mesh-catalog

Files

T

jschoubben ce989b001a F-catalog-B: the gitea module removes the npm pair's teams packages and readers and their accounts

ADR 0605 §5 revokes the npm write token, and the 14:04 deferral is withdrawn (security review F5): the
accounts the removed pair provisioner made (mesh_<node>_<consumer>) still logged in with write on the
organisation's packages. cmd/agent-teams, run at each start of the module and change of its teams value,
removes both teams and each account of that form whose only teams they are, never purging: one the forge
refuses to delete because it owns something keeps it and has its login prohibited.

Claude-Session: https://claude.ai/code/session_01JG73KJNrH5EgFXMKKYSrig

2026-11-04 17:15:41 +01:00

agent-teams

F-catalog-B: the gitea module removes the npm pair's teams packages and readers and their accounts

2026-11-04 17:15:41 +01:00

agent-token

CAT-G1, G2: the forge's Go bundle serves both package seats' verbs into its package registry, for both packages

2026-11-04 13:43:59 +01:00

forge

CAT-G2: the package seats write as an account of their own, the tools' token reads packages

2026-11-04 14:14:14 +01:00

forge-account-provider

Make tests that wait for concurrent work wait on the event or a condition with a long deadline (issue 1814)