
+        except OnboardingError as exc:
+            profiles.append({
+                "profile": path.stem,
+                "projectRoot": None,
+                "updatedAt": None,
+                "completedSteps": 0,
+                "totalSteps": len(ordered_steps),
+                "steps": {},
+                "next": {"status": "invalid"},
+                "error": str(exc),
+            })
+    profiles.sort(key=lambda item: item.get("updatedAt") or "", reverse=True)
+    return {
+        "success": True,
+        "schemaVersion": "foggy-deepseek-onboarding-list/v1",
+        "profiles": profiles,
+        "profileCount": len(profiles),
+        "productionReady": False,
+    }
+
+
 def onboarding_resume_command(args: argparse.Namespace) -> dict:
     result = onboarding_status_command(args)
     result["schemaVersion"] = "foggy-deepseek-onboarding-resume/v1"
@@ -1986,6 +2267,37 @@ def step_completed(state: dict, name: str) -> bool:
     return state.get("steps", {}).get(name, {}).get("status") == "completed"
 
 
+def bound_project_roots(state: dict) -> list[Path]:
+    values = [state.get("projectRoot"), *state.get("workspaceBindings", [])]
+    result: list[Path] = []
+    for value in values:
+        if not isinstance(value, str) or not value:
+            continue
+        path = normalized(value)
+        if path not in result:
+            result.append(path)
+    return result
+
+
+def project_root_is_bound(state: dict, project_root: Path) -> bool:
+    return normalized(project_root) in bound_project_roots(state)
+
+
+def bind_completed_workspace(state: dict, data_root: Path, project_root: Path) -> bool:
+    project_root = normalized(project_root)
+    if project_root_is_bound(state, project_root):
+        return False
+    required = ("datasourceConfigured", "datasourceVerified", "schemaDiscovered", "semanticPublished")
+    if not all(step_completed(state, name) for name in required):
+        raise OnboardingError(
+            "Existing onboarding profile belongs to a different projectRoot and is not complete enough for safe reuse; "
+            "resume from its original DSH workspace or choose a new profile name"
+        )
+    state.setdefault("workspaceBindings", []).append(str(project_root))
+    write_onboarding_state(data_root, state)
+    return True
+
+
 def datasource_run_command(args: argparse.Namespace) -> dict:
     _install_root, install_state, data_root, _runtime_state = onboarding_context(args, require_runtime=True)
     project_root = normalized(args.project_root or Path.cwd())
@@ -2005,16 +2317,14 @@ def datasource_run_command(args: argparse.Namespace) -> dict:
     if existing:
         if existing.get("connection") != requested_connection:
             raise OnboardingError("Existing onboarding profile does not match the requested connection plan")
-        if normalized(existing.get("projectRoot", "")) != project_root:
-            raise OnboardingError(
-                "Existing onboarding profile belongs to a different projectRoot; resume from that DSH workspace "
-                "or choose a new profile name"
-            )
+        adopted = bind_completed_workspace(existing, data_root, project_root)
         plan_result = {
             "success": True,
             "schemaVersion": "foggy-deepseek-onboarding-plan-result/v1",
             "profile": profile,
             "resumed": True,
+            "workspaceAdopted": adopted,
+            "projectRoot": str(project_root),
             "statePath": str(onboarding_state_path(data_root, profile)),
             "next": next_onboarding_action(existing),
             "productionReady": False,
@@ -2119,8 +2429,8 @@ def datasource_run_command(args: argparse.Namespace) -> dict:
     }
 
 
-def semantic_plan_snapshot(state: dict, plan: dict) -> tuple[Path, dict, bool]:
-    project_root = normalized(state["projectRoot"])
+def semantic_plan_snapshot(state: dict, plan: dict, project_root: Path | None = None) -> tuple[Path, dict, bool]:
+    project_root = normalized(project_root or state["projectRoot"])
     draft_dir = normalized(project_root / plan["draftDir"])
     if not is_child(draft_dir, project_root) or draft_dir == project_root:
         raise OnboardingError("draftDir must stay inside projectRoot and cannot equal it")
@@ -2142,6 +2452,22 @@ def published_digest_matches(state: dict, digest: str) -> bool:
     return published.get("status") == "completed" and published.get("digest") == digest
 
 
+def workspace_query_verification(state: dict, project_root: Path, query_model: str, digest: str) -> dict | None:
+    requested_root = str(normalized(project_root))
+    candidates = list(state.get("workspaceVerifications", []))
+    legacy = state.get("steps", {}).get("semanticVerified", {})
+    if legacy.get("status") == "completed" and legacy.get("projectRoot"):
+        candidates.append(legacy)
+    for item in candidates:
+        if (
+            item.get("projectRoot") == requested_root
+            and item.get("queryModel") == query_model
+            and item.get("queryPayloadDigest") == digest
+        ):
+            return item
+    return None
+
+
 def semantic_run_command(args: argparse.Namespace) -> dict:
     approved_plan = validate_semantic_plan(read_json_object(normalized(args.semantic_plan), "Semantic plan"))
     if not approved_plan.get("profile"):
@@ -2152,7 +2478,11 @@ def semantic_run_command(args: argparse.Namespace) -> dict:
     profile_args = argparse.Namespace(**vars(args))
     profile_args.profile = profile
     state, _install_state, _data_root, _runtime_state = require_profile(profile_args, require_runtime=True)
-    project_root = normalized(state["projectRoot"])
+    project_root = normalized(getattr(args, "project_root", None) or state["projectRoot"])
+    if not project_root_is_bound(state, project_root):
+        raise OnboardingError(
+            "Current projectRoot is not bound to this completed profile; run onboard-datasource-run from this workspace first"
+        )
     payload_path = normalized(args.query_payload)
     if not is_child(payload_path, project_root):
         raise OnboardingError(
@@ -2171,8 +2501,13 @@ def semantic_run_command(args: argparse.Namespace) -> dict:
     evidence_dir = composite_evidence_dir(project_root, profile, str(project_root / contract_evidence) if contract_evidence else args.evidence_dir)
     files: list[str] = []
 
-    _draft_dir, manifest, draft_matches = semantic_plan_snapshot(state, approved_plan)
+    _draft_dir, manifest, draft_matches = semantic_plan_snapshot(state, approved_plan, project_root)
     published_matches = published_digest_matches(state, manifest["digest"])
+    if normalized(state["projectRoot"]) != project_root and not published_matches:
+        raise OnboardingError(
+            "A secondary workspace may reuse an identical published semantic layer but cannot replace it; "
+            "publish changes from the original projectRoot or choose a new profile"
+        )
     if draft_matches or published_matches:
         drafted = resumed_phase(profile, "semanticDrafted", digest=manifest["digest"])
     else:
@@ -2265,13 +2600,9 @@ def semantic_run_command(args: argparse.Namespace) -> dict:
         ))
     save_composite_result(evidence_dir, "11-semantic-publish-apply.json", published, files)
     state = read_onboarding_state(normalized(state["dataRoot"]), profile)
-    verified_step = state.get("steps", {}).get("semanticVerified", {})
     payload_digest = sha256(payload_path)
-    if (
-        verified_step.get("status") == "completed"
-        and verified_step.get("queryModel") == declared_query_model
-        and verified_step.get("queryPayloadDigest") == payload_digest
-    ):
+    verified_step = workspace_query_verification(state, project_root, declared_query_model, payload_digest)
+    if verified_step:
         resumed = resumed_phase(
             profile,
             "semanticVerified",
@@ -2307,6 +2638,7 @@ def semantic_run_command(args: argparse.Namespace) -> dict:
         profile=profile,
         query_model=declared_query_model,
         query_payload=args.query_payload,
+        project_root=str(project_root),
         execute=False,
     ))
     save_composite_result(evidence_dir, "12-query-validate.json", query_validated, files)
@@ -2330,6 +2662,7 @@ def semantic_run_command(args: argparse.Namespace) -> dict:
         profile=profile,
         query_model=declared_query_model,
         query_payload=args.query_payload,
+        project_root=str(project_root),
         execute=True,
     ))
     save_composite_result(evidence_dir, "13-query-execute.json", executed, files)
@@ -2464,6 +2797,7 @@ def build_parser() -> argparse.ArgumentParser:
     install.add_argument("--project-root")
     install.add_argument("--asset-cache-dir", action="append", default=[])
     install.add_argument("--replace-skill", action="store_true")
+    install.add_argument("--repair-component", choices=("cli", "launcher", "analysis-skill"))
     install.add_argument("--skip-cli-install", action="store_true")
     install.add_argument("--cli-command")
     install.add_argument("--progress-file")
@@ -2516,6 +2850,22 @@ def build_parser() -> argparse.ArgumentParser:
     resume.add_argument("--profile")
     resume.set_defaults(handler=onboarding_resume_command)
 
+    onboarding_list = sub.add_parser("onboard-list")
+    onboarding_list.add_argument("--install-root")
+    onboarding_list.add_argument("--data-root")
+    onboarding_list.set_defaults(handler=onboarding_list_command)
+
+    migration_status = sub.add_parser("profile-migration-status")
+    migration_status.add_argument("--install-root")
+    migration_status.add_argument("--data-root")
+    migration_status.set_defaults(handler=profile_migration_status_command)
+
+    migrate = sub.add_parser("profile-migrate")
+    migrate.add_argument("--install-root")
+    migrate.add_argument("--data-root")
+    migrate.add_argument("--approve", action="store_true")
+    migrate.set_defaults(handler=profile_migrate_command)
+
     datasource_run = sub.add_parser("onboard-datasource-run")
     datasource_run.add_argument("--install-root")
     datasource_run.add_argument("--data-root")
@@ -2536,6 +2886,7 @@ def build_parser() -> argparse.ArgumentParser:
     semantic_run = sub.add_parser("onboard-semantic-run")
     semantic_run.add_argument("--install-root")
     semantic_run.add_argument("--data-root")
+    semantic_run.add_argument("--project-root")
     semantic_run.add_argument("--profile")
     semantic_run.add_argument("--semantic-plan", required=True)
     semantic_run.add_argument("--query-payload", required=True)
@@ -2602,6 +2953,7 @@ def build_parser() -> argparse.ArgumentParser:
     semantic_verify = sub.add_parser("semantic-verify")
     semantic_verify.add_argument("--install-root")
     semantic_verify.add_argument("--data-root")
+    semantic_verify.add_argument("--project-root")
     semantic_verify.add_argument("--profile")
     semantic_verify.add_argument("--query-model")
     semantic_verify.add_argument("--query-payload", required=True)