@agent-native/dispatch 0.40.23-nightly-20261014124140 → 0.40.23

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/dispatch",
-  "version": "0.40.23-nightly-20261014124140",
+  "version": "0.40.23",
   "description": "Dispatch — workspace control plane for agent-native apps. Vault, integrations, destinations, scheduled jobs, and cross-app delegation, shipped as a single drop-in package.",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {
@@ -89,7 +89,7 @@
     "tailwind-merge": "^3.5.0",
     "vaul": "^1.1.2",
     "zod": "^4.3.6",
-    "@agent-native/toolkit": "0.209.0-nightly-20261014124140"
+    "@agent-native/toolkit": "0.209.0"
   },
   "devDependencies": {
     "@react-router/dev": "^8.1.0",
@@ -103,10 +103,10 @@
     "typescript-7": "npm:typescript@^7.0.2",
     "vite": "8.1.0",
     "vitest": "^4.1.5",
-    "@agent-native/core": "0.209.0-nightly-20261014124140"
+    "@agent-native/core": "0.209.0"
   },
   "peerDependencies": {
-    "@agent-native/core": "0.209.0-nightly-20261014124140",
+    "@agent-native/core": ">=0.198.6",
     "react": ">=19.2.7",
     "react-dom": ">=19.2.7",
     "react-router": ">=8"

package/src/actions/start-workspace-app-creation.ts

@@ -22,7 +22,6 @@ const attachmentSchema = z.discriminatedUnion("type", [
     name: z.string().min(1),
     dataUrl: z.string(),
     text: z.string().optional(),
-    size: z.number().int().nonnegative(),
     id: z.string().min(1),
   }),
   z.object({

package/src/server/lib/app-creation-store.spec.ts

@@ -2133,7 +2133,6 @@ describe("startWorkspaceAppCreation", () => {
               name: "notes.txt",
               dataUrl: "",
               text: "Requirements",
-              size: Buffer.byteLength("Requirements", "utf8"),
               id: "file-notes",
             },
           ],
@@ -2153,6 +2152,74 @@ describe("startWorkspaceAppCreation", () => {
     );
   });
 
+  it("rejects an invalid attachment before reserving the app or calling Builder", async () => {
+    stubHostedRuntime();
+    stubBuilderProjectConfigured();
+    mocks.runBuilderAgent.mockClear();
+
+    await expect(
+      runWithRequestContext(
+        { userEmail: "dev@example.test", orgId: "org-123" },
+        () =>
+          startWorkspaceAppCreation({
+            prompt: "Build an app",
+            appId: "onboarding",
+            attachments: [
+              {
+                type: "upload",
+                contentType: "text/plain",
+                name: "notes.md",
+                dataUrl: "",
+                id: "file-notes",
+              },
+            ],
+          }),
+      ),
+    ).rejects.toMatchObject({ errorCode: "invalid_attachment" });
+    expect(mocks.runBuilderAgent).not.toHaveBeenCalled();
+  });
+
+  it("logs why Builder could not start the branch", async () => {
+    stubHostedRuntime();
+    stubBuilderProjectConfigured();
+    mocks.resolveBuilderCredentialsDetailed.mockResolvedValue(
+      credentials({
+        privateKey: "priv",
+        publicKey: "pub",
+        userId: "builder-user-42",
+      }),
+    );
+    mocks.runBuilderAgent.mockRejectedValue(
+      new Error("Builder agent run failed (500)", {
+        cause: new Error("socket hang up"),
+      }),
+    );
+    const warn = vi.spyOn(console, "warn").mockImplementation(() => {});
+
+    const result = (await runWithRequestContext(
+      { userEmail: "dev@example.test", orgId: "org-123" },
+      () =>
+        startWorkspaceAppCreation({
+          prompt: "Build an app",
+          appId: "onboarding",
+        }),
+    )) as any;
+
+    expect(result).toMatchObject({
+      mode: "builder-unavailable",
+      reason: "builder-error",
+    });
+    const logged = warn.mock.calls.find(
+      ([message]) =>
+        message === "[dispatch] workspace app creation unavailable",
+    );
+    expect(logged?.[1]).toMatchObject({
+      appId: "onboarding",
+      reason: "builder-error",
+      error: expect.stringContaining("socket hang up"),
+    });
+  });
+
   it("does not let an organization member persist an auto-provisioned project", async () => {
     stubHostedRuntime();
     mocks.state.orgRole = "member";

package/src/server/lib/app-creation-store.ts

@@ -5,6 +5,7 @@ import { fileURLToPath } from "node:url";
 
 import { canonicalA2AAudience, signA2AToken } from "@agent-native/core/a2a";
 import { isActionContractError } from "@agent-native/core/action";
+import { describeErrorWithCauses } from "@agent-native/core/agent/engine/error-detail";
 import { getDbExec } from "@agent-native/core/db";
 import {
   getOrgDomain,
@@ -21,6 +22,7 @@ import {
   readConfiguredWorkspaceAppHomePath,
   resolveAppRuntimeUrl,
   resolveVercelDeploymentProtectionHeaders,
+  normalizeBuilderAgentAttachments,
   runBuilderAgent,
   type BuilderAgentAttachment,
 } from "@agent-native/core/server";
@@ -2782,6 +2784,12 @@ function builderUnavailable(input: {
     input.err instanceof Error && input.err.message
       ? input.err.message
       : input.fallbackDetail;
+  console.warn("[dispatch] workspace app creation unavailable", {
+    appId: input.appId,
+    projectId: input.projectId,
+    reason,
+    error: describeErrorWithCauses(input.err),
+  });
   const base = {
     mode: "builder-unavailable" as const,
     appId: input.appId,
@@ -2894,11 +2902,16 @@ export async function startWorkspaceAppCreation(input: {
   });
   assertValidWorkspaceAppId(initial.appId);
   requireWorkspaceAppOrgId();
+  normalizeBuilderAgentAttachments(input.attachments);
   const isLocal = isLocalAppCreationRuntime();
 
   if (!isLocal) {
     const authorization = await remoteAppCreationAuthorization();
     if (authorization.ok === false) {
+      console.warn("[dispatch] workspace app creation not authorized", {
+        appId: initial.appId,
+        reason: authorization.reason,
+      });
       return {
         mode: "builder-unavailable",
         appId: initial.appId,
@@ -2972,6 +2985,10 @@ export async function startWorkspaceAppCreation(input: {
       builderProjectId = (await ensureBuilderProjectForWorkspace()).projectId;
     } catch (err) {
       if (err instanceof AppCreationSettingsAuthorizationError) {
+        console.warn(
+          "[dispatch] workspace app creation needs an owner or admin to configure the Builder project",
+          { appId: built.appId },
+        );
         return {
           mode: "builder-unavailable",
           appId: built.appId,