[anycodes]

Description

Platform-native templates such as Express base were rejected by the workflow launcher solely because they had no immutable version metadata. The launcher now accepts native IDs belonging to the selected provider, retains operation/protocol checks and deletes only the sandbox it creates. Both the built-in string selector and its actual Provider object work.

The SDK also accepts the CLI adapter’s optional official source-placeholder metadata. Compatibility comparisons now distinguish alpha sequence numbers, and MCP reads the canonical SDK version. Prepare matching 0.3.1a3 client/server packages; publication follows merge.

Fixes #95. Related: Alibaba-Agent-Sandbox/agent-sandbox#137 and Alibaba-Agent-Sandbox/awesome-providers#30.

Type of Change

• Bug fix
• Documentation
• Tests

Changes

• Remove the immutable-version prerequisite for provider-bound native IDs without inventing an artifact digest.
• Validate optional source placeholders without granting Python source-building operations.
• Use the existing packaging dependency for version ordering and preserve one canonical MCP package version.
• Replace the introductory state taxonomy with practical English/Chinese usage examples.

Testing

• Focused workflow/manifest/version regressions: 90 passed.
• Real Express: 4 cases (two template IDs × string/object provider selection), shell output and independent control-plane deletion checks.
• Runtime CI: https://github.com/Alibaba-Agent-Sandbox/python-sdk/actions/runs/40106360868 (Python 3.10/3.11/3.12, server/client, distribution, pinned contract and Python-to-Node).
• Both 0.3.1a3 distributions built and freshly installed together; version lockstep preserved.
• Repository health and documentation links passed.

Checklist

• Code follows project conventions
• Tests and bilingual docs updated
• No credentials or private logs included

Definition of Done

• Regression and real-backend checks recorded in .agents/evidence/verify/2026-10-24-managed-native-workflows.md
• Proposed ADR and CHANGELOG present
• Independent cross-repository review completed; its two findings were fixed and rerun
• Record-only final head CI must pass before merge

Local raw-socket tests encounter this workspace’s HTTP 501/502 interception, also reproduced on the unchanged baseline; the unrestricted remote suites pass. Initial version and selector failures are retained in the evidence. These tests do not claim interpreter API or full-template business coverage.