feat(backend): support des providers OpenCode cloud (#92)

Ajoute le catalogue statique de providers OpenCode (lot B3), le stockage
sécurisé des secrets (SecretStore + adapter infrastructure), et les
use cases SaveOpenCodeProviderProfile/DeleteProfile câblés en composition
root. Couvre le fix B1 et les tests de régression demandés par QA.

cargo build --workspace propre, cargo test --workspace -- --test-threads=1
intégralement vert.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

crates/app-tauri/src/commands.rs

@@ -50,13 +50,15 @@ use crate::dto::{
     HealthRequestDto, HealthResponseDto, InspectConversationRequestDto, InterruptAgentRequestDto,
     LaunchAgentRequestDto, LayoutDto, LayoutOperationDto, ListLayoutsDto, LiveAgentListDto,
     MemoryDto, MemoryIndexDto, MemoryLinksDto, MemoryListDto, ModelServerConfigDto,
-    ModelServerConfigListDto, OpenTerminalRequestDto, PreviewModelServerCommandDto, ProfileDto,
-    ProfileListDto, ProjectDto, ProjectListDto, ProjectMcpToolPermissionsDto,
+    ModelServerConfigListDto, OpenCodeProviderListDto, OpenTerminalRequestDto,
+    PreviewModelServerCommandDto, ProfileDto, ProfileListDto, ProjectDto, ProjectListDto,
+    ProjectMcpToolPermissionsDto,
     ProjectPermissionsDto, ProjectWorkStateDto, ReadAgentContextResponseDto,
     ReadConversationPageRequestDto, ReattachChatDto, ReattachResultDto, RecallMemoryRequestDto,
     RenameLayoutRequestDto, ReplyChunk, ResizeTerminalRequestDto,
     ResolveAgentPermissionsRequestDto, ResumableAgentListDto, SaveEmbedderProfileRequestDto,
-    SaveModelServerRequestDto, SaveProfileRequestDto, SetActiveLayoutRequestDto,
+    SaveModelServerRequestDto, SaveOpenCodeProviderProfileRequestDto, SaveProfileRequestDto,
+    SetActiveLayoutRequestDto,
     SetActiveLayoutResultDto, SkillDto, SkillListDto, StopLiveAgentRequestDto,
     StopLiveAgentResponseDto, SyncAgentWithTemplateRequestDto, SyncResultDto, TemplateDto,
     TemplateListDto, TerminalClosedDto, TerminalSessionDto, TurnPageDto, UnassignSkillRequestDto,
@@ -1092,6 +1094,35 @@ pub async fn save_profile(
         .map_err(ErrorDto::from)
 }
 
+/// `list_opencode_providers` — static catalogue of OpenCode cloud providers
+/// (ticket #92, lot B3).
+#[tauri::command]
+pub async fn list_opencode_providers(
+    state: State<'_, AppState>,
+) -> Result<OpenCodeProviderListDto, ErrorDto> {
+    Ok(state.list_opencode_providers.execute().into())
+}
+
+/// `save_opencode_provider_profile` — create or replace an OpenCode profile
+/// backed by a cloud provider (ticket #92, lot B3). The literal API key is
+/// sealed into the `SecretStore`, never persisted in `profiles.json`.
+///
+/// # Errors
+/// Returns an [`ErrorDto`] (`INVALID` for an empty `providerId`/`model`,
+/// `STORE` on secret or profile persistence failure).
+#[tauri::command]
+pub async fn save_opencode_provider_profile(
+    request: SaveOpenCodeProviderProfileRequestDto,
+    state: State<'_, AppState>,
+) -> Result<ProfileDto, ErrorDto> {
+    state
+        .save_opencode_provider_profile
+        .execute(request.into())
+        .await
+        .map(ProfileDto::from)
+        .map_err(ErrorDto::from)
+}
+
 /// `clone_opencode_profile_from_seed` — create a new OpenCode profile instance
 /// from the canonical `opencode-llamacpp` seed/template.
 ///

crates/app-tauri/src/lib.rs

@@ -249,6 +249,8 @@ pub fn run() {
             commands::detect_profiles,
             commands::list_profiles,
             commands::save_profile,
+            commands::save_opencode_provider_profile,
+            commands::list_opencode_providers,
             commands::clone_opencode_profile_from_seed,
             commands::delete_profile,
             commands::configure_profiles,