Merge branch 'main' into feature/new-pr

Author: heimanba

.github/workflows/scorecard.yml

@@ -40,6 +40,6 @@ jobs:
           retention-days: 5
 
       - name: Upload to code scanning
-        uses: github/codeql-action/upload-sarif@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4
+        uses: github/codeql-action/upload-sarif@f205ea1c3313d32999d8d6a48b4f6530d4437b38 # v4
         with:
           sarif_file: results.sarif

README.md

@@ -147,7 +147,7 @@ Beta testers can install `@openagentpack/cli@beta`; see the [release guide](./do
 | MCP Server | native | native | native | native |
 | Memory Store | unsupported | native | native | native |
 | Multi-Agent | unsupported | unsupported | native | native |
-| Deployment | emulated | native | native | emulated |
+| Deployment | native | native | native | emulated |
 | Session | native | native | native | native |
 
 The full capability matrix and per-provider differences live in the [Provider reference](./docs/reference/providers.md).

README.zh-CN.md

@@ -147,7 +147,7 @@ Beta 用户可以安装 `@openagentpack/cli@beta`；固定版本及切回稳定
 | MCP Server | native | native | native | native |
 | Memory Store | unsupported | native | native | native |
 | Multi-Agent | unsupported | unsupported | native | native |
-| Deployment | emulated | native | native | emulated |
+| Deployment | native | native | native | emulated |
 | Session | native | native | native | native |
 
 完整能力矩阵与各 Provider 差异见 [Provider 参考](./docs/reference/providers.zh-CN.md)。

apps/server/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @openagentpack/server
 
+## 0.0.8
+
+### Patch Changes
+
+- Updated dependencies [e74f023]
+  - @openagentpack/sdk@0.3.2
+
 ## 0.0.7
 
 ### Patch Changes

apps/server/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@openagentpack/server",
-	"version": "0.0.7",
+	"version": "0.0.8",
 	"private": true,
 	"license": "Apache-2.0",
 	"exports": {

bun.lock

@@ -63,4 +63,4 @@ agents state import <address> <remote-id>
 
 Resources (agents, environments, skills…) are **infrastructure** — long-lived, managed by `plan`/`apply`. A **session** is a **runtime** conversation started from an agent. Sessions are managed separately with `agents session` and are not part of the plan/apply lifecycle.
 
-Deployments sit between the two: they are declared as resources but produce runs. On Qoder and Claude they schedule server-side; on Bailian and Volcengine Ark a `deployment run` expands into a session.
+Deployments sit between the two: they are declared as resources but produce runs. On Bailian, Qoder, and Claude they schedule server-side; on Volcengine Ark a `deployment run` expands into a session.

docs/architecture/how-it-works.md

@@ -19,7 +19,7 @@ Because the declaration is a file, it gets everything a file gets: code review,
 - The **agent harness** is the provider-managed layer that wraps a model into an agent: knowledge base, skills, MCP wiring, prompt/instructions, vault, deployment, multi-agent orchestration. These are the customer's portable assets.
 - The **agent infra** is the interchangeable execution substrate beneath the harness — the specific provider (Bailian, Qoder, Claude, Volcengine Ark) that runs the agent.
 
-OpenAgentPack's portability claim is that the same harness declaration can target different agent infra. Portability means the *core declaration* is portable and the per-provider **capability contract** is explicit — unsupported facets degrade gracefully (for example, an emulated `Deployment` on Bailian/Volcengine Ark) — not that every feature is identical on every provider.
+OpenAgentPack's portability claim is that the same harness declaration can target different agent infra. Portability means the _core declaration_ is portable and the per-provider **capability contract** is explicit — unsupported facets degrade gracefully (for example, an emulated `Deployment` on Volcengine Ark) — not that every feature is identical on every provider.
 
 ## What this enables
 

docs/concepts/agents-as-code.md

@@ -24,17 +24,18 @@ How a deployment *runs* depends on the provider's capability tier:
 |----------|:--------------:|------------------------------------|
 | Claude | native | schedules server-side through the deployments API |
 | Qoder | native | creates a deployment run and associated session |
-| Bailian, Ark | emulated | expands into a one-shot session at run time |
+| Bailian | native | triggers a server-side run through the deployments API |
+| Ark | emulated | expands into a one-shot session at run time |
 
-On the emulated providers, scheduling and outcome rubrics are **not** enforced server-side — use external cron/CI for always-on or scheduled runs.
+On Ark (the emulated provider), scheduling and outcome rubrics are **not** enforced server-side — use external cron/CI for always-on or scheduled runs.
 
 ## The lifecycle in one picture
 
 ```text
 agents.yaml ──plan/apply──▶ managed resources (agent, environment, …)
                                │
                                └─session create/run──▶ runtime session
-                               └─deployment run──────▶ runtime session (emulated) or scheduled run (native)
+                               └─deployment run──────▶ scheduled run (native) or runtime session (emulated on Ark)
 ```
 
 Next: [Run sessions](../guides/run-sessions.md) and [Manage deployments](../guides/manage-deployments.md).

docs/concepts/sessions-and-deployments.md

@@ -53,7 +53,7 @@ agents destroy
 | MCP Server | native | native | native | native |
 | Memory Store | unsupported | native | native | native |
 | Multi-Agent | unsupported | unsupported | native | native |
-| Deployment | emulated | native | native | emulated |
+| Deployment | native | native | native | emulated |
 | Session | native | native | native | native |
 
 See [Provider reference](./reference/providers.md) for per-provider configuration and notes.