Ship the packaged Agents SDK as the CLI default

.github/workflows/cli-ci.yml

@@ -61,6 +61,12 @@ jobs:
           python3 -m pip install --require-hashes --only-binary=:all: -r cli/ci/requirements-test.txt
           cd cli/bun
           bun install --frozen-lockfile --ignore-scripts
+      - name: Prepare the separately locked Agents SDK build interpreter
+        run: |
+          uv venv --python 3.10.20 --seed "$RUNNER_TEMP/agents-sdk-python"
+          "$RUNNER_TEMP/agents-sdk-python/bin/python3" -m pip install --require-hashes --only-binary=:all: -r harnesses/agents-sdk/requirements-build.txt
+      - name: Test the actual pinned Agents SDK runtime without provider credentials
+        run: '"$RUNNER_TEMP/agents-sdk-python/bin/python3" -m unittest discover -s harnesses/agents-sdk -p test_run.py'
       - name: Admit current source without provider credentials
         shell: bash
         run: python3 cli/ci/run_local.py 2>&1 | tee "$RUNNER_TEMP/cli-admission.log"

.github/workflows/cli-distribution-check.yml

@@ -16,7 +16,7 @@ jobs:
       matrix:
         os: [ubuntu-22.04, ubuntu-22.04-arm, macos-15, macos-15-intel]
     runs-on: ${{ matrix.os }}
-    timeout-minutes: 45
+    timeout-minutes: 60
     steps:
       - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262
         with:
@@ -52,13 +52,25 @@ jobs:
           # resolver checks this exact cwd filename before attempting a fetch.
           if [ "$RUNNER_OS" = macOS ] && [ "$RUNNER_ARCH" = X64 ]; then
             cp "$(command -v bun)" bun-darwin-x64-baseline-v1.3.5
+            cp "$(command -v bun)" cli/bun/bun-darwin-x64-baseline-v1.3.5
           fi
           rustup toolchain install 1.87.0 --profile minimal
           rustup default 1.87.0
           cargo fetch --locked --manifest-path cli/rust/Cargo.toml
           python3 -m pip install --require-hashes --only-binary=:all: -r cli/ci/requirements-test.txt
           cd cli/bun
           bun install --frozen-lockfile --ignore-scripts
+      - name: Prepare the pinned full Linux SDK Python archive
+        if: runner.os == 'Linux'
+        env:
+          SDK_PLATFORM: ${{ runner.arch == 'ARM64' && 'linux-arm64-gnu' || 'linux-x64-gnu' }}
+        run: timeout --kill-after=1s 130s python3 cli/ci/prepare_agents_sdk_linux.py --platform "$SDK_PLATFORM" --out "$RUNNER_TEMP/agents-sdk-python-full.tar.zst"
+      - name: Prepare the separately locked Agents SDK build interpreter
+        run: |
+          uv venv --python 3.10.20 --seed "$RUNNER_TEMP/agents-sdk-python"
+          "$RUNNER_TEMP/agents-sdk-python/bin/python3" -m pip install --require-hashes --only-binary=:all: -r harnesses/agents-sdk/requirements-build.txt
+      - name: Test the actual pinned Agents SDK runtime without provider credentials
+        run: '"$RUNNER_TEMP/agents-sdk-python/bin/python3" -m unittest discover -s harnesses/agents-sdk -p test_run.py'
       - name: Check the public surface
         # prose-cli is a public user client: no internal service detail or
         # developer-only surface in tracked files, release help or binaries.
@@ -100,9 +112,36 @@ jobs:
           python3 -m unittest discover -s cli/ci -p test_assemble_kernel_rc.py
           python3 -m unittest discover -s cli/ci -p test_kernel_rc_evidence.py
           python3 -m unittest discover -s cli/ci -p test_sign_macos.py
+          python3 -m unittest discover -s cli/ci -p test_build_agents_sdk.py
+          python3 -m unittest discover -s cli/ci -p test_build_kernel_rc.py
+          python3 -m unittest discover -s cli/ci -p test_fetch_previous_release.py
+          python3 -m unittest discover -s cli/ci -p test_qualify_installed_sdk.py
+          python3 -m unittest cli.ci.test_package_local.PackagedSdkArtifactTests
+          python3 -m unittest discover -s cli/ci -p test_dependency_evidence.py
+          python3 -m unittest discover -s cli/ci -p test_check_workflows.py
           python3 -m unittest discover -s cli/ci -p test_rehearse_npm_identity.py
       - name: Build, package and exercise fresh standalone and npm installations
         run: python3 cli/ci/rehearse_release.py --output "$RUNNER_TEMP/cli-rehearsal" --trials 1
+      - name: Build and verify production SDK standalone and npm installations
+        # This RC version is an unpublished construction fixture. Live model
+        # qualification and reviewed publication remain separate gates.
+        env:
+          RC_VERSION: '0.15.0-rc.4'
+        run: python3 cli/ci/build_kernel_rc.py --version "$RC_VERSION" --out "$RUNNER_TEMP/kernel-rc" --agents-sdk-python "$RUNNER_TEMP/agents-sdk-python/bin/python3" --agents-sdk-linux-python-archive "$RUNNER_TEMP/agents-sdk-python-full.tar.zst"
+      - name: Fetch pinned genuine previous release inputs
+        env:
+          UPGRADE_PLATFORM: ${{ matrix.os == 'ubuntu-22.04' && 'linux-x64-gnu' || matrix.os == 'ubuntu-22.04-arm' && 'linux-arm64-gnu' || matrix.os == 'macos-15-intel' && 'darwin-x64' || 'darwin-arm64' }}
+        run: python3 cli/ci/fetch_previous_release.py --platform "$UPGRADE_PLATFORM" --out "$RUNNER_TEMP/previous-rc3"
+      - name: Qualify actual SDK installations and genuine upgrades
+        env:
+          RC_VERSION: '0.15.0-rc.4'
+          EXPECTED_SOURCE: ${{ github.sha }}
+        run: |
+          python3 cli/ci/qualify_installed_sdk.py \
+            --candidate-root "$RUNNER_TEMP/kernel-rc" --source "$EXPECTED_SOURCE" --version "$RC_VERSION" \
+            --previous-release "$RUNNER_TEMP/previous-rc3" \
+            --node "$(command -v node)" --npm "$(command -v npm)" \
+            --out "$RUNNER_TEMP/kernel-rc/installed-qualification"
       - name: Test Homebrew candidate archive admission
         run: python3 -m unittest discover -s cli/ci -p test_homebrew_rehearsal.py
       - uses: Homebrew/actions/setup-homebrew@dc7099b3e807f1e2ecc61f3ecabc840eedd5586a
@@ -111,6 +150,16 @@ jobs:
           "$RUNNER_TEMP/distribution-python/bin/python3" cli/ci/homebrew_rehearsal.py
           --rehearsal "$RUNNER_TEMP/cli-rehearsal"
           --output "$RUNNER_TEMP/cli-homebrew-rehearsal"
+      - name: Rehearse Homebrew against the production SDK archives
+        env:
+          RC_VERSION: '0.15.0-rc.4'
+          EXPECTED_SOURCE: ${{ github.sha }}
+        run: |
+          "$RUNNER_TEMP/distribution-python/bin/python3" cli/ci/homebrew_rehearsal.py \
+            --kernel-rc "$RUNNER_TEMP/kernel-rc" \
+            --expected-source "$EXPECTED_SOURCE" --expected-version "$RC_VERSION" \
+            --previous-release "$RUNNER_TEMP/previous-rc3" \
+            --output "$RUNNER_TEMP/kernel-rc/homebrew"
       - name: Retain rehearsal evidence
         if: always()
         uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
@@ -119,5 +168,21 @@ jobs:
           path: |
             ${{ runner.temp }}/cli-rehearsal
             ${{ runner.temp }}/cli-homebrew-rehearsal
+            ${{ runner.temp }}/kernel-rc/agents-sdk
+            ${{ runner.temp }}/kernel-rc/package
+            ${{ runner.temp }}/kernel-rc/logs
+            ${{ runner.temp }}/kernel-rc/agents-sdk-native/*.json
+            ${{ runner.temp }}/kernel-rc/agents-sdk-native/*.log
+            ${{ runner.temp }}/kernel-rc/agents-sdk-native/*cleanup-error.txt
+            ${{ runner.temp }}/kernel-rc/agents-sdk-native/supplier
+            ${{ runner.temp }}/kernel-rc/agents-sdk-native/frozen
+            ${{ runner.temp }}/kernel-rc/agents-sdk-native/python-full/python/PYTHON.json
+            ${{ runner.temp }}/kernel-rc/agents-sdk-native/python-full/python/licenses
+            ${{ runner.temp }}/kernel-rc/agents-sdk-runtime/runtime-report.json
+            ${{ runner.temp }}/kernel-rc/agents-sdk-runtime/job/*.log
+            ${{ runner.temp }}/kernel-rc/build-report.json
+            ${{ runner.temp }}/kernel-rc/homebrew
+            ${{ runner.temp }}/kernel-rc/installed-qualification
+            ${{ runner.temp }}/previous-rc3
           retention-days: 14
           if-no-files-found: warn

.github/workflows/cli-kernel-rc.yml

@@ -67,23 +67,51 @@ jobs:
           python3 -m pip install --require-hashes --only-binary=:all: -r cli/ci/requirements-test.txt
           cd cli/bun
           bun install --frozen-lockfile --ignore-scripts
+      - name: Prepare the pinned full Linux SDK Python archive
+        if: runner.os == 'Linux'
+        env:
+          SDK_PLATFORM: ${{ runner.arch == 'ARM64' && 'linux-arm64-gnu' || 'linux-x64-gnu' }}
+        run: timeout --kill-after=1s 130s python3 cli/ci/prepare_agents_sdk_linux.py --platform "$SDK_PLATFORM" --out "$RUNNER_TEMP/agents-sdk-python-full.tar.zst"
+      - name: Prepare the separately locked Agents SDK build interpreter
+        run: |
+          uv venv --python 3.10.20 --seed "$RUNNER_TEMP/agents-sdk-python"
+          "$RUNNER_TEMP/agents-sdk-python/bin/python3" -m pip install --require-hashes --only-binary=:all: -r harnesses/agents-sdk/requirements-build.txt
+      - name: Test the actual pinned Agents SDK runtime without provider credentials
+        run: '"$RUNNER_TEMP/agents-sdk-python/bin/python3" -m unittest discover -s harnesses/agents-sdk -p test_run.py'
       - name: Test kernel RC build guards
         run: |
           python3 -m unittest discover -s cli/ci -p test_build_kernel_rc.py
           python3 -m unittest discover -s cli/ci -p test_check_published_release.py
+          python3 -m unittest discover -s cli/ci -p test_fetch_previous_release.py
+          python3 -m unittest discover -s cli/ci -p test_qualify_installed_sdk.py
+      - name: Fetch pinned genuine previous release inputs
+        env:
+          UPGRADE_PLATFORM: ${{ matrix.platform }}${{ runner.os == 'Linux' && '-gnu' || '' }}
+        run: python3 cli/ci/fetch_previous_release.py --platform "$UPGRADE_PLATFORM" --out "$RUNNER_TEMP/previous-rc3"
       - name: Build and verify fresh standalone and npm installations
         env:
-          RC_VERSION: ${{ inputs.version || '0.15.0-rc.1' }}
-        run: python3 cli/ci/build_kernel_rc.py --version "$RC_VERSION" --out "$RUNNER_TEMP/kernel-rc"
+          RC_VERSION: ${{ inputs.version || '0.15.0-rc.4' }}
+        run: python3 cli/ci/build_kernel_rc.py --version "$RC_VERSION" --out "$RUNNER_TEMP/kernel-rc" --agents-sdk-python "$RUNNER_TEMP/agents-sdk-python/bin/python3" --agents-sdk-linux-python-archive "$RUNNER_TEMP/agents-sdk-python-full.tar.zst"
+      - name: Qualify actual SDK installations and genuine upgrades
+        env:
+          RC_VERSION: ${{ inputs.version || '0.15.0-rc.4' }}
+          EXPECTED_SOURCE: ${{ github.sha }}
+        run: |
+          python3 cli/ci/qualify_installed_sdk.py \
+            --candidate-root "$RUNNER_TEMP/kernel-rc" --source "$EXPECTED_SOURCE" --version "$RC_VERSION" \
+            --previous-release "$RUNNER_TEMP/previous-rc3" \
+            --node "$(command -v node)" --npm "$(command -v npm)" \
+            --out "$RUNNER_TEMP/kernel-rc/installed-qualification"
       - uses: Homebrew/actions/setup-homebrew@dc7099b3e807f1e2ecc61f3ecabc840eedd5586a
       - name: Rehearse Homebrew against these exact release archives
         env:
-          RC_VERSION: ${{ inputs.version || '0.15.0-rc.1' }}
+          RC_VERSION: ${{ inputs.version || '0.15.0-rc.4' }}
           EXPECTED_SOURCE: ${{ github.sha }}
         run: |
           "$RUNNER_TEMP/distribution-python/bin/python3" cli/ci/homebrew_rehearsal.py \
             --kernel-rc "$RUNNER_TEMP/kernel-rc" \
             --expected-source "$EXPECTED_SOURCE" --expected-version "$RC_VERSION" \
+            --previous-release "$RUNNER_TEMP/previous-rc3" \
             --output "$RUNNER_TEMP/kernel-rc/homebrew"
       - name: Retain packages and offline evidence
         if: always()
@@ -93,7 +121,19 @@ jobs:
           path: |
             ${{ runner.temp }}/kernel-rc/package
             ${{ runner.temp }}/kernel-rc/logs
+            ${{ runner.temp }}/kernel-rc/agents-sdk
+            ${{ runner.temp }}/kernel-rc/agents-sdk-native/*.json
+            ${{ runner.temp }}/kernel-rc/agents-sdk-native/*.log
+            ${{ runner.temp }}/kernel-rc/agents-sdk-native/*cleanup-error.txt
+            ${{ runner.temp }}/kernel-rc/agents-sdk-native/supplier
+            ${{ runner.temp }}/kernel-rc/agents-sdk-native/frozen
+            ${{ runner.temp }}/kernel-rc/agents-sdk-native/python-full/python/PYTHON.json
+            ${{ runner.temp }}/kernel-rc/agents-sdk-native/python-full/python/licenses
+            ${{ runner.temp }}/kernel-rc/agents-sdk-runtime/runtime-report.json
+            ${{ runner.temp }}/kernel-rc/agents-sdk-runtime/job/*.log
             ${{ runner.temp }}/kernel-rc/build-report.json
             ${{ runner.temp }}/kernel-rc/homebrew
+            ${{ runner.temp }}/kernel-rc/installed-qualification
+            ${{ runner.temp }}/previous-rc3
           retention-days: 14
           if-no-files-found: warn

.github/workflows/cli-publish.yml

@@ -63,6 +63,10 @@ jobs:
         env:
           GH_TOKEN: ${{ github.token }}
         run: python3 cli/ci/publication.py fetch --plan "$RELEASE_PLAN" --artifacts "$RUNNER_TEMP/prose-publication"
+      - name: Verify retained production SDK source and sibling custody
+        # The reviewed manifests bind the helper, build receipt and notices
+        # across standalone/npm payloads. Never rebuild fetched candidates.
+        run: python3 cli/ci/publication.py verify --plan "$RELEASE_PLAN" --artifacts "$RUNNER_TEMP/prose-publication"
       - name: Verify required platform trust, sign artifact digests, and publish exact npm bytes
         env:
           GH_TOKEN: ${{ github.token }}

README.md

@@ -21,7 +21,15 @@ Both runners support:
 - `--output human|json|jsonl`: rendering, independent of those completion rules.
 - `--native-log /absolute/new/file.jsonl`: optional private, bounded native-event capture for that same run. It does not prove fulfillment; see [capture limits](docs/native-capture.md).
 
-For example, after an ordinary build and supplying the provider credential in the process environment:
+The packaged local default is the Agents SDK with `gpt-6.1-sol`. Supply `OPENAI_API_KEY` in the process environment, then run your program without harness, model or authentication flags:
+
+```sh
+prose run program.md
+```
+
+Use `prose cli config explain --json -- run program.md` to inspect the effective configuration without inference. Save explicit alternatives in `~/.prose/cli.toml` or with `prose cli harness use`; see [user configuration](docs/user-configuration.md).
+
+For an explicitly selected Claude route:
 
 ```sh
 /path/to/prose --harness claude --auth-profile anthropic-api-key \
@@ -30,7 +38,7 @@ For example, after an ordinary build and supplying the provider credential in th
   --output jsonl --native-log /absolute/new-run/native.jsonl run program.md
 ```
 
-The native-log parent directory must already exist. The image determines how it loads the requested program. Default harness selection is still `openprose`, which reports `HOSTED_UNAVAILABLE`; select an installed harness explicitly. No fallback occurs.
+The native-log parent directory must already exist. The image determines how it loads the requested program. Missing SDK credentials give setup instructions; an incomplete SDK installation requires reinstalling the CLI. No harness, model or credential fallback occurs.
 
 ## Harnesses and environment profiles
 
@@ -39,7 +47,7 @@ The native-log parent directory must already exist. The image determines how it
 | Claude | Installed login or explicit `anthropic-api-key`. The API profile adds native `--bare`, which in 2.1.243 restricts tools to Bash/Edit/Read even with an Agent tool request. Native `acceptEdits` is an explicit permission choice, not implied by API auth. |
 | Codex | Installed login or `openai-api-key` through a native custom Responses provider. Explicit `workspace-write` or `read-only` maps to native sandbox selection. Context/skill discovery is a separate concern. |
 | Prime / OMP | Explicit `provider/model` and credential profile. Provider-key routes use fresh private configuration; separate harness-login routes preserve native stores. Native tool use is supported. OMP validates its discovered tool inventory rather than requiring it empty. |
-| Agents SDK | Optional generic `prose-agents-sdk` executable, explicit model and `openai-api-key`, ordinary shell tool, no built-in delegation or cached-login route. See [installation and limits](docs/agents-sdk-adapter.md). |
+| Agents SDK | Packaged default `prose-agents-sdk` sibling, `gpt-6.1-sol` and `openai-api-key`. Public search/retrieval, shell files and fresh serial child contexts share aggregate limits; host OS permissions apply. See [installation and limits](docs/agents-sdk-adapter.md). |
 
 Exact admitted versions and platforms are checked at readiness; see the product docs and `cli harness list`. Selected auth is not proof of successful authentication, billing identity, or sufficient capabilities. See [credential routes](docs/api-credentials.md), [permissions](docs/permissions-and-native-notices.md), and [isolated evaluation](docs/isolated-evaluation.md).
 

cli/README.md

@@ -250,9 +250,15 @@ requirements. They currently carry execution evidence for Ubuntu 22.04 only;
 other Linux environments remain unverified, and the npm launcher refuses a
 detected glibc below that floor before spawning the packaged executable.
 
-The default OpenProse-billed route remains unavailable and fails closed. The
-four BYO adapters execute only when explicitly selected and never silently
-change harness, wrapper-selected credential group, or billing owner. Harness-
+The local built-in selects the packaged Agents SDK and `gpt-6.1-sol`, using
+`OPENAI_API_KEY` from the process environment. A complete installation needs
+no separately provisioned Python or PATH helper. Other harnesses remain
+explicit alternatives, saved in `~/.prose/cli.toml` or selected for one command.
+Keep the installed files together when moving a standalone installation. Mac
+packages include a support directory beside the CLI and SDK helper; moving only
+the executable leaves an incomplete installation.
+The explicitly selected OpenProse-billed local route remains unavailable and
+fails closed. No adapter silently changes harness, credential group or billing owner. Harness-
 internal account/provider routing remains harness-managed. See
 [`protocol/STATUS.md`](protocol/STATUS.md) for the evidence and open gates.