fix(compatibility): preserve native profile prompt delivery

[drewstone]

What this carries

This draft follows merged PRs #749 and #753. It preserves the Runtime compatibility work for the current published stack.

• Candidate preparation declares that Runtime owns the systemPrompt launch binding, so the materializer can lower native prompt controls into the exact spawn plan.
• OpenCode replacement prompts now select a generated primary agent and pass its --agent flag. Claude Code, Pi, and Prime keep replacement and additive controls separate.
• Codex and Gemini file-based delivery stays fail-closed, including launch-argument shadow checks for Codex model_instructions_file and developer_instructions.
• OpenCode additive instructions use the generated opencode.json instruction path.
• Coding benchmark profiles use canonical AgentProfile.harness values and Sandbox capability parsing.
• Unknown Sandbox prompt capabilities and exact-process prompt capabilities remain replace: false, append: false.
• Runtime docs and Python install hints align with agent-eval 0.144.6.

Completed proof

• Reconciled with origin/main at 6efdf202, including merged PRs chore(deps): move to the published cohort, and the one decision that blocks it #749 and chore(testing): regenerate the improvement-proposal fixture for the 0.46 cohort #753.
• Inspected and retained the complete existing work. The branch contains six Conventional Commit commits and no discarded diff.
• Adopted published @tangle-network/agent-profile-materialize@0.13.1 with Interface >=0.46.0 <0.47.0; lockfile integrity is sha512-2g/F8ABiJ6gB8lifTKKIMGPBgYjCyPHQF93HF3g7c5d0D5Rh8cEZ9WGRvggYjOm4HPi3/4PViG6VKEmr5sXwIg==.
• Adopted published @tangle-network/sandbox@0.19.4; lockfile integrity is sha512-rp4NGX7Em0ryNexEuoGYgX9jC5AyvYlDP/JLWBMCZRGdn+wE9HDcy9SsX8+geluyxpnW2Gg3BczefRYSnIcb2Q==, resolving Core 0.5.4 and Interface 0.46.1.
• pnpm install --frozen-lockfile --ignore-scripts — lockfile passed supply-chain policy and installed materializer 0.13.1 and Sandbox 0.19.4.
• Prepared root Runtime 0.131.0 and Bench 0.8.0, including changelogs, generated fixtures, and generated API catalog.
• pnpm run check:version-bump — both publishable packages carry higher versions: Runtime 0.130.0 -> 0.131.0, Bench 0.7.2 -> 0.8.0.
• pnpm exec vitest run tests/candidate-execution-prepare.test.ts src/runtime/environment-provider.test.ts src/runtime/tangle-sandbox-exact-process-provider.test.ts — 85 tests passed, including OpenCode replacement binding and unknown/exact-process capability refusals.
• pnpm exec tsc --noEmit — passed.
• Targeted Biome checks for the changed Runtime and candidate files — passed.
• pnpm run check:publish-workflow — passed.
• pnpm run docs:freshness — passed.
• git diff --check — passed.
• Current published pins: Interface 0.46.1, Eval 0.144.6, Knowledge 7.1.2, materializer 0.13.1, Sandbox 0.19.4. No unpublished versions are referenced.
• Pushed over SSH at commit c21f6e34.

Completion checklist

• Consume published @tangle-network/agent-profile-materialize >=0.13.1.
• Consume published @tangle-network/sandbox >=0.19.4.
• Prepare Runtime 0.131.0.
• Prepare Bench 0.8.0.
• Run the full Runtime tests, package checks, and packed-cohort checks.
• Merge this PR.
• Tag the release.
• Prove the published npm and tarball artifacts.

PR #749 is already merged; this draft does not close or alter it. The checklist remains unchecked until the full release proof, merge, tag, and artifact checks complete.

[tangletools]

✅ Auto-approved drewstone PR — c21f6e34

This PR was opened by the trusted drewstone account.
The full PR reviewer audit still runs separately and will publish findings if it detects issues.

_{tangletools · auto-approval · reason: drewstone_author · 2026-08-10T01:42:57Z}

[tangletools]

✅ Auto-approved drewstone PR — dc00bb6b

This PR was opened by the trusted drewstone account.
The full PR reviewer audit still runs separately and will publish findings if it detects issues.

_{tangletools · auto-approval · reason: drewstone_author · 2026-08-10T01:58:50Z}