Configure npm trusted publishing for @agent-dispatch/sdk

[vamgan]

Blocker

Publishing @agent-dispatch/sdk@0.1.5 from the GitHub Actions Publish workflow currently fails at npm publish with npm E404 / permission-style output:

• Failed run: https://github.com/agent-dispatch/sdk-js/actions/runs/26704348316
• Package: @agent-dispatch/sdk
• Repository: agent-dispatch/sdk-js
• Workflow: .github/workflows/publish.yml
• Current published version: 0.1.0
• Target version: 0.1.5

The workflow passed install, typecheck, tests, and build before npm rejected the publish.

Required action

In npm package settings for @agent-dispatch/sdk, configure Trusted Publisher for:

• GitHub org/user: agent-dispatch
• Repository: sdk-js
• Workflow file: publish.yml
• Environment: none, unless intentionally added to the workflow

Then rerun the GitHub Actions Publish workflow with version 0.1.5.

Downstream

Do not publish @agent-dispatch/cli@0.1.7 until @agent-dispatch/sdk@0.1.5 is published, because CLI should consume the current SDK release line.

Verified before this issue

• @agent-dispatch/core@0.1.2 published
• @agent-dispatch/adapter-aws-agentcore@0.1.5 published
• @agent-dispatch/worker-agentcore@0.1.1 published
• @agent-dispatch/mcp-server@0.1.4 published
• Local launch gate passed with refreshed evidence at /tmp/agentdispatch-launch-evidence-post-publish

[vamgan]

Correction with exact failed publish text from the latest retry.

Latest failed run:
https://github.com/agent-dispatch/sdk-js/actions/runs/26704540524

The workflow passed npm ci, npm update @agent-dispatch/core, typecheck, tests, build, and npm version 0.1.5. It failed only at npm publish with:

npm error 404 Not Found - PUT https://registry.npmjs.org/@agent-dispatch%2fsdk - Not found
npm error 404 The requested resource @agent-dispatch/sdk@0.1.5 could not be found or you do not have permission to access it.

Registry check after the retry still shows @agent-dispatch/sdk latest is 0.1.0. The repo workflow shape is valid; this remains npm-side Trusted Publisher/package permission configuration for package @agent-dispatch/sdk and GitHub repository agent-dispatch/sdk-js using .github/workflows/publish.yml.