From b468a59726202ae20b38481addba3aa1eaab5578 Mon Sep 17 00:00:00 2001
From: Marius <marius@kilocode.ai>
Date: Tue, 3 Feb 2026 09:40:15 +0100
Subject: [PATCH] fix: add repository field for npm provenance validation (#85)

---
 packages/opencode/script/build.ts   | 4 ++++
 packages/opencode/script/publish.ts | 4 ++++
 2 files changed, 8 insertions(+)

diff --git a/packages/opencode/script/build.ts b/packages/opencode/script/build.ts
index 13857fe4d48..92af0fd5bf2 100755
--- a/packages/opencode/script/build.ts
+++ b/packages/opencode/script/build.ts
@@ -171,6 +171,10 @@ for (const item of targets) {
         version: Script.version,
         os: [item.os],
         cpu: [item.arch],
+        repository: {
+          type: "git",
+          url: "https://github.com/Kilo-Org/kilo",
+        },
       },
       null,
       2,
diff --git a/packages/opencode/script/publish.ts b/packages/opencode/script/publish.ts
index 4ce0074ab30..a6f37171a53 100755
--- a/packages/opencode/script/publish.ts
+++ b/packages/opencode/script/publish.ts
@@ -31,6 +31,10 @@ await Bun.file(`./dist/${pkg.name}/package.json`).write(
       },
       version: Script.version,
       optionalDependencies: binaries,
+      repository: {
+        type: "git",
+        url: "https://github.com/Kilo-Org/kilo",
+      },
     },
     null,
     2,