feat: adapt to DSH 0.1.7-alpha.1 and yield the read-only previews

DSH 0.1.7-alpha.1 is 1299 commits past 0.1.6-alpha.2 and rewrites four
contracts this plugin was built on. The peer floor moves to
^0.1.7-alpha.1 (semver's prerelease rule means ^0.1.6-alpha.2 can never
match a 0.1.7 prerelease); 0.1.6-alpha.2 and earlier stay on v0.19.1.
Released as 0.21.0-alpha.1 (dist-tag alpha).

Hard breaks:
- dsh-settings was rewritten: register(ns, schema) is gone, a form is
  addressed by the plugin row's Loader entry id and read from the
  module's exported Config. The preferences are merged into Config and
  marked volatile — which requires DSH's own schemastery, because only
  that build wraps a volatile field in the cosmokit reference the
  loader's volatile commit walks. With the public package a settings
  write reports success and revision 1 while the effective value never
  changes.
- ui-primitives renamed its whole icon family (IconXxx14/16 ->
  IconXxxRegular/Medium): 26 imported symbols, 17 files. The failing
  mode is render-time, not load-time. Five call sites that relied on the
  old 14px default now pass size={14} explicitly.
- Session format v4 rejects source.kind === 'plugin'; the side-chat
  boundary injection now writes plugin:dsh-better-sidebar, the same kind
  DSH's own v3->v4 migration produces, so historical threads survive.
  Tool results moved to role 'tool' with top-level content/isError; all
  four parsers accept both shapes.
- The client session snapshot dropped subagentsByParent/jobsBySession
  and the on-demand subagent-catalog observation API. The Tasks page
  reads projectionsBySession and a new jobs.list route.

Yields and convergence:
- The read-only previews go to DSH's documentpreview (Office->PDF, a
  spreadsheet worker, zoom, per-directory refresh); editor.canOpen
  refuses those 26 extensions. Markdown, HTML (with its sandbox
  switches) and the editable code buffer stay.
- The host browser kind is desktop-profile-only now, so the web e2e
  lanes expect no browser entry and assert its absence.
- Link takeover claims only urlTarget links and passes the rest to the
  host, fixing a regression from the 0.1.6 round: the fallback pointed
  at a 'browser' type the plugin no longer registers, so http links in
  its own markdown did nothing.

Also fixed, found along the way:
- The file tree refreshes live (new directory watch over the plugin's
  own socket), since the plugin owns the `files` kind.
- ctx.sessions.list has no `current` field at either tag; the three
  readers were dead. They now use ctx.sidebarRight.mounted.
- package.json.files was missing lib/client-locale.js.
- Two genuinely dead call sites: sessions.openSubagent/open/
  refreshSubagents do not exist on the current baseline, so the
  topology click, the jump-back and the retry were all no-ops.
- The test harness window shim lacked addEventListener, which the 0.1.7
  primitives call at module-evaluation time; and the e2e token exchange
  needs Playwright's request stack, not Node's fetch.

tests/sidechat-transcript.spec.ts

@@ -6,8 +6,9 @@
  * pairing, and orphan failed results.
  */
 import { describe, expect, it } from 'vitest'
+import { createToolResultMessage, ToolCallId } from '@deepseek-ai/dsh-llm'
 import type { SidebarHistoryEntry, SidebarSessionEvent } from '../src/context-types.ts'
-import { SIDE_BOUNDARY_PREFIX, SIDE_BOUNDARY_PROMPT, SIDE_INJECTION_PLUGIN } from '../src/sidechat-core.ts'
+import { SIDE_BOUNDARY_PREFIX, SIDE_BOUNDARY_PROMPT, SIDE_INJECTION_SOURCE_KIND } from '../src/sidechat-core.ts'
 import {
   formatDurationMs,
   formatTokens,
@@ -35,12 +36,32 @@ function textBlocks(...texts: string[]): unknown[] {
   return texts.map(text => ({ type: 'text', text }))
 }
 
+/** One 0.1.6-era tool/result message (user role, nested `tool-result` wrapper). */
+function legacyResultMessage(callId: string, text: string, isError = false): Record<string, unknown> {
+  return {
+    role: 'user',
+    source: { kind: 'tool', callId },
+    content: [{ type: 'tool-result', toolCallId: callId, isError, content: textBlocks(text) }],
+  }
+}
+
+/** One 0.1.7 tool/result message (tool role, blocks + `isError` on the message). */
+function toolRoleResultMessage(callId: string, text: string, isError = false): Record<string, unknown> {
+  return {
+    role: 'tool',
+    source: { kind: 'tool', callId },
+    toolCallId: callId,
+    content: textBlocks(text),
+    isError,
+  }
+}
+
 describe('transcriptRows', () => {
   it('cuts the inherited seed at the last end-seed and renders the boundary as an injection row', () => {
     const entries = [
       entry(ev('user/message', 0, { content: textBlocks('inherited'), source: { kind: 'user' } })),
       entry(ev('session/end-seed', 1)),
-      entry(ev('user/message', 2, { content: textBlocks(`${SIDE_BOUNDARY_PREFIX}\n\nmode`), source: { kind: 'plugin', plugin: SIDE_INJECTION_PLUGIN } })),
+      entry(ev('user/message', 2, { content: textBlocks(`${SIDE_BOUNDARY_PREFIX}\n\nmode`), source: { kind: SIDE_INJECTION_SOURCE_KIND } })),
       entry(ev('user/message', 3, { content: textBlocks('the side question'), source: { kind: 'user' } })),
     ]
     const rows = transcriptRows(entries)
@@ -70,7 +91,7 @@ describe('transcriptRows', () => {
   it('renders any plugin-sourced context message as an injection row, boundary prefix or not', () => {
     const entries = [
       entry(ev('session/end-seed', 0)),
-      entry(ev('user/message', 1, { content: textBlocks('runtime context'), source: { kind: 'plugin', plugin: 'other-plugin' } })),
+      entry(ev('user/message', 1, { content: textBlocks('runtime context'), source: { kind: 'plugin:other-plugin' } })),
       entry(ev('user/message', 2, { content: textBlocks('q'), source: { kind: 'user' } })),
     ]
     const rows = transcriptRows(entries)
@@ -119,13 +140,12 @@ describe('transcriptRows', () => {
       entry(ev('turn/start', 1, { turn: 1 })),
       entry(ev('step/start', 2, { turn: 1, step: 1 })),
       entry(ev('tool/call', 3, { turn: 1, step: 1, callId: 'c1', name: 'read', arguments: '{"path":"a"}' })),
+      // The shape 0.1.7 writes: tool role, result blocks and `isError` at the
+      // message's own top level (no `tool-result` wrapper).
       entry(ev('tool/result', 4, {
         turn: 1,
         step: 1,
-        message: {
-          source: { kind: 'tool', callId: 'c1' },
-          content: [{ type: 'tool-result', toolCallId: 'c1', isError: true, content: [{ type: 'text', text: 'denied' }] }],
-        },
+        message: toolRoleResultMessage('c1', 'denied', true),
         error: { name: 'EACCES', code: 'EACCES' },
       })),
     ]
@@ -142,6 +162,42 @@ describe('transcriptRows', () => {
     })
   })
 
+  it('reads the tool/result message dsh-llm actually produces (producer round-trip)', () => {
+    const message = createToolResultMessage({
+      callId: ToolCallId('c1'),
+      // A literal block array: the producer takes real ContentBlocks, not the
+      // loose `unknown[]` the log fixtures above are written with.
+      content: [{ type: 'text', text: 'produced output' }],
+      isError: false,
+    })
+    const entries = [
+      entry(ev('session/end-seed', 0)),
+      entry(ev('tool/call', 1, { callId: 'c1', name: 'bash', arguments: '{"command":"ls"}' })),
+      entry(ev('tool/result', 2, { message: message as unknown as Record<string, unknown> })),
+    ]
+    const rows = transcriptRows(entries)
+    expect(rows).toHaveLength(1)
+    expect(rows[0]).toMatchObject({ kind: 'tool', name: 'bash', resultText: 'produced output', executing: false })
+  })
+
+  it('reads a LEGACY 0.1.6-era tool result wrapper (historical logs keep that shape)', () => {
+    const entries = [
+      entry(ev('session/end-seed', 0)),
+      entry(ev('turn/start', 1, { turn: 1 })),
+      entry(ev('step/start', 2, { turn: 1, step: 1 })),
+      entry(ev('tool/call', 3, { turn: 1, step: 1, callId: 'c1', name: 'read', arguments: '{"path":"a"}' })),
+      entry(ev('tool/result', 4, {
+        turn: 1,
+        step: 1,
+        message: legacyResultMessage('c1', 'legacy denied', true),
+        error: { name: 'EACCES', code: 'EACCES' },
+      })),
+    ]
+    const rows = transcriptRows(entries)
+    expect(rows).toHaveLength(1)
+    expect(rows[0]).toMatchObject({ kind: 'tool', name: 'read', resultText: 'legacy denied', failed: true })
+  })
+
   it('keeps a call executing until its result lands and surfaces orphan failures', () => {
     const entries = [
       entry(ev('session/end-seed', 0)),
@@ -158,10 +214,7 @@ describe('transcriptRows', () => {
       entry(ev('tool/result', 1, {
         turn: 1,
         step: 1,
-        message: {
-          source: { kind: 'tool', callId: 'gone' },
-          content: [{ type: 'tool-result', toolCallId: 'gone', isError: true, content: [{ type: 'text', text: 'boom' }] }],
-        },
+        message: toolRoleResultMessage('gone', 'boom', true),
         error: { name: 'X', code: 'X' },
       })),
     ]
@@ -216,10 +269,8 @@ describe('tool cards', () => {
     entry(ev('tool/result', seq, {
       turn: 1,
       step: 1,
-      message: {
-        source: { kind: 'tool', callId },
-        content: [{ type: 'tool-result', toolCallId: callId, content: [{ type: 'text', text }] }],
-      },
+      // The 0.1.7 first-class tool-role message shape.
+      message: toolRoleResultMessage(callId, text),
       ...extra,
     }))