feat(permissions): voie projection CLI (LP0→LP3) + checkpoint Codex/input

Jalon vert regroupant deux chantiers entrelacés dans le working tree,
indissociables au niveau fichier mais tous deux verts (cargo test
--workspace + tests frontend permissions au vert).

Permissions — voie « projection CLI » (advisory), complète :
- LP0 domaine pur : modèle PermissionSet/EffectivePermissions, resolve
  deny-wins + postures Allow<Ask<Deny (crates/domain/src/permission.rs).
- LP1 store : FsPermissionStore (.ideai/permissions.json).
- LP2 use cases : Get/Update project, Update agent override, Resolve.
- LP3 projecteurs Claude/Codex (settings.local.json / config.toml),
  câblage launch-path + PermissionProjectorRegistry, nettoyage des
  fichiers Replace orphelins au swap de profil (LP3-4), composition root
  + commandes Tauri, UI PermissionsPanel (projet + override agent).
- ports.rs : PermissionStore + FileSystem::remove_file (cleanup au swap).

Reste ouvert (hors scope, marqué dans le code) : LP4 enforcement OS
airtight (Landlock fichiers) + résumé de permissions injecté.

Inclut aussi le chantier Codex/input/sessions structurées en cours
(McpConfigStrategy, StructuredAdapter, gestion d'input) partageant les
mêmes fichiers (lifecycle.rs, commands.rs, dto.rs, state.rs).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

crates/app-tauri/src/dto.rs

@@ -1066,7 +1066,7 @@ use application::{
     ChangeAgentProfileOutput, CreateAgentOutput, InspectConversationOutput, LaunchAgentOutput,
     ListAgentsOutput, ReadAgentContextOutput,
 };
-use domain::{Agent, TerminalSession};
+use domain::{Agent, EffectivePermissions, PermissionSet, ProjectPermissions, TerminalSession};
 
 /// An agent crossing the wire. [`Agent`] already serialises camelCase
 /// (`id`, `name`, `contextPath`, `profileId`, `origin` tagged, `synchronized`),
@@ -1135,6 +1135,52 @@ pub struct UpdateAgentContextRequestDto {
     pub content: String,
 }
 
+// ---------------------------------------------------------------------------
+// Permissions (LP1)
+// ---------------------------------------------------------------------------
+
+/// Full project permission document crossing the wire.
+#[derive(Debug, Clone, Serialize, Deserialize)]
+#[serde(transparent)]
+pub struct ProjectPermissionsDto(pub ProjectPermissions);
+
+/// Effective permissions crossing the wire.
+#[derive(Debug, Clone, Serialize, Deserialize)]
+#[serde(transparent)]
+pub struct EffectivePermissionsDto(pub EffectivePermissions);
+
+/// Request DTO for updating project default permissions.
+#[derive(Debug, Clone, Deserialize)]
+#[serde(rename_all = "camelCase")]
+pub struct UpdateProjectPermissionsRequestDto {
+    /// Id of the owning project.
+    pub project_id: String,
+    /// New project defaults. `null` removes defaults.
+    pub permissions: Option<PermissionSet>,
+}
+
+/// Request DTO for updating one agent permission override.
+#[derive(Debug, Clone, Deserialize)]
+#[serde(rename_all = "camelCase")]
+pub struct UpdateAgentPermissionsRequestDto {
+    /// Id of the owning project.
+    pub project_id: String,
+    /// Target agent id.
+    pub agent_id: String,
+    /// New override. `null` removes the override.
+    pub permissions: Option<PermissionSet>,
+}
+
+/// Request DTO for resolving one agent's effective permissions.
+#[derive(Debug, Clone, Deserialize)]
+#[serde(rename_all = "camelCase")]
+pub struct ResolveAgentPermissionsRequestDto {
+    /// Id of the owning project.
+    pub project_id: String,
+    /// Target agent id.
+    pub agent_id: String,
+}
+
 /// Request DTO for `update_project_context`.
 #[derive(Debug, Clone, Deserialize)]
 #[serde(rename_all = "camelCase")]
@@ -1224,6 +1270,21 @@ pub struct DeliveredDelegationRequestDto {
     pub ticket: String,
 }
 
+/// Request DTO for `set_front_attached`: the write-portal of an agent cell reports
+/// whether a **frontend terminal cell is mounted** for `agentId` (`true` on mount,
+/// `false` on unmount). The mediator uses it to choose, at delivery time, between
+/// publishing `DelegationReady` (a cell will write it) and writing the turn into the
+/// PTY itself (headless/background-delegated agent with no cell). The frontend sends
+/// `{ request: { agentId, attached } }`.
+#[derive(Debug, Clone, Deserialize)]
+#[serde(rename_all = "camelCase")]
+pub struct FrontAttachedRequestDto {
+    /// Id of the agent whose terminal cell mounted/unmounted.
+    pub agent_id: String,
+    /// `true` when the cell's write-portal is now active, `false` on teardown.
+    pub attached: bool,
+}
+
 /// Request DTO for `change_agent_profile` (§15.1): hot-swap an agent's runtime
 /// profile, optionally relaunching its live session in place.
 #[derive(Debug, Clone, Deserialize)]