dsh-plugin-ui-font-family
DeepSeek Harness 网页插件：在 General 设置中提供一个 Font 行，包含四个内置预设、运行 dsh 的机器上已安装的字体，以及此部署向每个已连接浏览器提供的字体文件
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add dsh-plugin-ui-font-family@0.4.0
Plugin Ui Font Family 以 dsh-plugin-ui-font-family 发布，当前版本为 0.4.0。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
English | 中文
The Font row in General settings changes the font the interface and the conversation use. Users pick one of four presets, search the fonts installed on the machine running dsh, or upload font files that this deployment then serves to every connected browser. A choice applies immediately and persists. The package installs as a profile bundle: dsh plugin --profile web add dsh-plugin-ui-font-family adds the row, and removing the package removes it. Code blocks keep the harness's own monospace stack.
dsh plugin --profile web add dsh-plugin-ui-font-family
dsh plugin --profile web remove dsh-plugin-ui-font-family
The package declares dsh.bundle.patch, so add records it in the profile's dsh.profile.bundles and applies its layer, which inserts the ui-font-family row into the composition. Restart dsh web and the row appears in Settings → General, under Font size.
Installing from npm uses the published artifacts. Installing from a git ref or a source directory builds the package on that machine, and pnpm blocks the build script until the profile's pnpm-workspace.yaml allows it; follow the allowBuilds line the first attempt prints.
dsh, with a search field and per-row previews drawn in the font each row names..ttf .otf .woff .woff2 .ttc, 20 MiB each by default), deletes them, and shows the directory uploaded files live in.The Font row in General settings
Fields are optional and belong in the profile's own $DSH_HOME/profiles/web/cordis.patch.yml:
- id: ui-font-family
config:
defaultFamily:
source: preset
id: serif
| Field | Default | Meaning |
|---|---|---|
fontDir | $DSH_HOME/fonts | Directory holding uploaded fonts. |
dshHome | $DSH_HOME, then ~/.dsh | Overrides the harness home this package resolves paths against. |
systemFontDirs | [] | Extra directories to scan, after the platform's own. |
scanSystemFonts | true | Scans the platform directories; the directories named in systemFontDirs are still scanned. |
maxUploadBytes | 20971520 | Largest accepted upload, in bytes. The page refuses a larger file before reading it. |
defaultFamily | { source: preset, id: default } | Font used until a user chooses one, and what "restore default" returns to. |
defaultFamily.source is preset, system, or upload, with id naming a preset, a CSS family name, or a stored font. A user's own choice always wins over it. A value this package cannot act on — a non-integer limit, a preset id this build does not ship — fails at load rather than at first use.
$DSH_HOME/fonts, which is ~/.dsh/fonts by default, next to settings.yaml. The management dialog shows the path in use.
<family>-<16 hex characters>.<extension>; the extension follows the bytes, not the uploaded name. A write stages its bytes and renames them into place.dsh, so every browser connected to this deployment can use them.dsh plugin --profile web remove dsh-plugin-ui-font-family
That removes the row and stops serving the fonts. Two things stay behind:
$DSH_HOME/fonts. Delete that directory to remove them, or keep it and install the package again later.$DSH_HOME/settings.yaml under ui-font-family. It is inert without the package and can be deleted with it.The installed-font list describes the machine running dsh and is served only to requests from that machine, so a browser on another machine gets no system group. Remote users can still choose an uploaded font, and a deployment can set defaultFamily to a system family name that exists on the browser's own machine: the Host validates the name for safe output, not for presence.
A reverse proxy running on the Host's machine makes remote requests arrive from a local address, which counts as the same machine. Withhold the installed-font list from such a deployment by setting scanSystemFonts: false.
The package has a Host half and a browser half, joined by package.json (dsh.client and the ./client export). The Host registers the settings section, scans font directories, answers the HTTP routes, and injects the pre-plugin row; the browser renders the settings row and projects every change onto the document.
| Path | Role |
|---|---|
src/index.ts | Host plugin body: config resolution, the settings section, the index-injection row, route registration. |
src/font-routes.ts | Catalogue, download, upload, and delete routes, with the same-origin and same-machine rules. |
src/user-fonts.ts | The upload directory: storing, listing, and deleting files, with a per-file identity cache. |
src/system-fonts.ts | The installed-font index: platform directories, a bounded concurrent scan, and the same identity cache. |
src/font-selection.ts | Resolving a selection to families and placing them ahead of the harness stack; shared by both halves. |
src/font-settings.ts, src/font-settings-schema.ts | The settings namespace, the family-name rule, and the schema the Host registers. |
src/boot-font.ts, src/font-face.ts | The pre-plugin row and the @font-face block written into the served page. |
src/client/ | The row, picker, management dialog, runtime, and the theme token layer that installs the stack. |
Two decisions shape the rest. The boot row declares @font-face for the selected stored font only, because an index response cannot wait for a file read and the browser half declares the rest from the catalogue it reads on mount. Family names come from font files and from the settings document, so a character rule gates every name before it reaches the stylesheet or the served script.
None, as the package is a browser-side UI plugin layer that registers nothing model-facing.
None; this package neither assembles nor sends a provider request.
These limits are current package constraints; they define what a font cannot change and what this deployment does not do.
.ttc) reports one family per contained face — choosing any of them downloads the whole collection file.maxUploadBytes bounds one file; nothing bounds the size of the directory.dsh — a security rule rather than a config field, so a browser elsewhere sees no system group even when it could use those fonts.dsh this way must set scanSystemFonts: false..staging file — every read ignores it and it is never served; delete it by hand if it is in the way.system default exist for that deployment shape.Runtime invariant: No runtime invariant companion is published because every remembered family name is re-validated against the file's identity before reuse, so the catalogue cannot report a file the directory no longer holds.