From 1a66f104ad7fd17e4ef58c503582da3f07e16cb3 Mon Sep 17 00:00:00 2001 From: Ryan Dombrowski Date: Mon, 10 Aug 2026 21:30:35 -0400 Subject: [PATCH] =?UTF-8?q?fix:=20declare=20repository.url=20=E2=80=94=20r?= =?UTF-8?q?equired=20by=20npm=20provenance=20validation?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Trusted publishing now authenticates (E404 gone) but provenance verification rejects the tarball: package.json carried no repository field, and sigstore validation requires it to match the workflow's repo. Mirrors dspack-gen's shape. Co-Authored-By: Claude Fable 5 --- package.json | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/package.json b/package.json index c3d5c9f..859a7eb 100644 --- a/package.json +++ b/package.json @@ -2,8 +2,12 @@ "name": "@aestheticfunction/dspack-emit", "version": "0.7.0", "type": "module", - "description": "dspack emitters: compile a dspack design-system contract and dspack surfaces into protocol targets \u2014 an A2UI catalog + surface messages (gates A1-A3) and json-render catalog/registry modules + specs (gates J1-J3).", + "description": "dspack emitters: compile a dspack design-system contract and dspack surfaces into protocol targets — an A2UI catalog + surface messages (gates A1-A3) and json-render catalog/registry modules + specs (gates J1-J3).", "license": "Apache-2.0", + "repository": { + "type": "git", + "url": "git+https://github.com/aestheticfunction/dspack-emit.git" + }, "exports": { ".": { "types": "./dist/index.d.ts",