feat(agentos): add durable sessions and portable API parity

[NathanFlurry]

• Add sidecar-owned durable ACP sessions with SQLite-authoritative catalog/history, exact native ACP event payloads, idempotent prompts, storage-only reads, and native restore with bounded continuation fallback.
• Unify permission requests and responses in the generic durable event stream, keep policy/lifecycle decisions sidecar-owned, and preserve actor liveness during active turns.
• Align TypeScript, Rust, and RivetKit on one portable Core API, including filesystem, process, shell, HTTP, cron, mounts, software, export, and subscription contracts.
• Add shared local-file/actor-UDS SQLite plumbing, bounded actor persistence for dynamic mounts and linked software, typed limits, and mechanically split ACP runtime modules.
• Remove duplicate and legacy session/permission surfaces; update checked examples, canonical docs, and generated public docs.
• Validate with Rust workspace checks, 37-package scoped TypeScript gates, 42 example package typechecks, 8/8 actor conformance tests, and real RivetKit sleep/wake restoration for sessions, history, mounts, software, and ACP.

[railway-app]

🚅 Deployed to the agentos-pr-1772 environment in agentos

Service	Status	Web	Updated (UTC)
agentos	😴 Sleeping (View Logs)	Web	Jul 18, 2026 at 11:06 am

---

🚅 Environment agentos-pr-1772 in rivet-frontend has no services deployed.