feat(runtime): unify durable retained interactions

[drewstone]

Outcome

Braid runs CLI Bridge and Tangle Sandbox turns through one durable retained path. Exact process identity, control claims, restart recovery, detach, reconnect, cancellation, and interaction state survive a Braid restart.

The branch now installs the shipped cohort: interface 1.3.0, runtime 0.143.0, eval 0.149.0, CLI Bridge adapter 0.9.4, Tangle adapter 0.13.0, sandbox 0.31.0.

Architecture

• Domain interaction state owns canonical interaction identity.
• Retained execution adapters own provider recovery and control.
• One capability document decides whether a route may answer an interaction; the run path and the connection report read the same predicate.
• Runtime owns the terminal sandbox result. Braid's second event-level parser is deleted.
• No second terminal transport or provider execution path was added.

What changed in this pass

• CLI Bridge 0.9.x wire contract. The test Bridge serves GET /v1/capabilities?model=… with the Pi native and generic documents, returns complete exact run coordinates, and implements the native retained session protocol (POST /v1/sessions, GET /v1/sessions/:id, POST /v1/sessions/:id/turns).
• One environment per provider session. The environment idempotency key derives from the provider session, not the run, so a native session keeps its creation digest across turns and a restart continues the same session.
• Retained Tangle recovery by ownership. Runtime 0.142 writes only the environment ownership key into provider metadata, so the lookup matches that marker and proves run identity from the session's own control reference. Both Sandbox client wrappers forward the backend catalog that decides which interaction kinds the environment may claim.
• Security: provider secrets in runtime failure text. Both execution ports redact the terminal reason, error message, and the runtime-carried terminal metadata with the repository's existing redactors. A provider secret reached the terminal reason unredacted before this change.
• Release evidence: no more one-character secrets. A literal secret must be at least eight characters. CLAUDE_CODE_CHILD_SESSION=1 is not a credential, and matching it rewrote row LIVE-10 as LIVE-[REDACTED]0.
• LIVE-08 is a built-in row. The Tangle scope runs the interactive proof directly instead of reporting it through the matrix adapter, and the stress module exports the exact retained-resource observation and cleanup its proof script already imported.
• Interaction response gate. The report asked whether the provider object carried respondToInteraction, which is false for every published provider because the operation lives on the environment and session. Both paths now read interactions.responseIdempotency, the fact the runtime gates on.

Proof

Check	Result
pnpm check on CI (verify, ubuntu)	pass in 4m37s
node scripts/test.mjs on CI	781 of 783 pass, 0 fail
node scripts/test.mjs (macOS, real TMPDIR)	779 of 782 pass, 1 fail
The one local failure	production default state isolates workspaces and config identities across restart — macOS-only: it sets XDG_DATA_HOME, and src/bin/state-path.ts uses ~/Library/Application Support/braid on darwin. It passes on Linux CI.
pnpm test:live:required:self	32 of 32 pass (local and CI)
pnpm test:live:bridge:matrix	32 of 32 pass on CI
pnpm check:release	pass — 26 stable scripts, 12 required source artifacts
pnpm run typecheck	pass
pnpm run lint	pass across 770 files
pnpm run boundaries	pass — 495 modules, 2,538 edges, 0 cycles
pnpm run dependencies:check	pass — 94 production packages, no high or critical finding
pnpm run licenses:check	pass on Linux CI — 63 packages

Before this pass the suite failed 36 tests and the release self-check failed 2. CI run: https://github.com/tangle-network/braid/actions/runs/32449537251

Simplification

Simplification: deleted src/adapters/runtime/sandbox-result-projection.ts (the second Sandbox event parser) now that runtime 0.143 publishes one terminal outcome; collapsed the interaction-response rule into one predicate used by both the run path and the connection report, and deleted the dead ConnectionProviderMethods.respondToInteraction field; collapsed three copies of the secret-collection filter into one literalSecrets rule.
Net: +1,348 / −869 lines across 122 files (this pass), 3 duplicated paths removed, 1 module deleted.
Tests: +2 (a migration test proving a pre-intent journal still restores its retained run; a capability-document test pinning the CLI Bridge 0.9.4 route contract), −1 deleted (the duck-check reproduction the new gate makes meaningless).
Not done here: recording a fresh product GIF needs a packed 0.2.0 binary, a ready Pi backend, and paid model calls.

Live rows

LIVE-03 and LIVE-08 were attempted through their built-in checks. Both report unavailable: this environment holds no CLI Bridge interaction credential and no Tangle Sandbox credential, and a built-in check refuses to claim a row it cannot execute. LIVE-06, LIVE-07, LIVE-09, and LIVE-10 are unavailable for the same reason. No live claim here comes from a simulated provider. docs/08-verification.md carries the dated record.

Visual evidence

artifacts/demo/braid-live.gif is historical Braid 0.1.3 evidence from Local CLI Bridge and Claude Code opus. It is not a recording of this branch's native interactive flow, and README says so. The deterministic W6 state captures at 40×12, 80×24, 120×40, and 200×60 are the checked-in rendering evidence for this branch.

Known platform quirk

pnpm licenses list --prod reports the optional binaries installed for the current platform, so regenerating THIRD_PARTY_LICENSES.json on macOS swaps three entries (@dataiku/uv, @koromix/koffi, @napi-rs/keyring) and fails the Linux check. The checked-in inventory stays the Linux one. Making the inventory platform-independent is its own change and is not smuggled in here.