From 70e3023e0958fbd04129c78729e0de2fd4ec0110 Mon Sep 17 00:00:00 2001
From: Janghoon Lee <44862514+savagemanage@users.noreply.github.com>
Date: Wed, 14 Oct 2026 06:15:49 +0000
Subject: [PATCH] fix(sdk): declare repository in package.json for npm
 provenance

npm rejects a provenance-signed publish (E422) when package.json has no
repository.url matching the repository in the sigstore bundle. publish-sdk
now authenticates through trusted publishing and signs provenance, so the
0.6.2 run reached that check and failed on the empty field. Declare the
repository (with the package directory) so the claim and the bundle agree.
---
 packages/sdk/js/package.json | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/packages/sdk/js/package.json b/packages/sdk/js/package.json
index 3b5a452629..b79b4660b4 100644
--- a/packages/sdk/js/package.json
+++ b/packages/sdk/js/package.json
@@ -4,6 +4,11 @@
   "version": "0.0.0",
   "type": "module",
   "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/redrob-labs/redrob-code.git",
+    "directory": "packages/sdk/js"
+  },
   "scripts": {
     "test": "bun test",
     "typecheck": "tsgo --noEmit",