feat(agents,plugins): surface unifiée Capacités de l'agent — skills et tools MCP natifs + plugins #296 (domain: PluginMcpToolMetadata dans PluginMcpServerContribution, validation hôte alignée SDK — name requis non vide, description optionnelle non vide, doublons rejetés; application: McpToolPermissionCatalogue.vue structurée additive tools {name, description, access read|writeAction} enrichie des descriptions canoniques infrastructure orchestrator mcp tools, use case SetAgentMcpToolAllowed — toggle atomique idempotente d'un tool natif dans l'allowlist explicite d'un agent, refus unknown tool sans mutation, overrides vides retirés; backend DTO: catalogue.tools additive + SetAgentMcpToolAllowedRequestDto, wire camelCase; app-tauri + web-server: commande set_agent_mcp_tool_allowed; frontend: AgentPluginCapabilities devient la surface unifiée — skills natifs assign/unassign, tools natifs via setAgentMcpToolAllowed (catalogue structuré avec fallback legacy), skills/tools plugins avec metadata statiques mcpServers[].tools et saisie manuelle fallback pour serveurs sans catalogue, tombstones indisponibles, bannière redémarrage requis si agent actif; AgentsPanel retire l'ancienne section Skills séparée au profit de la surface unifiée; ProjectPluginsPanel recentré enable/disable avec renvoi Capacités des agents; adapters Tauri/HTTP/mock + permission.test.ts; QA verte reconfirmée par Git: application mcp_tool_permissions 5/5 + plugin::tests 37/37, backend ciblés 3/3 + checks domain/application/backend, app-tauri dto 33/33 + dto_agents 30/30 + dto_plugins 2/2, check web-server, npm test 35/35 + 65/65, npm run build; suites complètes rouges classées non bloquantes par QA: web-server parallèle too many open files + 7 PTY série passant individuellement, frontend 32 échecs sur 6 fichiers web non modifiés reproduits isolément)

crates/domain/src/lib.rs

@@ -240,11 +240,12 @@ pub use plugin::{
     PluginBundleUrl, PluginCapability, PluginCommandId, PluginContributionSet, PluginDescriptor,
     PluginError, PluginId, PluginInstallSource, PluginLayoutContribution, PluginLayoutType,
     PluginLifecycleState, PluginManifest, PluginMcpServerContribution, PluginMcpServerId,
-    PluginMcpServerSpec, PluginMcpStatus, PluginMcpStatusSet, PluginMenuItemContribution,
-    PluginPackageRef, PluginRegistry, PluginRegistryEntry, PluginSkillContribution, PluginSkillId,
-    PluginSkillRef, PluginSlashCommandContribution, PluginToolRef, PluginTopLevelMenuContribution,
-    PluginTrustLevel, PluginVersion, ProjectPluginActivation, ProjectPluginSettings, RelativePath,
-    RemovalOutcome, StagedPluginPackage,
+    PluginMcpServerSpec, PluginMcpStatus, PluginMcpStatusSet, PluginMcpToolMetadata,
+    PluginMenuItemContribution, PluginPackageRef, PluginRegistry, PluginRegistryEntry,
+    PluginSkillContribution, PluginSkillId, PluginSkillRef, PluginSlashCommandContribution,
+    PluginToolRef, PluginTopLevelMenuContribution, PluginTrustLevel, PluginVersion,
+    ProjectPluginActivation, ProjectPluginSettings, RelativePath, RemovalOutcome,
+    StagedPluginPackage,
 };
 
 pub use sandbox::{

crates/domain/src/plugin.rs

@@ -513,6 +513,21 @@ pub struct PluginMcpServerContribution {
     /// Development-only escape hatch for absolute commands.
     #[serde(default)]
     pub allow_absolute_command: bool,
+    /// Optional static tool catalogue for capability-management UI. This does
+    /// not replace MCP `tools/list` runtime introspection.
+    #[serde(default, skip_serializing_if = "Vec::is_empty")]
+    pub tools: Vec<PluginMcpToolMetadata>,
+}
+
+/// Optional static display metadata for a tool exposed by a plugin MCP server.
+#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
+#[serde(rename_all = "camelCase")]
+pub struct PluginMcpToolMetadata {
+    /// Exact MCP tool name advertised by the server.
+    pub name: String,
+    /// Optional human-readable summary for capability-management UI.
+    #[serde(default, skip_serializing_if = "Option::is_none")]
+    pub description: Option<String>,
 }
 
 /// Validated contribution set.