feat: implémentation et QA ticket99 - agent model configuration v2

- backend A-C: VO Codex/Claude, renderers/projecteurs modèle, SecretRef/env, catalogues/use cases/Tauri commands
- frontend D: profils Codex/Claude provider->model->secret, validations, conservation SecretRef
- fix: app-tauri embedded_server isolant IDEA_WEB_ROOT

QA: backend 57/57 tests, frontend 74/74 tests OK

crates/app-tauri/src/commands.rs

@@ -40,26 +40,27 @@ use crate::dto::{
     parse_ticket_id, save_model_server_input, AgentDriftListDto, AgentDto, AgentListDto,
     AppExitWorkGuardStateDto, AssignSkillRequestDto, AttachLiveAgentRequestDto,
     AttachLiveAgentResponseDto, BackgroundTaskDto, ChangeAgentProfileDto,
-    ChangeAgentProfileRequestDto, CloneOpenCodeProfileFromSeedRequestDto,
-    ConfigureProfilesRequestDto, ConversationDetailsDto, CreateAgentFromTemplateRequestDto,
-    CreateAgentRequestDto, CreateLayoutRequestDto, CreateLayoutResultDto, CreateMemoryRequestDto,
-    CreateProjectRequestDto, CreateSkillRequestDto, CreateTemplateRequestDto,
-    DeleteLayoutRequestDto, DeleteLayoutResultDto, DeliveredDelegationRequestDto,
-    DetectProfilesRequestDto, DetectProfilesResponseDto, EffectivePermissionsDto,
-    EmbedderEnginesDto, EmbedderProfileDto, EmbedderProfileListDto, ErrorDto, FirstRunStateDto,
-    FrontAttachedRequestDto, GitBranchesDto, GitCheckoutRequestDto, GitCommitDto, GitCommitListDto,
-    GitCommitRequestDto, GitStageRequestDto, GitStatusListDto, GraphCommitListDto,
-    HealthRequestDto, HealthResponseDto, InspectConversationRequestDto, InterruptAgentRequestDto,
-    LaunchAgentRequestDto, LayoutDto, LayoutOperationDto, ListLayoutsDto, LiveAgentListDto,
-    MemoryDto, MemoryIndexDto, MemoryLinksDto, MemoryListDto, ModelServerConfigDto,
-    ModelServerConfigListDto, OpenCodeProviderListDto, OpenTerminalRequestDto,
-    PreviewModelServerCommandDto, ProfileDto, ProfileListDto, ProjectDto, ProjectListDto,
-    ProjectMcpToolPermissionsDto, ProjectPermissionsDto, ProjectSystemPermissionsDto,
-    ProjectWorkStateDto, ReadAgentContextResponseDto, ReadConversationPageRequestDto,
-    ReattachChatDto, ReattachResultDto, RecallMemoryRequestDto, RenameLayoutRequestDto, ReplyChunk,
-    ResizeTerminalRequestDto, ResolveAgentPermissionsRequestDto,
-    ResolveAgentSystemPermissionsRequestDto, ResolvedAgentSystemPermissionsDto,
-    ResumableAgentListDto, SaveEmbedderProfileRequestDto, SaveModelServerRequestDto,
+    ChangeAgentProfileRequestDto, ClaudeProviderListDto, CloneOpenCodeProfileFromSeedRequestDto,
+    CodexProviderListDto, ConfigureProfilesRequestDto, ConversationDetailsDto,
+    CreateAgentFromTemplateRequestDto, CreateAgentRequestDto, CreateLayoutRequestDto,
+    CreateLayoutResultDto, CreateMemoryRequestDto, CreateProjectRequestDto, CreateSkillRequestDto,
+    CreateTemplateRequestDto, DeleteLayoutRequestDto, DeleteLayoutResultDto,
+    DeliveredDelegationRequestDto, DetectProfilesRequestDto, DetectProfilesResponseDto,
+    EffectivePermissionsDto, EmbedderEnginesDto, EmbedderProfileDto, EmbedderProfileListDto,
+    ErrorDto, FirstRunStateDto, FrontAttachedRequestDto, GitBranchesDto, GitCheckoutRequestDto,
+    GitCommitDto, GitCommitListDto, GitCommitRequestDto, GitStageRequestDto, GitStatusListDto,
+    GraphCommitListDto, HealthRequestDto, HealthResponseDto, InspectConversationRequestDto,
+    InterruptAgentRequestDto, LaunchAgentRequestDto, LayoutDto, LayoutOperationDto, ListLayoutsDto,
+    LiveAgentListDto, MemoryDto, MemoryIndexDto, MemoryLinksDto, MemoryListDto,
+    ModelServerConfigDto, ModelServerConfigListDto, OpenCodeProviderListDto,
+    OpenTerminalRequestDto, PreviewModelServerCommandDto, ProfileDto, ProfileListDto, ProjectDto,
+    ProjectListDto, ProjectMcpToolPermissionsDto, ProjectPermissionsDto,
+    ProjectSystemPermissionsDto, ProjectWorkStateDto, ReadAgentContextResponseDto,
+    ReadConversationPageRequestDto, ReattachChatDto, ReattachResultDto, RecallMemoryRequestDto,
+    RenameLayoutRequestDto, ReplyChunk, ResizeTerminalRequestDto,
+    ResolveAgentPermissionsRequestDto, ResolveAgentSystemPermissionsRequestDto,
+    ResolvedAgentSystemPermissionsDto, ResumableAgentListDto, SaveClaudeProviderProfileRequestDto,
+    SaveCodexProviderProfileRequestDto, SaveEmbedderProfileRequestDto, SaveModelServerRequestDto,
     SaveOpenCodeProviderProfileRequestDto, SaveProfileRequestDto, SetActiveLayoutRequestDto,
     SetActiveLayoutResultDto, SkillDto, SkillListDto, StopLiveAgentRequestDto,
     StopLiveAgentResponseDto, SyncAgentWithTemplateRequestDto, SyncResultDto, TemplateDto,
@@ -1188,6 +1189,22 @@ pub async fn list_opencode_providers(
     Ok(state.list_opencode_providers.execute().into())
 }
 
+/// `list_codex_providers` — static catalogue of Codex providers (ticket #99).
+#[tauri::command]
+pub async fn list_codex_providers(
+    state: State<'_, AppState>,
+) -> Result<CodexProviderListDto, ErrorDto> {
+    Ok(state.list_codex_providers.execute().into())
+}
+
+/// `list_claude_providers` — static catalogue of Claude providers (ticket #99).
+#[tauri::command]
+pub async fn list_claude_providers(
+    state: State<'_, AppState>,
+) -> Result<ClaudeProviderListDto, ErrorDto> {
+    Ok(state.list_claude_providers.execute().into())
+}
+
 /// `save_opencode_provider_profile` — create or replace an OpenCode profile
 /// backed by a cloud provider (ticket #92, lot B3). The literal API key is
 /// sealed into the `SecretStore`, never persisted in `profiles.json`.
@@ -1208,6 +1225,36 @@ pub async fn save_opencode_provider_profile(
         .map_err(ErrorDto::from)
 }
 
+/// `save_codex_provider_profile` — create or replace a Codex profile backed by
+/// a provider/model. The literal API key is sealed into the `SecretStore`.
+#[tauri::command]
+pub async fn save_codex_provider_profile(
+    request: SaveCodexProviderProfileRequestDto,
+    state: State<'_, AppState>,
+) -> Result<ProfileDto, ErrorDto> {
+    state
+        .save_codex_provider_profile
+        .execute(request.into())
+        .await
+        .map(ProfileDto::from)
+        .map_err(ErrorDto::from)
+}
+
+/// `save_claude_provider_profile` — create or replace a Claude profile backed by
+/// a provider/model. The literal API key is sealed into the `SecretStore`.
+#[tauri::command]
+pub async fn save_claude_provider_profile(
+    request: SaveClaudeProviderProfileRequestDto,
+    state: State<'_, AppState>,
+) -> Result<ProfileDto, ErrorDto> {
+    state
+        .save_claude_provider_profile
+        .execute(request.into())
+        .await
+        .map(ProfileDto::from)
+        .map_err(ErrorDto::from)
+}
+
 /// `clone_opencode_profile_from_seed` — create a new OpenCode profile instance
 /// from the canonical `opencode-llamacpp` seed/template.
 ///