Merge origin/master into codex/invariant-service-seam

# Conflicts:
#	docs/config-catalog.md
#	docs/event-producer-consumer.md
#	docs/module-graph.md
#	packages/examples/agent-spine-demo/README.md
#	packages/examples/agent-spine-demo/package.json
#	packages/examples/agent-spine-demo/src/index.ts
#	packages/examples/tui-demo/package.json
#	packages/support/invariants/src/scoped-events.generated.ts
#	packages/ui/acp/package.json
#	packages/ui/tui/package.json
#	packages/ui/tui/tests/tui.spec.ts
#	pnpm-lock.yaml

.agents/notes/implemented/architecture/2026-07-19-package-invariant-runtime-contracts.md

@@ -27,7 +27,7 @@ The central `dsh-invariants` service owns only configuration, registration uniqu
 
 ### Implemented checks
 
-The current 95-package workspace has 20 executable companions and 75 justified empty companions.
+The current 99-package workspace has 21 executable companions and 78 justified empty companions.
 
 | Owner | Runtime relationship |
 |---|---|
@@ -44,6 +44,7 @@ The current 95-package workspace has 20 executable companions and 75 justified e
 | `dsh-sandbox-policy` | Durable `sandbox/mode` events use the closed sandbox-mode vocabulary. |
 | `dsh-fs` | Filesystem decision/observation events carry usable target and version identities. |
 | `dsh-goal` | Durable goal snapshots preserve source attribution, rendered content, revisions, lifecycle and timestamp relationships, and sequential admitted rounds. |
+| `dsh-goal-session` | Goal-sourced continuation messages match the prompt reconstructed from the preceding durable goal state. |
 | `dsh-subagent` | Provider add/remove and child start/end events preserve identity and pairing. |
 | `dsh-permission` | Durable permission decisions name a preset in the active permission table. |
 | `dsh-user-approval` | Approval asked/decided records pair by call and use valid outcomes and policies. |