enh: add API for POST events and add to event stream

[heerambavi1998]

Summary

add API for POST events and add to event stream

Changes

Also persist the post events to DB.

How was this tested?

unit tests

Checklist

• I have read the contributing guidelines
• pnpm build, pnpm test, pnpm typecheck, pnpm lint:ci, and pnpm format:check pass locally
• Tests added/updated where it makes sense
• No hand-edits to generated code (packages/trueforge-sdk, python/trueforge_sdk, .github/fern/openapi/openapi.json, docs/openapi.json) — fork PRs omit SDK regen; maintainers regenerate after merge
• Docs / .env.example updated if configuration or behavior changed

---

Note

Medium Risk
New authenticated turn-control surface for tool approval and policy events; handler does not yet persist or apply them, which can mislead integrators expecting HITL to resume execution.

Overview
Adds POST /api/v1/sessions/{session_id}/turns/{turn_id}/events so the session creator can send mid-turn human-in-the-loop inputs: tool approvals, client tool responses, and session-scoped approval policies (user.tool_* types). Requests accept a batch of inbound events; the handler mints id and created_at and returns 201 with the durable-shaped payloads (session-owner checks mirror other turn routes).

The OpenAPI contract, Zod/core schemas, and regenerated TS/Python SDKs (createTurnEvent / create_turn_event) are extended with CreateTurnEventRequest/Response, TurnInboundEventItem, tool-approval policy types, and persisted/stream variants of the user events on SessionEvent, TurnStreamingEvent, and related unions. trueforge-ui still drops these (and turn.update) until the runtime union catches up.

Note: In this diff, DB insert / resume-the-turn wiring is stubbed (insertTurnInboundEvents remains commented in createTurnEventHandler), so clients get stable IDs but events are not yet persisted or applied server-side.

^{Reviewed by Cursor Bugbot for commit ff0937d. Bugbot is set up for automated code reviews on this repo. Configure here.}

[changeset-bot]

🦋 Changeset detected

Latest commit: ff0937d

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 4 packages

Name	Type
@truefoundry/trueforge-sdk	Patch
@truefoundry/trueforge	Patch
@truefoundry/trueforge-core	Patch
@truefoundry/trueforge-ui	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[cursor]

Stale Bugbot comment from a previous run.

[cursor]

Cursor Bugbot has reviewed your changes using default effort and found 4 potential issues.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit cadcd5e. Configure here.}