fix(permissions): tools MCP inter-projets exposés (idea_project_*) + contactable agent/template persisté — update_agent_contactable (application/web-server/app-tauri), defaultContactable TemplateEditor save/reopen, groupes MCP 'IdeA inter-projets' avec fallback, permissions agent Contactable — #267 (QA verte)

crates/app-tauri/src/commands.rs

@@ -29,8 +29,8 @@ use application::{
     ResolveAgentSystemPermissionsInput, ResolveMemoryLinksInput, RevokeDeviceInput,
     RotateConversationLogInput, SaveChatDraftInput, SetActiveLayoutInput, SlashCommandEffect,
     SnapshotRunningAgentsInput, StopLiveAgentInput, SyncAgentWithTemplateInput,
-    UnassignSkillFromAgentInput, UpdateAgentContextInput, UpdateAgentEffortInput,
-    UpdateAgentMcpToolPermissionsInput, UpdateAgentPermissionsInput,
+    UnassignSkillFromAgentInput, UpdateAgentContactableInput, UpdateAgentContextInput,
+    UpdateAgentEffortInput, UpdateAgentMcpToolPermissionsInput, UpdateAgentPermissionsInput,
     UpdateAgentSystemPermissionsInput, UpdateMemoryInput, UpdateProjectContextInput,
     UpdateProjectMcpToolPermissionsInput, UpdateProjectPermissionsInput,
     UpdateProjectSystemPermissionsInput, UpdateSkillInput,
@@ -78,7 +78,7 @@ use crate::dto::{
     SlashCommandEffectDto, SlashCommandListDto, StopLiveAgentRequestDto, StopLiveAgentResponseDto,
     SyncAgentWithTemplateRequestDto, SyncResultDto, TemplateDto, TemplateListDto,
     TerminalClosedDto, TerminalSessionDto, TurnPageDto, UnassignSkillRequestDto,
-    UpdateAgentContextRequestDto, UpdateAgentEffortRequestDto,
+    UpdateAgentContactableRequestDto, UpdateAgentContextRequestDto, UpdateAgentEffortRequestDto,
     UpdateAgentMcpToolPermissionsRequestDto, UpdateAgentPermissionsRequestDto,
     UpdateAgentSystemPermissionsRequestDto, UpdateMemoryRequestDto, UpdateProjectContextRequestDto,
     UpdateProjectMcpToolPermissionsRequestDto, UpdateProjectPermissionsRequestDto,
@@ -777,6 +777,29 @@ pub async fn update_agent_effort(
         .map_err(ErrorDto::from)
 }
 
+/// `update_agent_contactable` — enable or disable cross-project contact for one agent.
+///
+/// # Errors
+/// Returns an [`ErrorDto`] on invalid ids or store failure.
+#[tauri::command]
+pub async fn update_agent_contactable(
+    request: UpdateAgentContactableRequestDto,
+    state: State<'_, AppState>,
+) -> Result<AgentDto, ErrorDto> {
+    let project = resolve_project(&request.project_id, &state).await?;
+    let agent_id = parse_agent_id(&request.agent_id)?;
+    state
+        .update_agent_contactable
+        .execute(UpdateAgentContactableInput {
+            project,
+            agent_id,
+            contactable: request.contactable,
+        })
+        .await
+        .map(|out| AgentDto::from_agent(out.agent))
+        .map_err(ErrorDto::from)
+}
+
 /// `resolve_agent_permissions` — resolve project defaults plus agent override.
 ///
 /// # Errors

crates/app-tauri/src/lib.rs

@@ -261,6 +261,7 @@ pub fn run() {
             commands::update_project_permissions,
             commands::update_agent_permissions,
             commands::update_agent_effort,
+            commands::update_agent_contactable,
             commands::resolve_agent_permissions,
             commands::get_project_system_permissions,
             commands::update_project_system_permissions,

crates/app-tauri/tests/dto_agents.rs

@@ -5,7 +5,8 @@
 use app_tauri_lib::dto::{
     parse_agent_id, AgentDto, AgentListDto, CellKind, ConversationDetailsDto,
     CreateAgentRequestDto, InspectConversationRequestDto, LaunchAgentRequestDto, LiveAgentListDto,
-    TerminalSessionDto, UpdateAgentContextRequestDto, UpdateAgentEffortRequestDto,
+    TerminalSessionDto, UpdateAgentContactableRequestDto, UpdateAgentContextRequestDto,
+    UpdateAgentEffortRequestDto,
 };
 use application::AppError;
 use application::{
@@ -40,7 +41,7 @@ fn make_agent(agent_uuid: u128, profile_uuid: u128) -> Agent {
 
 #[test]
 fn agent_dto_serialises_camelcase() {
-    let agent = make_agent(1, 2);
+    let agent = make_agent(1, 2).with_contactable(true);
     let dto = AgentDto::from_agent(agent.clone());
     let v = serde_json::to_value(&dto).unwrap();
 
@@ -52,6 +53,7 @@ fn agent_dto_serialises_camelcase() {
         ProfileId::from_uuid(Uuid::from_u128(2)).to_string()
     );
     assert_eq!(v["synchronized"], false);
+    assert_eq!(v["contactable"], true);
     // origin: tagged `{ "type": "scratch" }`
     assert_eq!(v["origin"]["type"], "scratch");
     assert_eq!(v["capabilities"], json!([]));
@@ -173,6 +175,19 @@ fn update_agent_effort_request_deserialises_and_null_clears() {
     assert_eq!(clear.effort, None);
 }
 
+#[test]
+fn update_agent_contactable_request_deserialises_camelcase() {
+    let raw = json!({
+        "projectId": Uuid::from_u128(1).to_string(),
+        "agentId": Uuid::from_u128(2).to_string(),
+        "contactable": true
+    });
+    let dto: UpdateAgentContactableRequestDto = serde_json::from_value(raw).unwrap();
+    assert!(dto.contactable);
+    assert_eq!(dto.project_id, Uuid::from_u128(1).to_string());
+    assert_eq!(dto.agent_id, Uuid::from_u128(2).to_string());
+}
+
 #[test]
 fn launch_agent_request_deserialises_camelcase() {
     let project_id = Uuid::from_u128(1).to_string();