chore: 保存当前架构收口与 bug 修复快照

归档本轮 P0/P1 bug 修复、设计审查迁移、AI selection scope 收口与 stream contract 调整，并保留当前 05 主线迁移起点。

rust/crates/mnote-web/src/acp_bridge.rs

@@ -179,7 +179,7 @@ impl AcpRunBridge {
 /// Map an AcpSessionEvent to an SSE event for the frontend.
 ///
 /// Reference: hermes-vscode-main protocol.ts extractTextContent/parseToolCall/parseToolCallUpdate
-/// Reference: wolai-frontend bridge.ts HermesRunEvent type
+/// Reference: recycle/wolai-frontend bridge.ts HermesRunEvent type (historic)
 pub fn acp_event_to_sse(event: AcpSessionEvent) -> Option<SseEvent> {
     match event {
         AcpSessionEvent::TextDelta { text } => Some(SseEvent {
@@ -233,6 +233,24 @@ pub fn acp_event_to_sse(event: AcpSessionEvent) -> Option<SseEvent> {
             event: "usage.updated".into(),
             data: json!({ "used": used, "size": size }),
         }),
+        AcpSessionEvent::PermissionRequest {
+            permission_id,
+            tool_name,
+            params,
+            decision,
+        } => Some(SseEvent {
+            event: if decision == "allowed" {
+                "permission.allowed".into()
+            } else {
+                "permission.denied".into()
+            },
+            data: json!({
+                "permissionId": permission_id,
+                "toolName": tool_name,
+                "params": params,
+                "decision": decision,
+            }),
+        }),
         AcpSessionEvent::SessionInfoUpdate { .. } => {
             None // Not forwarded to frontend
         }
@@ -292,6 +310,23 @@ mod tests {
         assert_eq!(sse.data["delta"], "internal reasoning");
     }
 
+    #[test]
+    fn acp_permission_request_emits_frontend_decision_event() {
+        let event = AcpSessionEvent::PermissionRequest {
+            permission_id: "perm_1".into(),
+            tool_name: "mnote.page.save".into(),
+            params: json!({"documentId": "doc_1"}),
+            decision: "denied".into(),
+        };
+
+        let sse = acp_event_to_sse(event).expect("permission decision should be forwarded");
+        assert_eq!(sse.event, "permission.denied");
+        assert_eq!(sse.data["permissionId"], "perm_1");
+        assert_eq!(sse.data["toolName"], "mnote.page.save");
+        assert_eq!(sse.data["params"]["documentId"], "doc_1");
+        assert_eq!(sse.data["decision"], "denied");
+    }
+
     #[test]
     fn acp_tool_events_keep_detail_for_collapsible_ui() {
         let started = acp_event_to_sse(AcpSessionEvent::ToolCall {