jschoubben 4b9bc50aad The builder resolves the SDK from the mesh registry, and can publish packages ...

A new 'package' artifact kind builds a module's own code on a public base image
and publishes it to the mesh's package registry by version (hq ADR 0076) — the
SDK above all, which the toolchain is built from and so cannot be built in the
toolchain. The credential a build needs to resolve or publish packages is
rendered as an .npmrc (basic auth, hq ADR 0048) and given to an image build as a
buildkit secret, never a layer, so a token is not baked into the toolchain image.

Claude-Session: https://claude.ai/code/session_01D6qtiYU3P9jk3pnAXyAFyx

2026-09-16 10:27:26 +02:00

..

mesh-builder

The builder resolves the SDK from the mesh registry, and can publish packages

2026-09-16 10:27:26 +02:00

mesh-control

The mesh's knowledge is a fact a module asks for, not three modules

2026-09-15 21:31:18 +02:00