Merge remote-tracking branch 'origin/master' into xtr/session-store-write-lifecycle

# Conflicts:
#	apps/web/tests/new-session-refused.e2e.ts
#	docs/event-producer-consumer.md
#	docs/event-producer-consumer.zh.md

scripts/doc-budgets.manifest.json

@@ -1,7 +1,7 @@
 {
   "AGENTS.md": 2080,
   "docs/AGENTS.md": 1430,
-  "docs/architecture.md": 2410,
+  "docs/architecture.md": 2430,
   "docs/cordis-primer.md": 600,
   "docs/testing.md": 1350,
   "packages/AGENTS.md": 810,

scripts/gen-cordis-catalog.ts

@@ -67,6 +67,7 @@ export const SERVICE_PAGE: Record<string, string> = {
   hmr: 'boot.md',
   mcpResources: 'mcp.md',
   agentLoop: 'core.md',
+  agentController: 'core.md',
   agentDefaultModel: 'core.md',
   agentPresets: 'core.md',
   agents: 'core.md',
@@ -225,6 +226,7 @@ export const EVENT_SCOPE_PAGE: Record<string, string> = {
   'plugin-manager': 'boot.md',
   'plugin-market': 'boot.md',
   'agent': 'core.md',
+  'agent-controller': 'core.md',
   'agent-loop': 'core.md',
   'agent-preset': 'core.md',
   'api-session': 'session.md',
@@ -351,6 +353,9 @@ export const LINK_MAP: Readonly<Record<string, string>> = {
   AllowedModelRoute: 'subagent.md',
   SubagentModelSelectionSettings: 'subagent.md',
   AgentOptions: 'core.md',
+  AdmissionDecision: 'core.md',
+  DeliveryMode: 'core.md',
+  DeliveryRequest: 'core.md',
   TurnBoundaryProjection: 'core.md',
   AgentStatus: 'core.md',
   AssistantStreamFrame: 'core.md',

scripts/gen-doc-graphs.ts

@@ -641,6 +641,14 @@ const SERVICE_ROLES: ServiceRole[] = [
     consumers: ['agent-loop', 'acp', 'subagent'],
     note: 'Owns live Agent handles, the create/resume factory seam, and process-local initiator propagation.',
   },
+  {
+    key: 'agentController',
+    pkg: 'agent-controller',
+    title: 'Outside-message delivery',
+    mode: 'core',
+    consumers: ['api-session-controller'],
+    note: 'Prepares, admits through the agent-controller/admission stage, and appends messages that senders bring on someone\'s behalf, one at a time per Agent.',
+  },
   {
     key: 'agentDefaultModel',
     pkg: 'agent-default-model',

scripts/no-unknown-casts.baseline.json

@@ -751,9 +751,7 @@
     "24334994394c1d4336d192b2f38986beadcd0f6b235108370c3a736c34eebe98": 1,
     "33e462c9f8d9ef55f1b54a408f047caaa9467facc4fc88887fa5979fdce6c09f": 1,
     "455072902745ebd120bdeaaebf1b00b2d747a300409066715375263bcc4e8a63": 1,
-    "4df26af834cb4f8d55bb6908736ddeb6971b4c4c1cbd5a9ace2f9cfe9c0b94e4": 1,
     "6078d7e1390a0c3c94892edd74526a76e6cbbda8360656bf9f97d367371c0c4c": 1,
-    "71b9c7a18658556ab36c9af394f29dac5885fab402304b0b6f4d5127d6acdeff": 1,
     "9117562f15005ef8ec18dbad9c29cdc723c4af2c6a9c217af3cd7d8380de999b": 1,
     "98169406d3c872458f70f3f8f70abdd6eeaca296816ce91cdcf8392cfa6a77bf": 1,
     "afecf8092cd8de095ffbe00a1df00816897e8205854fd33a9d2beeaee88eca95": 1,
@@ -2059,9 +2057,6 @@
   "packages/web/tool-web/tests/spill.spec.ts": {
     "ecf3420d023d28e1cbc687d438bb66ee49d55a4ae4cb0828dd0f59b926363903": 1
   },
-  "packages/web/web-fetch-http/tests/fetch-http.spec.ts": {
-    "366f13ff1ff2522ad824a1d4333085e2c771c0b7ca22783aa41ca2e23233b259": 1
-  },
   "packages/web/web-search-deepseek/tests/deepseek.spec.ts": {
     "37c9617ff75d6a383f58dd63f939a88803e4ff5e1676bfe7e1c0cc340fc65014": 5,
     "598014dcfe77101781e3c6a02709097e3b0151a335e909c44719fac08fdea433": 2

scripts/type-equiv.manifest.json

@@ -2526,6 +2526,21 @@
       "doc": "docs/subsystems/session-projection.md",
       "symbol": "ProjectionKeySelection",
       "source": "packages/session/session-projection/src/index.ts"
+    },
+    {
+      "doc": "docs/subsystems/core.md",
+      "symbol": "DeliveryMode",
+      "source": "packages/core/agent-controller/src/types.ts"
+    },
+    {
+      "doc": "docs/subsystems/core.md",
+      "symbol": "DeliveryRequest",
+      "source": "packages/core/agent-controller/src/types.ts"
+    },
+    {
+      "doc": "docs/subsystems/core.md",
+      "symbol": "AdmissionDecision",
+      "source": "packages/core/agent-controller/src/types.ts"
     }
   ]
 }

scripts/verify-no-bare-dispatcher.spec.ts

@@ -1,7 +1,7 @@
 import { describe, expect, it } from 'vitest'
 import { findDispatcherViolations, scanRepository, DISPATCHER_OWNER } from './verify-no-bare-dispatcher.ts'
 
-const FILE = 'packages/web/web-fetch-http/src/network.ts'
+const FILE = 'packages/web/web-fetch-http/src/provider.ts'
 
 function reasons(source: string, file = FILE): string[] {
   return findDispatcherViolations(file, source).map(violation => violation.what)

scripts/verify-no-bare-dispatcher.ts

@@ -8,9 +8,8 @@
  * agent silently bypassed every proxy.
  *
  * `proxyRouteFor(url)` from that package is the sanctioned way to ask where one request goes and to
- * get the transport that answer assumed. A call site that genuinely owns its transport — because it
- * carries per-request state the process-wide dispatcher cannot, as `web-fetch-http`'s address
- * pinning does — says so with the marker below.
+ * get the transport that answer assumed. A call site that genuinely owns its transport, because it
+ * carries per-request state the process-wide dispatcher cannot, says so with the marker below.
  *
  * Discovery is syntax-aware, as `scripts/AGENTS.md` requires: a line-wise regex misses the
  * `{ dispatcher }` shorthand and a `new Alias(...)` whose import renamed `Agent`, and both bypass the

scripts/verify-package-readme-model-experience.ts

@@ -96,6 +96,7 @@ const SENTENCE_MODEL_EXPERIENCE: Readonly<Record<string, SentenceContract>> = {
   'packages/util/plugin-market-index': { kind: 'indirect', reason: 'Pure index validation; the plugin_market tool owns the entries it returns to the model.' },
   'packages/util/time': { kind: 'indirect', reason: 'Pure zone validation; the consumer that records a canonical zone owns the model-visible line derived from it.' },
   'packages/core/agent-default-model': { kind: 'indirect', reason: 'The service supplies a ModelSelection; request assembly and adapters own the model-visible request.' },
+  'packages/core/agent-controller': { kind: 'indirect', reason: 'The controller appends sender-prepared messages to the inbox; the Agent loop owns how they enter a model request.' },
   'packages/llm/deepseek-llm-api-extensions': { kind: 'indirect', reason: 'The registry contributes model-hidden provider fields; dsh-llm-deepseek owns their wire placement.' },
   'packages/preset/agent-preset': { kind: 'indirect', reason: 'The declaration selects plugins that own model-visible contributions.' },
   'packages/typert/registry': { kind: 'none', reason: 'Runtime type registry; consumers (cordis_inspect, wire faces, gates) own any model-visible projection of registry contents.' },