收口 MNote P0 P1 P2 审查尾项

- 归档 OnlyOffice live bridge、Page AI、mindmap、design governance 与相关 bug 条目
- 补齐 MinerU OCR 后端 runtime 合同与 smoke/test 基线
- 收口 ChatOnly/Doubao、ObjectIdentity、Page Aggregate compat 与 runtime owner 文档口径

验证：
- cargo test --manifest-path rust/Cargo.toml -p mnote-web local_ocr -- --test-threads=1
- cargo test --manifest-path rust/Cargo.toml -p mnote-web onlyoffice_bridge -- --test-threads=1
- git diff --check
- git diff --cached --check
- codegraph index . --force && codegraph status .
- codegraph sync . && codegraph status .

rust/crates/control-plane/src/model.rs

@@ -243,6 +243,41 @@ pub struct UpsertUserUiPreferenceInput {
     pub value_json: String,
 }
 
+#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
+pub struct AiAgentProfileRecord {
+    pub id: EntityId,
+    pub agent_id: String,
+    pub profile_kind: String,
+    pub owner_user_id: Option<EntityId>,
+    pub base_profile_name: String,
+    pub isolated_profile_name: String,
+    pub display_name: String,
+    pub status: String,
+    pub created_at: Timestamp,
+    pub updated_at: Timestamp,
+    pub revision: i64,
+}
+
+#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
+pub struct AiAgentProfileGrantRecord {
+    pub id: EntityId,
+    pub profile_id: EntityId,
+    pub user_id: Option<EntityId>,
+    pub role: String,
+    pub can_run: bool,
+    pub can_manage_skills: bool,
+    pub can_manage_config: bool,
+    pub created_at: Timestamp,
+    pub updated_at: Timestamp,
+    pub revision: i64,
+}
+
+#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
+pub struct AiAgentProfileAccessRecord {
+    pub profile: AiAgentProfileRecord,
+    pub grant: AiAgentProfileGrantRecord,
+}
+
 #[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
 pub struct NavigationRecentRecord {
     pub id: EntityId,
@@ -393,6 +428,42 @@ pub struct AppendAiRuntimeEventInput {
     pub payload_json: String,
 }
 
+#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
+pub struct AiExternalConversationBindingRecord {
+    pub id: EntityId,
+    pub user_id: EntityId,
+    pub workspace_id: Option<EntityId>,
+    pub mnote_session_id: EntityId,
+    pub acp_session_id: Option<EntityId>,
+    pub agent_id: String,
+    pub profile: String,
+    pub provider: String,
+    pub remote_conversation_id: String,
+    pub remote_url: Option<String>,
+    pub status: String,
+    pub metadata_json: String,
+    pub created_at: Timestamp,
+    pub updated_at: Timestamp,
+    pub deleted_at: Option<Timestamp>,
+    pub revision: i64,
+}
+
+#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
+pub struct UpsertAiExternalConversationBindingInput {
+    pub id: Option<EntityId>,
+    pub user_id: EntityId,
+    pub workspace_id: Option<EntityId>,
+    pub mnote_session_id: EntityId,
+    pub acp_session_id: Option<EntityId>,
+    pub agent_id: String,
+    pub profile: String,
+    pub provider: String,
+    pub remote_conversation_id: String,
+    pub remote_url: Option<String>,
+    pub status: String,
+    pub metadata_json: String,
+}
+
 #[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
 pub struct ShareLinkRecord {
     pub id: EntityId,