From 74507acefb32cdca0f2933faaf1f134969aa1a8b Mon Sep 17 00:00:00 2001
From: Janghoon Lee <44862514+savagemanage@users.noreply.github.com>
Date: Wed, 14 Oct 2026 05:53:11 +0000
Subject: [PATCH] Declare the SDK's repository so npm provenance verifies

Trusted publishing authenticated, then npm refused the tarball: the sigstore bundle
names redrob-labs/redrob-code and package.json had no repository.url to match it.
---
 packages/sdk/js/package.json | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/packages/sdk/js/package.json b/packages/sdk/js/package.json
index 3b5a452629..b79b4660b4 100644
--- a/packages/sdk/js/package.json
+++ b/packages/sdk/js/package.json
@@ -4,6 +4,11 @@
   "version": "0.0.0",
   "type": "module",
   "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/redrob-labs/redrob-code.git",
+    "directory": "packages/sdk/js"
+  },
   "scripts": {
     "test": "bun test",
     "typecheck": "tsgo --noEmit",