dsh-diff-approval 0.28.0 → 0.29.1

package/lib/index.js

@@ -1,6 +1,7 @@
 import { createRequire } from "node:module";
-import { mkdir, readFile, readdir, rename, rm, writeFile } from "node:fs/promises";
+import { mkdir, readFile, readdir, rename, rm, stat, writeFile } from "node:fs/promises";
 import { dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
+import { fileURLToPath } from "node:url";
 import { dshHomePath, expandHomePath } from "@deepseek-ai/dsh-home-paths";
 import "@deepseek-ai/cordis";
 import { spawn } from "node:child_process";
@@ -1318,6 +1319,10 @@ const COMMENT_SKILL = {
 - 只谈这几行（最多带上直接相邻的一两行），不要扩到整个文件或整个任务。
 - 不超过 3 行。
 - 行与行之间不要空行：讨论区按代码行排版，一个空行就占掉一整行高度，看起来像代码里的空洞。
+- **不要用 Markdown 的表格**（也别用列表、标题、围栏代码块这类块级语法）：讨论区是**按行**排版、行高按行算的，
+  表格进来会读成一堆竖线和横线，还会把块高算错、把下面的代码顶开。要对比几项就写成一行一句，
+  例如「A 走快路径；B 走慢路径」，需要多行对比就直接说"这条在批注里说不清，去下方输入框聊"。
+  行内语法只有 \`代码\` 和 **加粗** 是被支持的。
 - 要引用代码就写 \`文件:行号\`，不要把整段贴回来。
 - 回答直接显示在批注下方的小讨论区里，所以不要写"如你所见""上面提到"这类指代。
 - 不确定就说不确定，并说清需要看哪一段。
@@ -1326,6 +1331,55 @@ const COMMENT_SKILL = {
 	source: "runtime"
 };
 //#endregion
+//#region lib/types/font-slices.js
+/**
+* The bundled code font: what the panel asks for, and where the files live.
+*
+* One CJK glyph is exactly twice one Latin glyph in this face, which is what
+* puts code and Chinese comments on the same character grid. No system stack can
+* do that: the shell's code font resolves hanzi to a proportional face
+* (`"PingFang SC"`, `"Microsoft YaHei"`), so comments drift out of column on
+* Windows and Android.
+*
+* Both halves need the same names — the host serves the files under
+* {@link FONT_ROUTE}, the client asks for {@link FONT_FAMILY} — so they live
+* here rather than being written twice.
+*
+* @module dsh-diff-approval/font-slices
+*/
+/**
+* The family the client declares and asks for.
+*
+* It names the actual face — this is JetBrains Maple Mono, subset and sliced by
+* this plugin — and carries the project suffix so it cannot collide with a copy
+* of the upstream font installed on the reader's machine. That collision would
+* be silent and one-sided: a locally installed font wins over a webfont of the
+* same name, so the slices would never be fetched and the bytes on screen would
+* be someone else's build. The trailing marker also keeps the upstream names out
+* of a user-visible primary name, which is what the OFL asks of a modified
+* version (Maple Mono declares `Maple Mono` as a Reserved Font Name).
+*/
+const FONT_FAMILY = "JetBrains Maple Mono for DSH";
+/**
+* The URL prefix the host mounts. The client resolves it against the document's
+* own origin, so a tunnel or a non-default port needs no configuration.
+*/
+const FONT_ROUTE = "/dsh-diff-approval/fonts";
+[
+	`"${FONT_FAMILY}"`,
+	"\"SF Mono\"",
+	"\"JetBrains Mono\"",
+	"\"Fira Code\"",
+	"Consolas",
+	"\"Liberation Mono\"",
+	"Menlo",
+	"Courier",
+	"\"PingFang SC\"",
+	"\"Microsoft YaHei\""
+].join(", ");
+/** Where the generated slices and their manifest live, relative to `lib/`. */
+const FONT_ASSET_DIR = "../assets/fonts";
+//#endregion
 //#region lib/types/vcs.js
 /**
 * Version-control integration, host half: detect which VCS (git/svn/p4)
@@ -3216,6 +3270,15 @@ function apply(ctx, config) {
 		const service = ctx.connection;
 		return typeof service.register === "function" ? service.register(ctx, DIFF_APPROVAL_CHANNEL, handle, { authority: "trusted-host" }) : service.rpc.handle(DIFF_APPROVAL_CHANNEL, handle, { authority: "trusted-host" });
 	}, "diff-approval: review channel");
+	ctx.effect(() => {
+		const route = fontRoute((message) => ctx.logger.warn(message));
+		const server = ctx.get("webServer");
+		if (typeof server?.register !== "function") {
+			ctx.logger.debug("diff-approval: no web server, so the bundled code font is not served");
+			return () => {};
+		}
+		return server.register(route);
+	}, "diff-approval: code font slices");
 	ctx.effect(() => ctx.on("fs/edit-intent", async (target, actor, next) => {
 		await stashEditorIntent(target, actor, "edit");
 		return next();
@@ -3355,5 +3418,120 @@ function openTargetOf(payload) {
 		action
 	};
 }
+/** The font slices the host is willing to serve, read once from the manifest. */
+let fontSlicesPromise;
+/** Read `assets/fonts/manifest.json` next to the built bundle. */
+async function loadFontSlices() {
+	try {
+		const dir = fileURLToPath(new URL(FONT_ASSET_DIR, import.meta.url));
+		const text = await readFile(join(dir, "manifest.json"), "utf8");
+		const manifest = JSON.parse(text);
+		const slices = /* @__PURE__ */ new Map();
+		for (const slice of manifest.slices ?? []) slices.set(slice.file, slice);
+		return slices;
+	} catch {
+		return;
+	}
+}
+/**
+* The manifest, cached for the life of the host — but only once it has been
+* read. A missing `assets/fonts` is deliberately not cached: a deployment that
+* puts the assets beside a running bundle (a profile reinstall after the
+* package's file list grew) starts serving slices on the next request instead
+* of needing a restart, at the cost of one failed read per request until then.
+*/
+async function fontSlices() {
+	if (fontSlicesPromise === void 0) {
+		const pending = loadFontSlices();
+		fontSlicesPromise = pending;
+		const slices = await pending;
+		if (slices === void 0) fontSlicesPromise = void 0;
+		return slices;
+	}
+	return fontSlicesPromise;
+}
+/**
+* Drop the cached slice list, so the next request reads the manifest again.
+*
+* The cache exists so a served page costs one read, which makes it state that
+* outlives a test: tests that need the "no manifest" path call this between
+* cases. Nothing in the app calls it.
+*/
+function resetFontSlicesForTests() {
+	fontSlicesPromise = void 0;
+}
+/**
+* Answer one font request. Exported so the route's behaviour is testable
+* without a listening server: the manifest itself is answered from the parsed
+* list, only files that list names are ever read, and everything else —
+* including a path traversal attempt — is a 404.
+*
+* @param req - the request, for its path.
+* @param res - the response, whose lifecycle this owns.
+* @param nominate - how to report a missing manifest, called at most once per
+*   route by {@link fontRoute}. Without the manifest every slice is a 404, and
+*   that is a deployment problem the reader cannot see from the panel: the
+*   switch is on, the font is simply absent, and nothing else says why.
+*/
+async function serveFontSlice(req, res, nominate) {
+	const slices = await fontSlices();
+	if (slices === void 0) {
+		nominate?.(`diff-approval: no code-font manifest at ${join(fileURLToPath(new URL(FONT_ASSET_DIR, import.meta.url)), "manifest.json")}, so the bundled font cannot be served (reinstall the plugin so its assets arrive, then restart the host)`);
+		res.statusCode = 404;
+		res.end("font unavailable");
+		return;
+	}
+	const name = decodeURIComponent((req.url ?? "").split("?")[0] ?? "").split("/").pop() ?? "";
+	if (name === "manifest.json") {
+		res.statusCode = 200;
+		res.setHeader("content-type", "application/json; charset=utf-8");
+		res.setHeader("cache-control", "no-store");
+		res.end(JSON.stringify({ slices: [...slices.values()].map(({ file, unicodeRange, weight }) => ({
+			file,
+			unicodeRange,
+			weight
+		})) }));
+		return;
+	}
+	const slice = slices.get(name);
+	if (slice === void 0 || !/^[a-z]+-[a-z0-9-]*\.woff2$/.test(name)) {
+		res.statusCode = 404;
+		res.end("no such font slice");
+		return;
+	}
+	try {
+		const path = join(fileURLToPath(new URL(FONT_ASSET_DIR, import.meta.url)), slice.file);
+		const info = await stat(path);
+		const body = await readFile(path);
+		res.statusCode = 200;
+		res.setHeader("content-type", "font/woff2");
+		res.setHeader("content-length", String(info.size));
+		res.setHeader("cache-control", "public, max-age=31536000, immutable");
+		res.end(body);
+	} catch {
+		res.statusCode = 404;
+		res.end("font slice missing");
+	}
+}
+/**
+* The route serving the bundled font.
+*
+* @param warn - where the once-per-route "no manifest beside the bundle" line
+*   goes. It is the only signal a reader's switch gives when the deployment,
+*   not the switch, is what is missing.
+* @returns the prefix route.
+*/
+function fontRoute(warn) {
+	let reported = false;
+	return {
+		kind: "prefix",
+		path: FONT_ROUTE,
+		handler: (req, res) => serveFontSlice(req, res, (message) => {
+			if (reported) return;
+			reported = true;
+			warn(message);
+		})
+	};
+}
 //#endregion
-export { COMMENT_SKILL_NAME, DIFF_APPROVAL_CHANNEL, PendingDiffStore, PendingPersistence, apply, defaultOpenPath, defaultStorageDir, inject, name };
+export { COMMENT_SKILL_NAME, DIFF_APPROVAL_CHANNEL, PendingDiffStore, PendingPersistence, apply, defaultOpenPath, defaultStorageDir, fontRoute, inject, name, resetFontSlicesForTests, serveFontSlice };

package/lib/types/client/code-font.d.ts

@@ -0,0 +1,70 @@
+/**
+ * Load the bundled code font and put the diff's code on its grid.
+ *
+ * The face is dual-width: one CJK glyph is exactly twice one Latin glyph, so
+ * code and Chinese comments share a character grid. The shell's own code font
+ * cannot do that — it resolves hanzi to a proportional face (`"PingFang SC"`,
+ * `"Microsoft YaHei"`), so a comment that starts in column 40 of the code ends
+ * somewhere else entirely on Windows and Android, where the browser has no
+ * monospaced CJK face at all.
+ *
+ * The rule is one selector wide: **the code column only**, `.lines`. Comment
+ * bubbles, the file list and the panel's chrome keep the shell's font stack; the
+ * code is where the grid is the point.
+ *
+ * **Off until asked for.** The slices are tens of kilobytes for ordinary text
+ * and up to ~120 KB for a rare character, which is traffic the reader pays for,
+ * so the Settings switch is the gate and its description says so. Off is not
+ * just "no rule": nothing is fetched at all, so the default panel is byte-for-
+ * byte and pixel-for-pixel what it was before this existed. A browser fetches a
+ * `@font-face` only when a rule uses it, which is what keeps an enabled pure-
+ * ASCII file down to the one Latin slice.
+ *
+ * The face's own `calt` stays on, so `->` and `=>` draw as the arrows JetBrains
+ * Mono already draws everywhere else in this UI. The upstream project also
+ * builds a no-ligature variant (`…-NL-…`) if that ever stops being wanted; it
+ * would mean re-slicing, not a CSS override, because `calt` is what carries the
+ * arrows.
+ *
+ * @module dsh-diff-approval/client/code-font
+ */
+/** One slice as the manifest lists it. */
+interface ListedSlice {
+    readonly file: string;
+    readonly unicodeRange: string;
+    readonly weight: number;
+}
+/**
+ * The `@font-face` rules for every slice of every weight, followed by the one
+ * rule that uses them: the code column.
+ *
+ * `font-display: swap` rather than `block`: the code is readable in the system
+ * font immediately, and swapping when the slices land only changes the column
+ * width, never the row height that the virtual window and the jump math are
+ * built on.
+ *
+ * @param slices - the manifest's slice list.
+ * @param codeClass - the class the code table carries, defaulting to the one the
+ *   panel's stylesheet exports. It is a parameter so a test can pin the emitted
+ *   selector without importing the panel.
+ */
+export declare function codeFontCss(slices: readonly ListedSlice[], codeClass?: string): string;
+/**
+ * Drop the cached slice list and the injected rules.
+ *
+ * The manifest is read once per page on purpose — it never changes under a live
+ * client — so this exists for tests, which need each case to start from the
+ * same empty state. Nothing in the app calls it.
+ */
+export declare function resetCodeFontForTests(): void;
+/**
+ * Follow the preference for as long as the client lives: apply it now, and again
+ * whenever the Settings switch flips. A host without the slices (a source
+ * checkout that never ran the font build, or an install that arrived without
+ * `assets/`) keeps the system stack, and says so once on the console: the
+ * switch is on, so silence would read as "the font does nothing".
+ *
+ * @returns a disposer that stops following and removes the injected rules.
+ */
+export declare function attachCodeFont(): () => void;
+export {};

package/lib/types/client/locales.d.ts

@@ -46,6 +46,8 @@ export declare const zh: {
     'panel.diffLineHeightDesc': string;
     'panel.mdPreview': string;
     'panel.mdPreviewDesc': string;
+    'panel.codeFont': string;
+    'panel.codeFontDesc': string;
     'panel.mdMaxWidth': string;
     'panel.mdMaxWidthDesc': string;
     'panel.diffAddColor': string;
@@ -96,6 +98,9 @@ export declare const zh: {
     'row.create': string;
     'row.failed': string;
     'row.dismiss': string;
+    'row.keepListed': string;
+    'row.keepRemove': string;
+    'row.revertRemove': string;
     'row.added': string;
     'row.removed': string;
     'action.keep': string;
@@ -216,6 +221,7 @@ export declare const zh: {
     'panel.addNoEntries': string;
     'panel.addMissing': string;
     'panel.addOutside': string;
+    'panel.addNotAFile': string;
     'panel.addFailed': string;
     'action.cancel': string;
     'action.collapseRow': string;
@@ -278,6 +284,8 @@ export declare const en: {
     'panel.diffLineHeightDesc': string;
     'panel.mdPreview': string;
     'panel.mdPreviewDesc': string;
+    'panel.codeFont': string;
+    'panel.codeFontDesc': string;
     'panel.mdMaxWidth': string;
     'panel.mdMaxWidthDesc': string;
     'panel.diffAddColor': string;
@@ -328,6 +336,9 @@ export declare const en: {
     'row.create': string;
     'row.failed': string;
     'row.dismiss': string;
+    'row.keepListed': string;
+    'row.keepRemove': string;
+    'row.revertRemove': string;
     'row.added': string;
     'row.removed': string;
     'action.keep': string;
@@ -448,6 +459,7 @@ export declare const en: {
     'panel.addNoEntries': string;
     'panel.addMissing': string;
     'panel.addOutside': string;
+    'panel.addNotAFile': string;
     'panel.addFailed': string;
     'action.cancel': string;
     'action.collapseRow': string;

package/lib/types/client/settings.d.ts

@@ -217,6 +217,21 @@ export declare function commentModeEnabled(): boolean;
 export declare const COMMENT_MODE_CHANGED_EVENT = "diff-approval:comment-mode";
 /** Persist the comment-mode preference. */
 export declare function setCommentModeEnabled(value: boolean): void;
+/**
+ * Whether the diff's code uses the font this plugin bundles.
+ *
+ * Defaults to **off**: the bundled face is JetBrains Maple Mono subset and
+ * sliced into 138 woff2 files, and a page pulls the slices its characters land
+ * in — tens of kilobytes for a comment, up to ~120 KB for a rare character. That
+ * is real traffic, so it is the reader's decision, not a default they discover.
+ * Only an explicit `'1'` enables it.
+ * @returns whether the bundled code font is enabled.
+ */
+export declare function codeFontEnabled(): boolean;
+/** Window event: the bundled code font was turned on or off (see {@link setCodeFontEnabled}). */
+export declare const CODE_FONT_CHANGED_EVENT = "diff-approval:code-font";
+/** Persist the bundled-code-font preference. */
+export declare function setCodeFontEnabled(value: boolean): void;
 /**
  * The Markdown-preview content max width, in pixels (single column). Defaults to
  * 800; the double-column view totals 2x this. An out-of-range or non-integer

package/lib/types/comment-skill.d.ts

@@ -21,7 +21,7 @@ export declare const COMMENT_SKILL_DESCRIPTION: string;
 /** Extra routing guidance for the catalog. */
 export declare const COMMENT_SKILL_WHEN_TO_USE: string;
 /** The instruction body the agent loads, in the language its comments arrive in. */
-export declare const COMMENT_SKILL_CONTENT = "# \u56DE\u7B54\u4EE3\u7801\u6279\u6CE8\n\n\u6D88\u606F\u4EE5 `[\u8BC4\u8BBA] (path:lines)` \u5F00\u5934\u65F6\uFF0C\u5C31\u662F diff \u9762\u677F\u91CC\u5BF9\u90A3\u51E0\u884C\u4EE3\u7801\u63D0\u7684\u6279\u6CE8\u3002\u6309\u4E0B\u9762\u7684\u89C4\u5219\u56DE\u7B54\uFF1A\n\n- \u53EA\u8C08\u8FD9\u51E0\u884C\uFF08\u6700\u591A\u5E26\u4E0A\u76F4\u63A5\u76F8\u90BB\u7684\u4E00\u4E24\u884C\uFF09\uFF0C\u4E0D\u8981\u6269\u5230\u6574\u4E2A\u6587\u4EF6\u6216\u6574\u4E2A\u4EFB\u52A1\u3002\n- \u4E0D\u8D85\u8FC7 3 \u884C\u3002\n- \u884C\u4E0E\u884C\u4E4B\u95F4\u4E0D\u8981\u7A7A\u884C\uFF1A\u8BA8\u8BBA\u533A\u6309\u4EE3\u7801\u884C\u6392\u7248\uFF0C\u4E00\u4E2A\u7A7A\u884C\u5C31\u5360\u6389\u4E00\u6574\u884C\u9AD8\u5EA6\uFF0C\u770B\u8D77\u6765\u50CF\u4EE3\u7801\u91CC\u7684\u7A7A\u6D1E\u3002\n- \u8981\u5F15\u7528\u4EE3\u7801\u5C31\u5199 `\u6587\u4EF6:\u884C\u53F7`\uFF0C\u4E0D\u8981\u628A\u6574\u6BB5\u8D34\u56DE\u6765\u3002\n- \u56DE\u7B54\u76F4\u63A5\u663E\u793A\u5728\u6279\u6CE8\u4E0B\u65B9\u7684\u5C0F\u8BA8\u8BBA\u533A\u91CC\uFF0C\u6240\u4EE5\u4E0D\u8981\u5199\"\u5982\u4F60\u6240\u89C1\"\"\u4E0A\u9762\u63D0\u5230\"\u8FD9\u7C7B\u6307\u4EE3\u3002\n- \u4E0D\u786E\u5B9A\u5C31\u8BF4\u4E0D\u786E\u5B9A\uFF0C\u5E76\u8BF4\u6E05\u9700\u8981\u770B\u54EA\u4E00\u6BB5\u3002\n- 3 \u884C\u91CC\u8BF4\u4E0D\u6E05\uFF08\u8981\u5C55\u5F00\u3001\u8981\u770B\u66F4\u591A\u4EE3\u7801\u3001\u8981\u6765\u56DE\u51E0\u8F6E\uFF09\uFF0C\u5C31\u76F4\u8BF4\u4E00\u53E5\"\u8FD9\u6761\u5728\u6279\u6CE8\u91CC\u8BF4\u4E0D\u6E05\uFF0C\u53BB\u4E0B\u65B9\u53D1\u6D88\u606F\u7684\u8F93\u5165\u6846\u91CC\u804A\"\uFF0C\u4E0D\u8981\u5728\u6279\u6CE8\u91CC\u786C\u585E\u957F\u56DE\u7B54\u3002\n";
+export declare const COMMENT_SKILL_CONTENT = "# \u56DE\u7B54\u4EE3\u7801\u6279\u6CE8\n\n\u6D88\u606F\u4EE5 `[\u8BC4\u8BBA] (path:lines)` \u5F00\u5934\u65F6\uFF0C\u5C31\u662F diff \u9762\u677F\u91CC\u5BF9\u90A3\u51E0\u884C\u4EE3\u7801\u63D0\u7684\u6279\u6CE8\u3002\u6309\u4E0B\u9762\u7684\u89C4\u5219\u56DE\u7B54\uFF1A\n\n- \u53EA\u8C08\u8FD9\u51E0\u884C\uFF08\u6700\u591A\u5E26\u4E0A\u76F4\u63A5\u76F8\u90BB\u7684\u4E00\u4E24\u884C\uFF09\uFF0C\u4E0D\u8981\u6269\u5230\u6574\u4E2A\u6587\u4EF6\u6216\u6574\u4E2A\u4EFB\u52A1\u3002\n- \u4E0D\u8D85\u8FC7 3 \u884C\u3002\n- \u884C\u4E0E\u884C\u4E4B\u95F4\u4E0D\u8981\u7A7A\u884C\uFF1A\u8BA8\u8BBA\u533A\u6309\u4EE3\u7801\u884C\u6392\u7248\uFF0C\u4E00\u4E2A\u7A7A\u884C\u5C31\u5360\u6389\u4E00\u6574\u884C\u9AD8\u5EA6\uFF0C\u770B\u8D77\u6765\u50CF\u4EE3\u7801\u91CC\u7684\u7A7A\u6D1E\u3002\n- **\u4E0D\u8981\u7528 Markdown \u7684\u8868\u683C**\uFF08\u4E5F\u522B\u7528\u5217\u8868\u3001\u6807\u9898\u3001\u56F4\u680F\u4EE3\u7801\u5757\u8FD9\u7C7B\u5757\u7EA7\u8BED\u6CD5\uFF09\uFF1A\u8BA8\u8BBA\u533A\u662F**\u6309\u884C**\u6392\u7248\u3001\u884C\u9AD8\u6309\u884C\u7B97\u7684\uFF0C\n  \u8868\u683C\u8FDB\u6765\u4F1A\u8BFB\u6210\u4E00\u5806\u7AD6\u7EBF\u548C\u6A2A\u7EBF\uFF0C\u8FD8\u4F1A\u628A\u5757\u9AD8\u7B97\u9519\u3001\u628A\u4E0B\u9762\u7684\u4EE3\u7801\u9876\u5F00\u3002\u8981\u5BF9\u6BD4\u51E0\u9879\u5C31\u5199\u6210\u4E00\u884C\u4E00\u53E5\uFF0C\n  \u4F8B\u5982\u300CA \u8D70\u5FEB\u8DEF\u5F84\uFF1BB \u8D70\u6162\u8DEF\u5F84\u300D\uFF0C\u9700\u8981\u591A\u884C\u5BF9\u6BD4\u5C31\u76F4\u63A5\u8BF4\"\u8FD9\u6761\u5728\u6279\u6CE8\u91CC\u8BF4\u4E0D\u6E05\uFF0C\u53BB\u4E0B\u65B9\u8F93\u5165\u6846\u804A\"\u3002\n  \u884C\u5185\u8BED\u6CD5\u53EA\u6709 `\u4EE3\u7801` \u548C **\u52A0\u7C97** \u662F\u88AB\u652F\u6301\u7684\u3002\n- \u8981\u5F15\u7528\u4EE3\u7801\u5C31\u5199 `\u6587\u4EF6:\u884C\u53F7`\uFF0C\u4E0D\u8981\u628A\u6574\u6BB5\u8D34\u56DE\u6765\u3002\n- \u56DE\u7B54\u76F4\u63A5\u663E\u793A\u5728\u6279\u6CE8\u4E0B\u65B9\u7684\u5C0F\u8BA8\u8BBA\u533A\u91CC\uFF0C\u6240\u4EE5\u4E0D\u8981\u5199\"\u5982\u4F60\u6240\u89C1\"\"\u4E0A\u9762\u63D0\u5230\"\u8FD9\u7C7B\u6307\u4EE3\u3002\n- \u4E0D\u786E\u5B9A\u5C31\u8BF4\u4E0D\u786E\u5B9A\uFF0C\u5E76\u8BF4\u6E05\u9700\u8981\u770B\u54EA\u4E00\u6BB5\u3002\n- 3 \u884C\u91CC\u8BF4\u4E0D\u6E05\uFF08\u8981\u5C55\u5F00\u3001\u8981\u770B\u66F4\u591A\u4EE3\u7801\u3001\u8981\u6765\u56DE\u51E0\u8F6E\uFF09\uFF0C\u5C31\u76F4\u8BF4\u4E00\u53E5\"\u8FD9\u6761\u5728\u6279\u6CE8\u91CC\u8BF4\u4E0D\u6E05\uFF0C\u53BB\u4E0B\u65B9\u53D1\u6D88\u606F\u7684\u8F93\u5165\u6846\u91CC\u804A\"\uFF0C\u4E0D\u8981\u5728\u6279\u6CE8\u91CC\u786C\u585E\u957F\u56DE\u7B54\u3002\n";
 /** One runtime skill contribution, in the shape `ctx.skills.register` takes. */
 export interface CommentSkillRegistration {
     /** Kebab-case identity the agent loads by. */

package/lib/types/font-slices.d.ts

@@ -0,0 +1,58 @@
+/**
+ * The bundled code font: what the panel asks for, and where the files live.
+ *
+ * One CJK glyph is exactly twice one Latin glyph in this face, which is what
+ * puts code and Chinese comments on the same character grid. No system stack can
+ * do that: the shell's code font resolves hanzi to a proportional face
+ * (`"PingFang SC"`, `"Microsoft YaHei"`), so comments drift out of column on
+ * Windows and Android.
+ *
+ * Both halves need the same names — the host serves the files under
+ * {@link FONT_ROUTE}, the client asks for {@link FONT_FAMILY} — so they live
+ * here rather than being written twice.
+ *
+ * @module dsh-diff-approval/font-slices
+ */
+/**
+ * The family the client declares and asks for.
+ *
+ * It names the actual face — this is JetBrains Maple Mono, subset and sliced by
+ * this plugin — and carries the project suffix so it cannot collide with a copy
+ * of the upstream font installed on the reader's machine. That collision would
+ * be silent and one-sided: a locally installed font wins over a webfont of the
+ * same name, so the slices would never be fetched and the bytes on screen would
+ * be someone else's build. The trailing marker also keeps the upstream names out
+ * of a user-visible primary name, which is what the OFL asks of a modified
+ * version (Maple Mono declares `Maple Mono` as a Reserved Font Name).
+ */
+export declare const FONT_FAMILY = "JetBrains Maple Mono for DSH";
+/**
+ * The URL prefix the host mounts. The client resolves it against the document's
+ * own origin, so a tunnel or a non-default port needs no configuration.
+ */
+export declare const FONT_ROUTE = "/dsh-diff-approval/fonts";
+/** One weight of the face. Both are the same subset, so the ranges are shared. */
+export interface FontFace {
+    /** File-name infix: `regular-hanzi-000.woff2`. */
+    readonly name: string;
+    /** The weight the CSS declares; the slice files are per weight. */
+    readonly weight: number;
+}
+/** Regular carries the code; the Semibold only backs emphasised text. */
+export declare const FONT_FACES: readonly FontFace[];
+/**
+ * The code font stack. The bundled family comes first so its 2:1 grid wins,
+ * and the previous stack stays behind it for anything the slices do not cover —
+ * Korean, CJK Ext-A/B, and the handful of codepoints this face leaves unmapped.
+ */
+export declare const FONT_STACK: string;
+/** One slice file as the manifest records it. */
+export interface FontSlice {
+    readonly file: string;
+    readonly bytes: number;
+    readonly unicodeRange: string;
+    readonly kind: 'latin' | 'punctuation' | 'symbols' | 'cjk-punctuation' | 'hanzi';
+    readonly weight: number;
+}
+/** Where the generated slices and their manifest live, relative to `lib/`. */
+export declare const FONT_ASSET_DIR = "../assets/fonts";

package/lib/types/index.d.ts

@@ -73,3 +73,49 @@ export interface DiffApprovalConfig {
  * @param config - optional plugin configuration (`storageDir` relocates durable state).
  */
 export declare function apply(ctx: Context, config?: DiffApprovalConfig): void;
+/** The parts of node's request the font handler reads. */
+interface WebServerRequest {
+    readonly url?: string | undefined;
+    readonly method?: string | undefined;
+}
+/** The parts of node's response the font handler writes. */
+interface WebServerResponse {
+    statusCode: number;
+    setHeader(name: string, value: string): unknown;
+    end(body?: Uint8Array | string): unknown;
+}
+/**
+ * Drop the cached slice list, so the next request reads the manifest again.
+ *
+ * The cache exists so a served page costs one read, which makes it state that
+ * outlives a test: tests that need the "no manifest" path call this between
+ * cases. Nothing in the app calls it.
+ */
+export declare function resetFontSlicesForTests(): void;
+/**
+ * Answer one font request. Exported so the route's behaviour is testable
+ * without a listening server: the manifest itself is answered from the parsed
+ * list, only files that list names are ever read, and everything else —
+ * including a path traversal attempt — is a 404.
+ *
+ * @param req - the request, for its path.
+ * @param res - the response, whose lifecycle this owns.
+ * @param nominate - how to report a missing manifest, called at most once per
+ *   route by {@link fontRoute}. Without the manifest every slice is a 404, and
+ *   that is a deployment problem the reader cannot see from the panel: the
+ *   switch is on, the font is simply absent, and nothing else says why.
+ */
+export declare function serveFontSlice(req: WebServerRequest, res: WebServerResponse, nominate?: (message: string) => void): Promise<void>;
+/**
+ * The route serving the bundled font.
+ *
+ * @param warn - where the once-per-route "no manifest beside the bundle" line
+ *   goes. It is the only signal a reader's switch gives when the deployment,
+ *   not the switch, is what is missing.
+ * @returns the prefix route.
+ */
+export declare function fontRoute(warn: (message: string) => void): {
+    kind: 'prefix';
+    path: string;
+    handler: (req: WebServerRequest, res: WebServerResponse) => Promise<void>;
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-diff-approval",
-  "version": "0.28.0",
+  "version": "0.29.1",
   "description": "DeepSeek Harness plugin: pending-edit review with whole-file diff and Keep/Revert",
   "packageManager": "pnpm@11.21.0",
   "author": "Wu Zhiwei",
@@ -31,6 +31,11 @@
     "lib/index.js",
     "lib/client.js",
     "lib/types/**/*.d.ts",
+    "assets/fonts/*.woff2",
+    "assets/fonts/manifest.json",
+    "assets/fonts/OFL.txt",
+    "assets/fonts/FONTLOG.md",
+    "assets/fonts/README.md",
     "cordis.patch.yml",
     "docs/images/**"
   ],
@@ -53,6 +58,8 @@
     "build": "tsc -b tsconfig.json && tsdown --env.DSH_BUILD_FACE client",
     "test": "vitest run",
     "compat": "node scripts/dsh-compat.mjs",
+    "fonts:check": "python -m scripts.fonts.build --check",
+    "fonts:plan": "python -m scripts.fonts.build --plan",
     "prepare": "tsc -b tsconfig.json && tsdown --env.DSH_BUILD_FACE client",
     "release": "release-it"
   },