Merge remote-tracking branch 'origin/master' into codex/pr224-rfc-rewrite

# Conflicts:
#	docs/architecture.md
#	docs/capability-seams.md
#	docs/config-catalog.md
#	docs/cookbook/extension-cookbook.md
#	docs/cordis-catalog/events.md
#	docs/cordis-catalog/services.md
#	docs/event-producer-consumer.md
#	docs/module-graph.md
#	docs/rfc/implemented/feature/2026-06-30-interception-seams.md
#	docs/rfc/proposed/feature/2026-06-14-acp-agent-client-protocol.md
#	docs/tool-execution-pipeline.md
#	packages/cordis/tool-cordis/src/api-catalog.ts
#	packages/core/agent-core/README.md
#	packages/core/agent-loop/README.md
#	packages/core/tools/README.md
#	packages/core/tools/src/index.ts
#	packages/core/tools/tests/tools.spec.ts
#	packages/core/tools/tsconfig.json
#	packages/ui/acp/src/index.ts
#	scripts/doc-budgets.manifest.json
#	scripts/gen-cordis-catalog.ts
#	scripts/gen-doc-graphs.ts

packages/support/invariants/src/index.ts

@@ -82,6 +82,11 @@ interface SessionTrace {
   surface: number[]
 }
 
+/** Event payload prefix for scoped seams whose first argument names its agent. */
+interface AgentSubject {
+  agent: Agent
+}
+
 /**
  * Deep-freeze a value and everything reachable from it.
  *
@@ -392,6 +397,7 @@ export function apply(ctx: Context, config: Config = {}): void {
     'agent/turn-continuation': args => args[0],
     'agent/turn-stop': args => args[0],
     'agent/error': args => args[0],
+    'approval/request': args => (args[0] as AgentSubject).agent,
     'tools/pre-execute': args => (args[0] as ToolExecution).agent,
     'tools/execute': args => (args[0] as ToolExecution).agent,
     'tools/post-execute': args => (args[0] as ToolExecution).agent,