fix: add repository field for npm provenance validation (#85)

packages/opencode/script/build.ts

@@ -171,6 +171,10 @@ for (const item of targets) {
         version: Script.version,
         os: [item.os],
         cpu: [item.arch],
+        repository: {
+          type: "git",
+          url: "https://github.com/Kilo-Org/kilo",
+        },
       },
       null,
       2,

packages/opencode/script/publish.ts

@@ -31,6 +31,10 @@ await Bun.file(`./dist/${pkg.name}/package.json`).write(
       },
       version: Script.version,
       optionalDependencies: binaries,
+      repository: {
+        type: "git",
+        url: "https://github.com/Kilo-Org/kilo",
+      },
     },
     null,
     2,