feat(plugin): activate plugins through the PHP RPC worker

Implement the remainder of PluginManager::registerPackage: the plugin
autoload map is built by the ported createLoader/parseAutoloads and
served to the worker over the existing reverse-RPC autoloader, files
entries go through a composerRequire-equivalent glue call, and
already-defined classes take the upstream _composer_tmp rename/eval
path. Instantiation uses the new NewObject/CallPhpMethod lanes backed
by a P table in the worker; PhpPluginProxy adapts the resulting handle
to PluginInterface, with $composer/$io exposed to plugin callbacks via
an R table (unsupported methods stay explicit errors). Hand-written
proxy stubs cover Composer, PartialComposer and the IO hierarchy, and
the stub autoloader is re-prepended after loading the Composer PHP
runtime so its vendor autoloader cannot shadow proxied FQCNs.

FilesystemRepository::write now mirrors InstalledVersions::reload into
a running worker (class_exists-guarded, so an unloaded class keeps its
upstream lazy-load behavior), removing the previously undefined
observation window.

The installer pipeline passes the installed repository as a shared
handle instead of a long-lived `&mut dyn`: plugin registration runs
inside InstallationManager::execute and re-enters the same local
repository through the RepositoryManager, which would panic on the
RefCell re-borrow under the old shape.

PluginInterface lifecycle methods now take an owned ComposerHandle
(plugins retain $composer past the call) and return anyhow::Result
(PHP plugin code may throw); the plugin list uses shared ownership so
the identity comparison of removePlugin survives the dual storage in
registeredPlugins, matching PHP reference semantics.

Ports the activate/upgrade/uninstall tests of PluginInstallerTest,
serialized across the shared worker process whose persistent class
table is exactly what exercises the rename path.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

1 files changed, 14 insertions, 4 deletions

diff --git a/crates/shirabe/src/repository/filesystem_repository.rs b/crates/shirabe/src/repository/filesystem_repository.rs
index 32e4022a..b2a2530e 100644
--- a/crates/shirabe/src/repository/filesystem_repository.rs
+++ b/crates/shirabe/src/repository/filesystem_repository.rs
@@ -343,10 +343,20 @@ impl FilesystemRepository {
             );
 
             // make sure the in memory state is up to date with on disk
-            // TODO(plugin): whether this reload must also be pushed to the plugin PHP child
-            // process is undecided; the InstalledVersions state a plugin observes after this
-            // dump is undefined (docs/dev/plugin-class-classification.md, "Bootstrap classes
-            // cannot be stub-shadowed").
+            // The upstream in-process reload is split in two here: the Rust-side mirror below,
+            // and a push into the PHP worker where the real observers (plugins) live. The push
+            // is skipped when no worker is running — with no child there is nothing that could
+            // observe the stale state, and the worker glue additionally ignores it while the
+            // class is not loaded there (a later lazy load reads the freshly written
+            // installed.php, matching upstream observations in every case).
+            if shirabe_php_rpc::worker_is_running() {
+                crate::event_dispatcher::unwrap_php_result(shirabe_php_rpc::call_function(
+                    "__shirabe_installed_versions_reload",
+                    vec![shirabe_php_rpc::PluginValue::from_php_mixed(
+                        &PhpMixed::Array(versions.clone()),
+                    )],
+                ))?;
+            }
             InstalledVersions::reload(versions);
 
             // make sure the selfDir matches the expected data at runtime if the class was loaded from the vendor dir, as it may have been