feat(backend,frontend): lot utilisateur #346 #347 #348 — exécution workspace plugin contrôlée par l'hôte, réordonnancement des onglets projet par glisser-déposer, Final restauré après stop d'agent CLI custom (QA verte)

#346 — capacités plugin SCM: le manifeste permissions.workspaceExec
(contrat SDK 8ff0f47) est appliqué côté hôte — domain PluginWorkspaceExec
Rule/Effect + audit sink, port WorkspaceToolRunner, adapter
LocalWorkspaceToolRunner sandboxé (concurrence 4, timeout, bornes
stdout/stderr, résolution bare executable sans shell), service
application + DTO backend + commandes app-tauri, gateway frontend
execTool exposée au runtime plugin — fin des lectures ad hoc du store
interne .git par les plugins.
#347 — onglets projet réordonnables par glisser-déposer (Tabs DnD,
onReorder, persistance de l'ordre via useProjects).
#348 — stop d'agent CLI custom: le message Final vert réapparaît au tour
suivant (override terminal stop armé correctement, reset de
l'interaction, refresh de la délégation requester).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

crates/app-tauri/src/lib.rs

@@ -448,6 +448,7 @@ pub fn run() {
             plugins::plugin_storage_delete,
             plugins::plugin_workspace_list_dir,
             plugins::plugin_workspace_stat,
+            plugins::plugin_workspace_exec_tool,
             plugins::plugin_query_project_structure,
             plugins::plugin_config_read_document,
             plugins::plugin_config_update_document,
@@ -488,6 +489,7 @@ fn plugin_workspace_invoke_handler<R: tauri::Runtime>(
         plugins::plugin_storage_delete,
         plugins::plugin_workspace_list_dir,
         plugins::plugin_workspace_stat,
+        plugins::plugin_workspace_exec_tool,
         plugins::plugin_query_project_structure,
         plugins::plugin_config_read_document,
         plugins::plugin_config_update_document,

crates/app-tauri/src/plugins.rs

@@ -17,10 +17,10 @@ use backend::dto::{
     PluginRuntimeContributionCatalogDto, PluginStorageGetDto, PluginStorageSetDto, PluginTaskDto,
     PluginTaskStatusDto, PluginToolchainDiagnosticDto, PluginToolchainDiagnosticRequestDto,
     PluginUninstallResultDto, PluginWorkspaceBinaryFileDto, PluginWorkspaceDirectoryListingDto,
-    PluginWorkspacePathDto, PluginWorkspaceStatDto, PluginWorkspaceTextFileDto,
-    PluginWorkspaceWriteBinaryDto, PluginWorkspaceWriteTextDto, ProjectPluginSettingsDto,
-    ProjectPluginSettingsViewDto, ReloadPluginDto, ReviewPluginPackageDto,
-    SetProjectPluginEnabledRequestDto,
+    PluginWorkspaceExecDto, PluginWorkspaceExecResultDto, PluginWorkspacePathDto,
+    PluginWorkspaceStatDto, PluginWorkspaceTextFileDto, PluginWorkspaceWriteBinaryDto,
+    PluginWorkspaceWriteTextDto, ProjectPluginSettingsDto, ProjectPluginSettingsViewDto,
+    ReloadPluginDto, ReviewPluginPackageDto, SetProjectPluginEnabledRequestDto,
 };
 use domain::ports::{PluginManifestValidator, PluginPackageStore, PluginRegistryStore};
 use domain::{PluginId, RelativePath};
@@ -414,6 +414,19 @@ pub async fn plugin_workspace_stat(
         .map_err(ErrorDto::from)
 }
 
+/// Executes a short, permission-gated tool in a project workspace.
+#[tauri::command]
+pub async fn plugin_workspace_exec_tool(
+    input: PluginWorkspaceExecDto,
+    state: State<'_, AppState>,
+) -> Result<PluginWorkspaceExecResultDto, ErrorDto> {
+    state
+        .plugin_workspace_exec
+        .execute(input.into())
+        .await
+        .map_err(ErrorDto::from)
+}
+
 /// Queries a bounded generic project structure for the public plugin API.
 #[tauri::command]
 pub async fn plugin_query_project_structure(
@@ -888,6 +901,7 @@ mod tests {
                 trust_level: PluginTrustLevel::Full,
                 capabilities: Vec::new(),
                 activation_scope: domain::PluginActivationScope::default(),
+                permissions: domain::PluginPermissions::default(),
                 contributes: PluginContributionSet::default(),
             })
         }