feat(workstate): actions contrôlées sur le work-state (Lot D backend)

Ajoute un module d'actions contrôlées (`workstate/actions.rs`) côté application
et l'expose via des commandes Tauri : DTO camelCase, câblage commands/state/lib.
Les actions valident leurs invariants avant d'agir sur le read-model.

- application : use cases d'actions contrôlées + intégration au work-state.
- app-tauri : commandes dédiées, DTO et enregistrement dans le handler.

Tests verts : application workstate_actions (7), workstate (21),
app-tauri dto_agents (25), list_live_agents_r0b (5), cargo check OK.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

crates/app-tauri/src/state.rs

@@ -12,22 +12,23 @@ use std::path::PathBuf;
 use std::sync::{Arc, Mutex};
 
 use application::{
-    AgentResumer, AppError, AssignSkillToAgent, ChangeAgentProfile, CheckEmbedderSuggestion,
-    CloseProject, CloseTab, CloseTerminal, ConfigureProfiles, ContextGuardUseCases,
-    CreateAgentFromScratch, CreateAgentFromTemplate, CreateLayout, CreateMemory, CreateProject,
-    CreateSkill, CreateTemplate, DeleteAgent, DeleteEmbedderProfile, DeleteLayout, DeleteMemory,
-    DeleteProfile, DeleteSkill, DeleteTemplate, DescribeEmbedderEngines, DetectAgentDrift,
-    DetectProfiles, DismissEmbedderSuggestion, FirstRunState, GetMemory, GetProjectPermissions,
-    GetProjectWorkState, GitBranches, GitCheckout, GitCommit, GitGraph, GitInit, GitLog, GitStage,
-    GitStatus, GitUnstage, HealthUseCase, InspectConversation, LaunchAgent, LaunchAgentInput,
-    ListAgents, ListAgentsInput, ListEmbedderProfiles, ListLayouts, ListMemories, ListProfiles,
-    ListProjects, ListResumableAgents, ListSkills, ListTemplates, LiveAgentRegistry, LiveSessions,
-    LoadLayout, McpRuntime, MoveTabToNewWindow, MutateLayout, OnnxModelView, OpenProject,
-    OpenTerminal, OrchestratorService, PermissionProjectorRegistry, ProposeContext,
-    ReadAgentContext, ReadContext, ReadMemory, ReadMemoryIndex, ReadProjectContext, RecallMemory,
-    ReconcileLayouts, RecordTurn, RecordTurnProvider, ReferenceProfiles, RenameLayout,
-    ResizeTerminal, ResolveAgentPermissions, ResolveMemoryLinks, SaveEmbedderProfile, SaveProfile,
-    SessionLimitService, SetActiveLayout, SnapshotRunningAgents, StructuredSessions,
+    AgentResumer, AppError, AssignSkillToAgent, AttachLiveAgent, ChangeAgentProfile,
+    CheckEmbedderSuggestion, CloseProject, CloseTab, CloseTerminal, ConfigureProfiles,
+    ContextGuardUseCases, CreateAgentFromScratch, CreateAgentFromTemplate, CreateLayout,
+    CreateMemory, CreateProject, CreateSkill, CreateTemplate, DeleteAgent, DeleteEmbedderProfile,
+    DeleteLayout, DeleteMemory, DeleteProfile, DeleteSkill, DeleteTemplate,
+    DescribeEmbedderEngines, DetectAgentDrift, DetectProfiles, DismissEmbedderSuggestion,
+    FirstRunState, GetMemory, GetProjectPermissions, GetProjectWorkState, GitBranches, GitCheckout,
+    GitCommit, GitGraph, GitInit, GitLog, GitStage, GitStatus, GitUnstage, HealthUseCase,
+    InspectConversation, LaunchAgent, LaunchAgentInput, ListAgents, ListAgentsInput,
+    ListEmbedderProfiles, ListLayouts, ListMemories, ListProfiles, ListProjects,
+    ListResumableAgents, ListSkills, ListTemplates, LiveAgentRegistry, LiveSessions, LoadLayout,
+    McpRuntime, MoveTabToNewWindow, MutateLayout, OnnxModelView, OpenProject, OpenTerminal,
+    OrchestratorService, PermissionProjectorRegistry, ProposeContext, ReadAgentContext,
+    ReadContext, ReadMemory, ReadMemoryIndex, ReadProjectContext, RecallMemory, ReconcileLayouts,
+    RecordTurn, RecordTurnProvider, ReferenceProfiles, RenameLayout, ResizeTerminal,
+    ResolveAgentPermissions, ResolveMemoryLinks, SaveEmbedderProfile, SaveProfile,
+    SessionLimitService, SetActiveLayout, SnapshotRunningAgents, StopLiveAgent, StructuredSessions,
     SuggestedThisSession, SyncAgentWithTemplate, TerminalSessions, UnassignSkillFromAgent,
     UpdateAgentContext, UpdateAgentPermissions, UpdateMemory, UpdateProjectContext,
     UpdateProjectPermissions, UpdateSkill, UpdateTemplate, WriteMemory, WriteToTerminal,
@@ -351,6 +352,10 @@ pub struct AppState {
     pub list_resumable_agents: Arc<ListResumableAgents>,
     /// Read-only live/busy state for the project's manifest agents.
     pub get_project_work_state: Arc<GetProjectWorkState>,
+    /// Rebinds an already-running agent's live session to a visible cell (Lot D).
+    pub attach_live_agent: Arc<AttachLiveAgent>,
+    /// Tears down an already-running agent's live session by agent id (Lot D).
+    pub stop_live_agent: Arc<StopLiveAgent>,
     /// Best-effort inspection of a conversation (last topic + token indicator)
     /// for the resume popup (T7). Optional/extensible: backed by a `Vec` of
     /// [`domain::ports::SessionInspector`]s; an empty/missing match yields empty
@@ -1066,6 +1071,14 @@ impl AppState {
                     as Arc<dyn application::ConversationLogProvider>,
             ),
         );
+        // Lot D — actions contrôlées agent-level sur les sessions vivantes : attach
+        // (rebind de la cellule-vue, zéro spawn) et stop (kill PTY via la primitive
+        // `CloseTerminal` existante / shutdown structuré). Aucune création de session.
+        let attach_live_agent = Arc::new(AttachLiveAgent::new(Arc::clone(&live_sessions)));
+        let stop_live_agent = Arc::new(StopLiveAgent::new(
+            Arc::clone(&live_sessions),
+            Arc::clone(&close_terminal),
+        ));
 
         // --- Limites de session des agents (ARCHITECTURE §21, LS7) ---
         // Service pur-ports « détecter → planifier → reprendre » câblé sur l'existant :
@@ -1233,6 +1246,8 @@ impl AppState {
             change_agent_profile,
             list_resumable_agents,
             get_project_work_state,
+            attach_live_agent,
+            stop_live_agent,
             inspect_conversation,
             project_store,
             get_project_permissions,