@foggy-projects/deepseek-harness-plugin 0.4.0-beta.6 → 0.4.0-beta.8

package/README.md

@@ -2,13 +2,19 @@
 
 This package is the lightweight DeepSeek Harness Bundle for Foggy's Java data
 analysis engine. Installing the Bundle adds a native Foggy tab under **Settings
-→ Plugins**. The large Launcher and the isolated CLI environment are downloaded
-only when the user selects **Initialize Foggy**.
+→ Plugins**. The private Python runtime, Launcher, and isolated CLI environment
+are downloaded only when the user selects **Initialize Foggy**.
+
+DeepSeek Harness uses a system Node.js (`^22.19.0 || >=24.0.0`) and Foggy's Java
+Launcher uses a system Java 17+. Foggy manages its own pinned Python 3.12 runtime
+inside the per-user component directory; it does not require a system Python,
+modify `PATH`, or register Python globally. Advanced users may explicitly set
+`FOGGY_PYTHON` to a compatible Python 3.11+ executable.
 
 ## Local beta installation
 
 ```powershell
-dsh plugin --profile web add --workspace-root ./foggy-projects-deepseek-harness-plugin-0.4.0-beta.6.tgz
+dsh plugin --profile web add --workspace-root ./foggy-projects-deepseek-harness-plugin-0.4.0-beta.8.tgz
 ```
 
 Restart `dsh web`, open Settings → Plugins → Foggy Data Analysis, and initialize
@@ -38,15 +44,35 @@ evidence.
 Opaque CLI profiles default to the private persistent
 `<dataRoot>/cli-profiles` directory. Composite onboarding commands are
 idempotent: unchanged completed phases are resumed rather than re-adding a
-datasource or re-registering a published bundle.
+datasource or re-registering a published bundle. Settings detects legacy
+temporary profiles and offers an explicit, validated migration into the
+persistent store. A completed profile can also be bound non-destructively to an
+additional DSH workspace when its reviewed connection contract and published
+semantic digest are unchanged.
 
-CLI, Launcher, the analysis Skill, install state, and Runtime state live in the
-user-level Foggy component directories. The managed CLI is intentionally isolated
+Private Python, CLI, Launcher, the analysis Skill, install state, and Runtime
+state live in the user-level Foggy component directories. The managed CLI is intentionally isolated
 and does not need to be on `PATH`. **Re-download / Repair** verifies the global
 analysis Skill, backs up modified or outdated managed content, restores it, and
 invalidates DSH's Skill catalog. The onboarding Skill is bundled with the plugin
 and is restored by reinstalling or upgrading the plugin package.
 
+The Foggy settings tab shows the persisted database/semantic onboarding stages,
+offers pinned checks and repair for CLI, Launcher, and the managed analysis
+Skill, private Python, and exports a private redacted diagnostics report. Runtime start is
+idempotent: an already-recorded process is verified with `wait-ready` and
+`capabilities` instead of being treated as a failed second start.
+
+This beta remains a local dev/test integration. The bundled Runtime reports
+`securityMode=none-dev-test-only` and must not be exposed to a network or used as
+a production service.
+
+See [`docs/PUBLIC-BETA-READINESS.md`](./docs/PUBLIC-BETA-READINESS.md) for the
+tested public Beta scope, release gates, and stable-release blockers.
+Native Windows acceptance instructions are in
+[`docs/WINDOWS-BETA-ACCEPTANCE.md`](./docs/WINDOWS-BETA-ACCEPTANCE.md); database
+credentials intentionally remain outside the public repository.
+
 ## Linux and WSL2 experience
 
 Ubuntu and WSL2 users can use the checked-in preflighted installer under

package/THIRD-PARTY-RUNTIME-NOTICES.md

@@ -0,0 +1,16 @@
+# Third-party runtime notices
+
+Foggy for DeepSeek Harness downloads a pinned CPython runtime on first
+initialization. The runtime is not included in the npm package and is installed
+only inside Foggy's per-user component directory.
+
+- CPython is provided under the Python Software Foundation License Version 2.
+- Portable distributions are produced by
+  [astral-sh/python-build-standalone](https://github.com/astral-sh/python-build-standalone),
+  whose build tooling is provided under MPL-2.0.
+- The downloaded distribution contains its own license and attribution files.
+
+The exact build release, platform assets, sizes, URLs, and SHA256 digests are
+recorded in `skills/foggy-deepseek-onboarding/assets/versions.json`. Foggy
+verifies the selected digest before extraction and does not add the interpreter
+to `PATH` or register it as a system Python installation.

package/docs/PUBLIC-BETA-READINESS.md

@@ -0,0 +1,51 @@
+# Public beta readiness: 0.4.0-beta.8
+
+Assessment date: 2026-09-03
+
+## Verdict
+
+`0.4.0-beta.8` is suitable for a scoped public beta on Windows 10/11 x64 and
+Linux/WSL2 x64. It is not a general-availability release.
+
+The plugin package stays small and downloads large components only during
+initialization. Node.js and Java remain system prerequisites. Python 3.12.13 is
+installed privately below Foggy's component directory and does not change the
+system PATH, registry, or a user's existing Python installation.
+
+## Verified behavior
+
+- The npm tarball is about 67 KB compressed and contains no Python or Java
+  runtime binary.
+- Managed CPython assets are pinned by URL, byte size, and SHA256 for Windows,
+  Linux, and macOS on x64 and arm64.
+- Windows x64 completed a cold Python download, checksum verification,
+  extraction, initialization, forced Python repair, and doctor run.
+- Linux/WSL2 x64 completed managed Python extraction, initialization, and a live
+  DeepSeek Harness `0.1.1-rc.2` UI status check.
+- The UI reported Python 3.12.13 as `Foggy private`, and CLI 0.1.23, Launcher
+  0.1.18, analysis Skill 0.1.17, and onboarding Skill 0.4.0-beta.8 as installed.
+- Interrupted downloads resume with HTTP Range when the server supports it;
+  downloaded artifacts are not trusted until the complete SHA256 matches.
+- Automated regression passed under Node 22.23.2: 15 Node tests and 8 Python
+  tests, plus shell and PowerShell syntax checks.
+
+## Beta boundaries
+
+- Supported public-beta targets: Windows 10/11 x64 and Linux/WSL2 x64.
+- Windows users must install a supported system Node.js line (`^22.19.0` or
+  `>=24.0.0`) and Java 17 or later. They do not need to install Python.
+- macOS and arm64 assets are pinned and integrity-checked but have not received
+  the same end-to-end host validation; treat those targets as experimental.
+- DeepSeek Harness itself is still consumed at `0.1.1-rc.2`, so its plugin
+  installation and supply-chain policy behavior may change before a stable
+  Harness release.
+- Runtime production authentication is outside this beta's default local
+  onboarding mode. The UI and doctor continue to report `productionReady=false`
+  for the development-only no-auth mode.
+
+## Release gate after publication
+
+Before broad announcement, complete the native Windows fresh-machine checklist
+in [WINDOWS-BETA-ACCEPTANCE.md](./WINDOWS-BETA-ACCEPTANCE.md). Record the exact
+Node, Java, DeepSeek Harness, and plugin versions and confirm that initialization
+works without a system Python executable.

package/docs/WINDOWS-BETA-ACCEPTANCE.md

@@ -0,0 +1,71 @@
+# Native Windows Beta acceptance
+
+This runbook validates DeepSeek Harness `0.1.1-rc.2` with Foggy plugin
+`0.4.0-beta.8` on a clean 64-bit Windows 10 or Windows 11 machine. Use a local
+directory that is not synchronized by OneDrive.
+
+## Prerequisites
+
+Install a system Node.js matching `^22.19.0 || >=24.0.0` and a system Java 17+
+JRE/JDK. Windows must also provide `tar` (included in supported Windows 10/11
+versions). A system Python is neither required nor used by default.
+
+```powershell
+node --version
+npm --version
+java -version
+tar --version
+```
+
+Foggy downloads a pinned private CPython 3.12.13 runtime during initialization.
+It remains below `%LOCALAPPDATA%\Foggy\DeepSeekHarness`, is not added to `PATH`,
+and is not registered as a system Python.
+
+## Install and start
+
+```powershell
+New-Item -ItemType Directory -Force C:\FoggyAcceptance | Out-Null
+Set-Location C:\FoggyAcceptance
+
+npx --yes --package=@deepseek-ai/dsh@0.1.1-rc.2 --package=pnpm@11.7.0 `
+  dsh plugin --profile web add --workspace-root `
+  "@foggy-projects/deepseek-harness-plugin@beta"
+
+npx --yes --package=@deepseek-ai/dsh@0.1.1-rc.2 --package=pnpm@11.7.0 dsh web
+```
+
+Open `http://127.0.0.1:3080/`, configure an LLM provider, select the
+`C:\FoggyAcceptance` workspace, then open **Settings → Plugins → Foggy Data
+Analysis** and choose **Initialize Foggy**.
+
+Expected component state:
+
+- Python 3.12.13, source `Foggy private`;
+- CLI 0.1.23;
+- Launcher 0.1.18;
+- analysis Skill 0.1.17;
+- onboarding Skill 0.4.0-beta.8;
+- Java 17+ available;
+- native DSH Skill registration available.
+
+## Database and semantic-layer acceptance
+
+Keep database credentials out of this public repository. Create a private CLI
+profile outside the DSH conversation, pass only its opaque profile ID and
+revision to the onboarding workflow, and use a test-only database account with
+read-only permissions.
+
+Use a natural prompt such as:
+
+```text
+请帮我用 Foggy 分析这个测试数据库。我已经按验收手册创建了私有连接
+profile。请先确认连接和表结构，再围绕订单数据创建一个简单的语义层，
+包含订单数量、状态和开单时间，最后执行一个不超过 20 行的只读查询。
+不要修改数据库，也不要在对话或验收文件中输出密码。
+```
+
+Pass only when Runtime readiness and capabilities succeed, datasource metadata
+can be discovered, TM/QM models validate and publish, the bounded read-only
+query succeeds, diagnostics contain no credentials, and stopping Runtime frees
+port 18066.
+

package/experience/linux/README.md

@@ -5,14 +5,13 @@ It has been designed for Ubuntu 22.04/24.04 x86_64 and WSL2.
 
 ## Prerequisites
 
-- Node.js 22.19 or newer
-- Python 3.11 or newer with `venv`
+- Node.js `^22.19.0` or `>=24.0.0`
 - Java 17 or newer
-- Git and npm
+- Git, npm, and `tar`
 - At least 4 GiB free disk space and 2 GiB available memory; 4 GiB memory is recommended
 
 Keep the experience root on the Linux-native filesystem, such as under `$HOME`. In WSL2, do not
-put DSH, `node_modules`, the Python virtual environment, or Foggy data under `/mnt/c` or `/mnt/d`.
+put DSH, `node_modules`, Foggy's private Python environment, or Foggy data under `/mnt/c` or `/mnt/d`.
 
 ## Prepare
 
@@ -35,8 +34,8 @@ Start the prepared profile with:
 ```
 
 Open the URL printed by DSH, then choose **Settings → Plugins → Foggy Data Analysis** and select
-**Initialize Foggy**. The CLI, Launcher, and analysis Skill are downloaded from their pinned public
-Releases and verified before installation.
+**Initialize Foggy**. Private Python, the CLI, Launcher, and analysis Skill are downloaded from their
+pinned public Releases and verified before installation. A system Python is not required.
 
 Provider configuration remains a separate DSH setup step. Store API keys in a private environment
 file or secret manager; do not add them to the DSH settings document or the project repository.

package/experience/linux/prepare.sh

@@ -3,7 +3,7 @@ set -euo pipefail
 
 DSH_VERSION="0.1.1-rc.2"
 PNPM_VERSION="11.7.0"
-PLUGIN_VERSION="0.4.0-beta.4"
+PLUGIN_VERSION="0.4.0-beta.8"
 PLUGIN_REF="v${PLUGIN_VERSION}"
 PLUGIN_REPOSITORY="https://github.com/foggy-projects/foggy-deepseek-harness-plugin.git"
 
@@ -62,22 +62,19 @@ require_command() {
 
 [[ "$(uname -s)" == "Linux" ]] || fail "this entry supports Linux and WSL2 only"
 case "$(uname -m)" in
-  x86_64|amd64) ;;
-  *) fail "validated architecture is x86_64; detected $(uname -m)" ;;
+  x86_64|amd64|aarch64|arm64) ;;
+  *) fail "supported architectures are x86_64 and arm64; detected $(uname -m)" ;;
 esac
 
 require_command node
 require_command npm
-require_command python3
 require_command java
 require_command git
 require_command df
+require_command tar
 
-node -e 'const [major, minor] = process.versions.node.split(".").map(Number); if (major < 22 || (major === 22 && minor < 19)) process.exit(1)' \
-  || fail "Node 22.19+ required; detected $(node --version 2>/dev/null || echo unknown)"
-python3 -c 'import sys; raise SystemExit(0 if sys.version_info >= (3, 11) else 1)' \
-  || fail "Python 3.11+ required; detected $(python3 --version 2>/dev/null || echo unknown)"
-python3 -m venv --help >/dev/null 2>&1 || fail "Python venv support is required"
+node -e 'const [major, minor] = process.versions.node.split(".").map(Number); if (!((major === 22 && minor >= 19) || major >= 24)) process.exit(1)' \
+  || fail "Node ^22.19.0 or >=24 required; detected $(node --version 2>/dev/null || echo unknown)"
 
 java_major="$(java -version 2>&1 | awk -F'[\".]' '/version/ { print $2; exit }')"
 [[ "$java_major" =~ ^[0-9]+$ ]] || fail "could not detect Java version"
@@ -121,6 +118,7 @@ Foggy Linux experience plan
   DSH:              $DSH_VERSION
   pnpm:             $PNPM_VERSION
   Foggy Bundle:     $PLUGIN_VERSION
+  Python:           private managed 3.12.13 (downloaded during Foggy initialization)
   Experience root:  $experience_root
   Project root:     $project_root
   Filesystem:       Linux-native

package/lib/client.js

@@ -10,7 +10,10 @@ window.__ModuleLoader__.load({
     const passthroughSchema = { parse: (value) => value }
     const TYPERT_REMOTE = {
       package: '@foggy-projects/deepseek-harness-plugin',
-      descriptors: ['status', 'plan', 'initialize', 'repair', 'runtimeStart', 'runtimeStop'].map((method) => ({
+      descriptors: [
+        'status', 'plan', 'initialize', 'repair', 'repairPython', 'repairCli', 'repairLauncher', 'repairAnalysisSkill',
+        'migrateProfiles', 'diagnostics', 'runtimeStart', 'runtimeStop',
+      ].map((method) => ({
         id: `@foggy-projects/deepseek-harness-plugin#foggyIntegration/${method}`,
         service: 'foggyIntegration',
         namespace: 'foggyIntegration',
@@ -29,7 +32,7 @@ window.__ModuleLoader__.load({
     const zh = {
       tab: 'Foggy 数据分析',
       title: 'Foggy Java 数据分析引擎',
-      intro: '在 DeepSeek Harness 内管理 Foggy CLI、Launcher、Skills 和本地 Runtime。大型组件在首次初始化时按需下载。',
+      intro: '在 DeepSeek Harness 内管理 Foggy 私有 Python、CLI、Launcher、Skills 和本地 Runtime。大型组件在首次初始化时按需下载。',
       refresh: '刷新状态',
       loading: '正在读取 Foggy 状态…',
       failed: '暂时无法读取 Foggy 状态。',
@@ -51,11 +54,19 @@ window.__ModuleLoader__.load({
       unavailable: '不可用',
       initialize: '初始化 Foggy',
       repair: '重新下载 / 修复',
+      repairTitle: '分组件检查与修复',
+      repairPython: '检查 / 修复私有 Python',
+      repairCli: '检查 / 修复 CLI',
+      repairLauncher: '检查 / 修复 Launcher',
+      repairAnalysisSkill: '检查 / 修复分析 Skill',
+      diagnostics: '导出诊断报告',
+      diagnosticsSaved: '诊断报告已保存',
       start: '启动 Runtime',
       stop: '停止 Runtime',
       working: '操作进行中…',
       progressWorking: '正在初始化 Foggy…',
       progressPreflight: '检查运行环境',
+      progressPython: '准备私有 Python',
       progressCli: '准备 CLI',
       progressLauncher: '准备 Launcher',
       progressAnalysis: '准备分析 Skill',
@@ -63,12 +74,30 @@ window.__ModuleLoader__.load({
       progressState: '写入安装状态',
       progressComplete: '初始化完成',
       progressFiles: '文件',
+      managedPrivate: 'Foggy 私有',
+      configuredOverride: '外部指定',
       accepted: '操作已开始；页面会自动刷新状态。',
       actionFailed: '操作失败',
       roots: '本地目录',
       installRoot: '组件目录',
       dataRoot: '数据目录',
       profileStore: 'CLI Profile',
+      profileMigrationTitle: '旧 Profile 迁移',
+      profileMigrationPending: '检测到旧版临时 Profile。迁移只转移连接元数据和密码环境变量引用，不复制密码值。',
+      profileMigrationConflict: '旧 Profile 存在冲突或格式问题，请先导出诊断报告。',
+      migrateProfiles: '迁移到持久目录',
+      onboardingProgress: '数据库与语义层进度',
+      noOnboarding: '尚无数据库引导记录；请在对话中调用 Foggy onboarding Skill。',
+      projectRoot: '工作区',
+      resumeInChat: '未完成步骤应回到对应工作区，在对话中继续。',
+      stepPlanned: '规划',
+      stepDatasourceConfigured: '数据库连接',
+      stepDatasourceVerified: '连接验证',
+      stepSchemaDiscovered: 'Schema 发现',
+      stepSemanticDrafted: '语义层草拟',
+      stepSemanticValidated: '模型校验',
+      stepSemanticPublished: '发布',
+      stepSemanticVerified: '首次查询',
       runtimeUrl: 'Runtime 地址',
       nextTitle: '后续配置',
       nextCopy: 'Skills 已通过 DeepSeek Harness 原生注册表提供给所有工作区；每个会话直接使用自己的工作目录。Runtime 启动成功后，将继续进入数据库连接与语义层向导。',
@@ -78,7 +107,7 @@ window.__ModuleLoader__.load({
     const en = {
       tab: 'Foggy Data Analysis',
       title: 'Foggy Java Data Analysis Engine',
-      intro: 'Manage the Foggy CLI, Launcher, Skills, and local Runtime inside DeepSeek Harness. Large components are downloaded on first initialization.',
+      intro: 'Manage Foggy private Python, CLI, Launcher, Skills, and the local Runtime inside DeepSeek Harness. Large components are downloaded on first initialization.',
       refresh: 'Refresh status',
       loading: 'Reading Foggy status…',
       failed: 'Foggy status is temporarily unavailable.',
@@ -100,11 +129,19 @@ window.__ModuleLoader__.load({
       unavailable: 'Unavailable',
       initialize: 'Initialize Foggy',
       repair: 'Re-download / Repair',
+      repairTitle: 'Component checks and repair',
+      repairPython: 'Check / repair private Python',
+      repairCli: 'Check / repair CLI',
+      repairLauncher: 'Check / repair Launcher',
+      repairAnalysisSkill: 'Check / repair analysis Skill',
+      diagnostics: 'Export diagnostics',
+      diagnosticsSaved: 'Diagnostics saved',
       start: 'Start Runtime',
       stop: 'Stop Runtime',
       working: 'Operation in progress…',
       progressWorking: 'Initializing Foggy…',
       progressPreflight: 'Checking prerequisites',
+      progressPython: 'Preparing private Python',
       progressCli: 'Preparing CLI',
       progressLauncher: 'Preparing Launcher',
       progressAnalysis: 'Preparing analysis Skill',
@@ -112,12 +149,30 @@ window.__ModuleLoader__.load({
       progressState: 'Writing install state',
       progressComplete: 'Initialization complete',
       progressFiles: 'files',
+      managedPrivate: 'Foggy private',
+      configuredOverride: 'Configured override',
       accepted: 'The operation started; this page will refresh automatically.',
       actionFailed: 'Operation failed',
       roots: 'Local directories',
       installRoot: 'Components',
       dataRoot: 'Data',
       profileStore: 'CLI profiles',
+      profileMigrationTitle: 'Legacy profile migration',
+      profileMigrationPending: 'Legacy temporary profiles were found. Migration transfers connection metadata and password environment-variable references, never password values.',
+      profileMigrationConflict: 'A legacy profile has a conflict or invalid format. Export diagnostics before continuing.',
+      migrateProfiles: 'Move to persistent store',
+      onboardingProgress: 'Database and semantic-layer progress',
+      noOnboarding: 'No database onboarding record yet. Invoke the Foggy onboarding Skill in a conversation.',
+      projectRoot: 'Workspace',
+      resumeInChat: 'Resume incomplete steps from a conversation in the matching workspace.',
+      stepPlanned: 'Plan',
+      stepDatasourceConfigured: 'Database connection',
+      stepDatasourceVerified: 'Connection test',
+      stepSchemaDiscovered: 'Schema discovery',
+      stepSemanticDrafted: 'Semantic draft',
+      stepSemanticValidated: 'Model validation',
+      stepSemanticPublished: 'Publish',
+      stepSemanticVerified: 'First query',
       runtimeUrl: 'Runtime URL',
       nextTitle: 'Next configuration',
       nextCopy: 'Skills are provided to every workspace through the native DeepSeek Harness registry, and each session uses its own working directory. After Runtime starts, the database connection and semantic-layer wizard comes next.',
@@ -133,7 +188,7 @@ window.__ModuleLoader__.load({
       .foggy-actions{display:flex;gap:8px;flex-wrap:wrap}.foggy-button{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-1);color:var(--dsw-alias-label-primary);font:inherit;border-radius:8px;padding:7px 12px;cursor:pointer}.foggy-button:hover{background:var(--dsw-alias-interactive-bg-hover)}.foggy-button:disabled{opacity:.55;cursor:not-allowed}.foggy-button-primary{border-color:var(--dsw-alias-state-business-primary);background:var(--dsw-alias-state-business-primary);color:white}
       .foggy-grid{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:10px}.foggy-card{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-3);border-radius:10px;padding:13px 14px}.foggy-card-head{display:flex;justify-content:space-between;gap:8px}.foggy-card strong{font-size:13px}.foggy-badge{font-size:11px;color:var(--dsw-alias-label-secondary)}.foggy-card code{display:block;margin-top:8px;color:var(--dsw-alias-label-tertiary);font-size:11px;overflow-wrap:anywhere}
       .foggy-progress{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-3);border-radius:10px;padding:13px 14px}.foggy-progress-head{display:flex;align-items:center;justify-content:space-between;gap:12px;font-size:13px}.foggy-progress-head strong{font-weight:600}.foggy-progress-percent{color:var(--dsw-alias-label-secondary);font-variant-numeric:tabular-nums}.foggy-progress-track{height:8px;margin-top:10px;border-radius:999px;background:var(--dsw-alias-bg-layer-1);overflow:hidden}.foggy-progress-fill{height:100%;border-radius:inherit;background:var(--dsw-alias-state-business-primary);transition:width .25s ease}.foggy-progress-meta{display:flex;justify-content:space-between;gap:12px;margin-top:8px;color:var(--dsw-alias-label-tertiary);font-size:11px;line-height:16px}.foggy-progress-file{min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
-      .foggy-message{margin:0;font-size:13px;line-height:20px;color:var(--dsw-alias-label-secondary)}.foggy-message[data-error=true]{color:var(--dsw-alias-state-error-primary)}.foggy-paths,.foggy-next{border-top:1px solid var(--dsw-alias-border-l2);padding-top:14px}.foggy-paths h4,.foggy-next h4{margin:0 0 8px;font-size:13px}.foggy-paths dl{display:grid;grid-template-columns:100px minmax(0,1fr);gap:6px 10px;margin:0}.foggy-paths dt{color:var(--dsw-alias-label-tertiary);font-size:12px}.foggy-paths dd{margin:0;min-width:0;overflow-wrap:anywhere;font-family:var(--ds-font-family-code);font-size:11px}.foggy-next p{margin:0;color:var(--dsw-alias-label-secondary);font-size:13px;line-height:20px}
+      .foggy-message{margin:0;font-size:13px;line-height:20px;color:var(--dsw-alias-label-secondary)}.foggy-message[data-error=true]{color:var(--dsw-alias-state-error-primary)}.foggy-paths,.foggy-next,.foggy-section{border-top:1px solid var(--dsw-alias-border-l2);padding-top:14px}.foggy-paths h4,.foggy-next h4,.foggy-section h4{margin:0 0 8px;font-size:13px}.foggy-paths dl{display:grid;grid-template-columns:100px minmax(0,1fr);gap:6px 10px;margin:0}.foggy-paths dt{color:var(--dsw-alias-label-tertiary);font-size:12px}.foggy-paths dd{margin:0;min-width:0;overflow-wrap:anywhere;font-family:var(--ds-font-family-code);font-size:11px}.foggy-next p,.foggy-section p{margin:0;color:var(--dsw-alias-label-secondary);font-size:13px;line-height:20px}.foggy-section-actions{display:flex;gap:8px;flex-wrap:wrap;margin-top:10px}.foggy-onboarding-head{display:flex;justify-content:space-between;gap:12px;align-items:start}.foggy-onboarding-head code{font-size:11px;color:var(--dsw-alias-label-tertiary);overflow-wrap:anywhere}.foggy-step-list{display:grid;grid-template-columns:repeat(4,minmax(0,1fr));gap:7px;margin-top:10px}.foggy-step{border:1px solid var(--dsw-alias-border-l2);border-radius:8px;padding:8px;font-size:11px;color:var(--dsw-alias-label-tertiary)}.foggy-step[data-state=completed]{border-color:color-mix(in srgb,var(--dsw-alias-state-success-primary) 45%,var(--dsw-alias-border-l2));color:var(--dsw-alias-state-success-primary)}.foggy-step[data-state=failed],.foggy-step[data-state=invalid]{border-color:var(--dsw-alias-state-error-primary);color:var(--dsw-alias-state-error-primary)}.foggy-warning{border:1px solid color-mix(in srgb,var(--dsw-alias-state-warning-primary) 55%,var(--dsw-alias-border-l2));background:color-mix(in srgb,var(--dsw-alias-state-warning-primary) 8%,transparent);border-radius:10px;padding:12px}
       @media (width<=680px){.foggy-grid{grid-template-columns:minmax(0,1fr)}}
     `
 
@@ -157,6 +212,16 @@ window.__ModuleLoader__.load({
       const stateText = kind === 'runtime'
         ? t(available ? 'installed' : 'missing')
         : t(available ? 'available' : 'unavailable')
+      const source = component?.source === 'managed'
+        ? t('managedPrivate')
+        : component?.source === 'override'
+          ? t('configuredOverride')
+          : null
+      const detail = [
+        component?.version || component?.output || '—',
+        component?.minimum ? `≥${component.minimum}` : null,
+        source,
+      ].filter(Boolean).join(' · ')
       return jsxs('div', {
         className: 'foggy-card',
         children: [
@@ -164,7 +229,8 @@ window.__ModuleLoader__.load({
             jsx('strong', { children: label }),
             jsx('span', { className: 'foggy-badge', children: stateText }),
           ] }),
-          jsx('code', { children: `${component?.version || component?.output || '—'}${component?.minimum ? ` · ≥${component.minimum}` : ''}` }),
+          jsx('code', { children: detail }),
+          component?.path ? jsx('code', { title: component.path, children: component.path }) : null,
         ],
       })
     }
@@ -174,6 +240,7 @@ window.__ModuleLoader__.load({
       const percent = Math.max(0, Math.min(100, Number(progress.percent) || 0))
       const phaseKeys = {
         preflight: 'progressPreflight',
+        python: 'progressPython',
         cli: 'progressCli',
         launcher: 'progressLauncher',
         'analysis-skill': 'progressAnalysis',
@@ -215,6 +282,41 @@ window.__ModuleLoader__.load({
       })
     }
 
+    function onboardingPanel(onboarding, t) {
+      const profile = onboarding?.profiles?.[0]
+      if (!profile) return jsxs('div', { className: 'foggy-section', children: [
+        jsx('h4', { children: t('onboardingProgress') }),
+        jsx('p', { children: t('noOnboarding') }),
+      ] })
+      const steps = [
+        ['planned', 'stepPlanned'],
+        ['datasourceConfigured', 'stepDatasourceConfigured'],
+        ['datasourceVerified', 'stepDatasourceVerified'],
+        ['schemaDiscovered', 'stepSchemaDiscovered'],
+        ['semanticDrafted', 'stepSemanticDrafted'],
+        ['semanticValidated', 'stepSemanticValidated'],
+        ['semanticPublished', 'stepSemanticPublished'],
+        ['semanticVerified', 'stepSemanticVerified'],
+      ]
+      const percent = Math.round(((profile.completedSteps || 0) / Math.max(profile.totalSteps || 8, 1)) * 100)
+      return jsxs('div', { className: 'foggy-section', children: [
+        jsxs('div', { className: 'foggy-onboarding-head', children: [
+          jsxs('div', { children: [
+            jsx('h4', { children: `${t('onboardingProgress')} · ${profile.profile}` }),
+            jsx('code', { children: `${t('projectRoot')}: ${profile.projectRoot || '—'}` }),
+          ] }),
+          jsx('span', { className: 'foggy-progress-percent', children: `${percent}%` }),
+        ] }),
+        jsx('div', { className: 'foggy-step-list', children: steps.map(([name, label]) => jsx('div', {
+          className: 'foggy-step',
+          'data-state': profile.steps?.[name]?.status || 'pending',
+          title: profile.steps?.[name]?.status || 'pending',
+          children: t(label),
+        }, name)) }),
+        profile.next?.status !== 'completed' ? jsx('p', { style: { marginTop: '9px' }, children: t('resumeInChat') }) : null,
+      ] })
+    }
+
     function FoggySettingsTab({ api, t }) {
       const [view, setView] = useState({ phase: 'loading', status: null, message: '', error: false })
 
@@ -239,7 +341,12 @@ window.__ModuleLoader__.load({
         setView((current) => ({ ...current, message: t('working'), error: false }))
         try {
           const result = unwrap(await api[method](), method)
-          setView((current) => ({ ...current, message: result.accepted ? t('accepted') : '', error: result.success === false }))
+          const message = result.accepted
+            ? t('accepted')
+            : result.path
+              ? `${t('diagnosticsSaved')}: ${result.path}`
+              : ''
+          setView((current) => ({ ...current, message, error: result.success === false }))
           await refresh()
         } catch (error) {
           setView((current) => ({ ...current, message: `${t('actionFailed')}: ${String(error.message || error)}`, error: true }))
@@ -268,6 +375,7 @@ window.__ModuleLoader__.load({
           jsxs('div', { className: 'foggy-state', children: [jsx('span', { className: 'foggy-dot', 'data-state': status.state }), jsx('span', { children: t(stateLabels[status.state] || 'notInstalled') })] }),
           jsxs('div', { className: 'foggy-actions', children: [
             jsx('button', { className: 'foggy-button', type: 'button', disabled: busy, onClick: refresh, children: t('refresh') }),
+            jsx('button', { className: 'foggy-button', type: 'button', disabled: busy, onClick: () => run('diagnostics'), children: t('diagnostics') }),
             status.state === 'not-installed' ? jsx('button', { className: 'foggy-button foggy-button-primary', type: 'button', disabled: busy, onClick: () => run('initialize'), children: t('initialize') }) : null,
             status.state !== 'not-installed' ? jsx('button', { className: 'foggy-button', type: 'button', disabled: busy, onClick: () => run('repair'), children: t('repair') }) : null,
             status.installed && !status.running && status.components.java.available ? jsx('button', { className: 'foggy-button foggy-button-primary', type: 'button', disabled: busy, onClick: () => run('runtimeStart'), children: t('start') }) : null,
@@ -285,6 +393,24 @@ window.__ModuleLoader__.load({
           componentCard(t('onboardingSkill'), status.components.onboardingSkill, 'runtime', t),
           componentCard(t('skillRegistry'), { installed: status.components.onboardingSkill?.provider === 'foggy-managed-skills', version: 'native' }, 'runtime', t),
         ] }),
+        jsxs('div', { className: 'foggy-section', children: [
+          jsx('h4', { children: t('repairTitle') }),
+          jsx('div', { className: 'foggy-section-actions', children: [
+            jsx('button', { className: 'foggy-button', type: 'button', disabled: busy, onClick: () => run('repairPython'), children: t('repairPython') }),
+            jsx('button', { className: 'foggy-button', type: 'button', disabled: busy, onClick: () => run('repairCli'), children: t('repairCli') }),
+            jsx('button', { className: 'foggy-button', type: 'button', disabled: busy, onClick: () => run('repairLauncher'), children: t('repairLauncher') }),
+            jsx('button', { className: 'foggy-button', type: 'button', disabled: busy, onClick: () => run('repairAnalysisSkill'), children: t('repairAnalysisSkill') }),
+          ] }),
+        ] }),
+        status.profileMigration?.pendingCount || status.profileMigration?.conflictCount ? jsxs('div', { className: 'foggy-warning', children: [
+          jsx('h4', { children: t('profileMigrationTitle') }),
+          jsx('p', { children: status.profileMigration.conflictCount ? t('profileMigrationConflict') : t('profileMigrationPending') }),
+          !status.profileMigration.conflictCount ? jsx('div', { className: 'foggy-section-actions', children: jsx('button', {
+            className: 'foggy-button foggy-button-primary', type: 'button', disabled: busy,
+            onClick: () => run('migrateProfiles'), children: t('migrateProfiles'),
+          }) }) : null,
+        ] }) : null,
+        onboardingPanel(status.onboarding, t),
         jsxs('div', { className: 'foggy-paths', children: [
           jsx('h4', { children: t('roots') }),
           jsxs('dl', { children: [