Migrate module path from kyle/ to mc/ org

All import paths updated to git.wntrmute.dev/mc/. Bumps mcdsl to v1.2.0.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

internal/auth/client.go

@@ -4,7 +4,7 @@ import (
 	"errors"
 	"log/slog"
 
-	mcdslauth "git.wntrmute.dev/kyle/mcdsl/auth"
+	mcdslauth "git.wntrmute.dev/mc/mcdsl/auth"
 )
 
 // Client communicates with an MCIAS server for authentication and token

internal/config/config.go

@@ -5,7 +5,7 @@ import (
 	"os"
 	"path/filepath"
 
-	mcdslconfig "git.wntrmute.dev/kyle/mcdsl/config"
+	mcdslconfig "git.wntrmute.dev/mc/mcdsl/config"
 )
 
 // Config is the top-level MCR configuration. It embeds config.Base for
@@ -24,9 +24,10 @@ type StorageConfig struct {
 
 // WebConfig holds the web UI server settings.
 type WebConfig struct {
-	ListenAddr string `toml:"listen_addr"`
-	GRPCAddr   string `toml:"grpc_addr"`
-	CACert     string `toml:"ca_cert"`
+	ListenAddr    string `toml:"listen_addr"`
+	GRPCAddr      string `toml:"grpc_addr"`
+	CACert        string `toml:"ca_cert"`
+	TLSServerName string `toml:"tls_server_name"`
 }
 
 // Load reads a TOML config file, applies environment variable overrides

internal/db/db.go

@@ -4,7 +4,7 @@ import (
 	"database/sql"
 	"fmt"
 
-	mcdsldb "git.wntrmute.dev/kyle/mcdsl/db"
+	mcdsldb "git.wntrmute.dev/mc/mcdsl/db"
 )
 
 // DB wraps a SQLite database connection.

internal/db/gc.go

@@ -5,7 +5,7 @@ import (
 	"errors"
 	"fmt"
 
-	"git.wntrmute.dev/kyle/mcr/internal/gc"
+	"git.wntrmute.dev/mc/mcr/internal/gc"
 )
 
 // FindAndDeleteUnreferencedBlobs finds all blob rows with no manifest_blobs

internal/db/migrate.go

@@ -1,7 +1,7 @@
 package db
 
 import (
-	mcdsldb "git.wntrmute.dev/kyle/mcdsl/db"
+	mcdsldb "git.wntrmute.dev/mc/mcdsl/db"
 )
 
 // Migrations is the ordered list of MCR schema migrations.

internal/db/policy.go

@@ -4,7 +4,7 @@ import (
 	"encoding/json"
 	"fmt"
 
-	"git.wntrmute.dev/kyle/mcr/internal/policy"
+	"git.wntrmute.dev/mc/mcr/internal/policy"
 )
 
 // ruleBody is the JSON structure stored in the rule_json column.

internal/db/policy_test.go

@@ -3,7 +3,7 @@ package db
 import (
 	"testing"
 
-	"git.wntrmute.dev/kyle/mcr/internal/policy"
+	"git.wntrmute.dev/mc/mcr/internal/policy"
 )
 
 func TestLoadEnabledPolicyRules(t *testing.T) {

internal/grpcserver/admin.go

@@ -3,7 +3,7 @@ package grpcserver
 import (
 	"context"
 
-	pb "git.wntrmute.dev/kyle/mcr/gen/mcr/v1"
+	pb "git.wntrmute.dev/mc/mcr/gen/mcr/v1"
 )
 
 // adminService implements pb.AdminServiceServer.

internal/grpcserver/admin_test.go

@@ -4,7 +4,7 @@ import (
 	"context"
 	"testing"
 
-	pb "git.wntrmute.dev/kyle/mcr/gen/mcr/v1"
+	pb "git.wntrmute.dev/mc/mcr/gen/mcr/v1"
 )
 
 func TestHealthReturnsOk(t *testing.T) {

internal/grpcserver/audit.go

@@ -6,8 +6,8 @@ import (
 	"google.golang.org/grpc/codes"
 	"google.golang.org/grpc/status"
 
-	pb "git.wntrmute.dev/kyle/mcr/gen/mcr/v1"
-	"git.wntrmute.dev/kyle/mcr/internal/db"
+	pb "git.wntrmute.dev/mc/mcr/gen/mcr/v1"
+	"git.wntrmute.dev/mc/mcr/internal/db"
 )
 
 // auditService implements pb.AuditServiceServer.

internal/grpcserver/audit_test.go

@@ -3,7 +3,7 @@ package grpcserver
 import (
 	"testing"
 
-	pb "git.wntrmute.dev/kyle/mcr/gen/mcr/v1"
+	pb "git.wntrmute.dev/mc/mcr/gen/mcr/v1"
 )
 
 func TestListAuditEventsEmpty(t *testing.T) {

internal/grpcserver/interceptors.go

@@ -1,7 +1,7 @@
 package grpcserver
 
 import (
-	mcdslgrpc "git.wntrmute.dev/kyle/mcdsl/grpcserver"
+	mcdslgrpc "git.wntrmute.dev/mc/mcdsl/grpcserver"
 )
 
 // methodMap builds the mcdsl grpcserver.MethodMap for MCR.

internal/grpcserver/interceptors_test.go

@@ -16,10 +16,10 @@ import (
 	"google.golang.org/grpc/metadata"
 	"google.golang.org/grpc/status"
 
-	mcdslauth "git.wntrmute.dev/kyle/mcdsl/auth"
+	mcdslauth "git.wntrmute.dev/mc/mcdsl/auth"
 
-	pb "git.wntrmute.dev/kyle/mcr/gen/mcr/v1"
-	"git.wntrmute.dev/kyle/mcr/internal/db"
+	pb "git.wntrmute.dev/mc/mcr/gen/mcr/v1"
+	"git.wntrmute.dev/mc/mcr/internal/db"
 )
 
 // mockMCIAS starts a fake MCIAS HTTP server for token validation.

internal/grpcserver/policy.go

@@ -9,11 +9,11 @@ import (
 	"google.golang.org/grpc/codes"
 	"google.golang.org/grpc/status"
 
-	mcdslauth "git.wntrmute.dev/kyle/mcdsl/auth"
+	mcdslauth "git.wntrmute.dev/mc/mcdsl/auth"
 
-	pb "git.wntrmute.dev/kyle/mcr/gen/mcr/v1"
-	"git.wntrmute.dev/kyle/mcr/internal/db"
-	"git.wntrmute.dev/kyle/mcr/internal/policy"
+	pb "git.wntrmute.dev/mc/mcr/gen/mcr/v1"
+	"git.wntrmute.dev/mc/mcr/internal/db"
+	"git.wntrmute.dev/mc/mcr/internal/policy"
 )
 
 var validActions = map[string]bool{

internal/grpcserver/policy_test.go

@@ -6,8 +6,8 @@ import (
 	"google.golang.org/grpc/codes"
 	"google.golang.org/grpc/status"
 
-	pb "git.wntrmute.dev/kyle/mcr/gen/mcr/v1"
-	"git.wntrmute.dev/kyle/mcr/internal/policy"
+	pb "git.wntrmute.dev/mc/mcr/gen/mcr/v1"
+	"git.wntrmute.dev/mc/mcr/internal/policy"
 )
 
 type fakePolicyReloader struct {

internal/grpcserver/registry.go

@@ -11,11 +11,11 @@ import (
 
 	"github.com/google/uuid"
 
-	mcdslauth "git.wntrmute.dev/kyle/mcdsl/auth"
+	mcdslauth "git.wntrmute.dev/mc/mcdsl/auth"
 
-	pb "git.wntrmute.dev/kyle/mcr/gen/mcr/v1"
-	"git.wntrmute.dev/kyle/mcr/internal/db"
-	"git.wntrmute.dev/kyle/mcr/internal/gc"
+	pb "git.wntrmute.dev/mc/mcr/gen/mcr/v1"
+	"git.wntrmute.dev/mc/mcr/internal/db"
+	"git.wntrmute.dev/mc/mcr/internal/gc"
 )
 
 // registryService implements pb.RegistryServiceServer.

internal/grpcserver/registry_test.go

@@ -8,9 +8,9 @@ import (
 	"google.golang.org/grpc/codes"
 	"google.golang.org/grpc/status"
 
-	mcdslauth "git.wntrmute.dev/kyle/mcdsl/auth"
+	mcdslauth "git.wntrmute.dev/mc/mcdsl/auth"
 
-	pb "git.wntrmute.dev/kyle/mcr/gen/mcr/v1"
+	pb "git.wntrmute.dev/mc/mcr/gen/mcr/v1"
 )
 
 // testMCIAS is a package-level variable set by adminDeps for reuse.

internal/grpcserver/server.go

@@ -11,13 +11,13 @@ import (
 	"net"
 	"sync"
 
-	mcdslauth "git.wntrmute.dev/kyle/mcdsl/auth"
-	mcdslgrpc "git.wntrmute.dev/kyle/mcdsl/grpcserver"
+	mcdslauth "git.wntrmute.dev/mc/mcdsl/auth"
+	mcdslgrpc "git.wntrmute.dev/mc/mcdsl/grpcserver"
 
-	pb "git.wntrmute.dev/kyle/mcr/gen/mcr/v1"
-	"git.wntrmute.dev/kyle/mcr/internal/db"
-	"git.wntrmute.dev/kyle/mcr/internal/gc"
-	"git.wntrmute.dev/kyle/mcr/internal/policy"
+	pb "git.wntrmute.dev/mc/mcr/gen/mcr/v1"
+	"git.wntrmute.dev/mc/mcr/internal/db"
+	"git.wntrmute.dev/mc/mcr/internal/gc"
+	"git.wntrmute.dev/mc/mcr/internal/policy"
 )
 
 // AuditFunc is a callback for recording audit events. It follows the same

internal/oci/blob.go

@@ -7,8 +7,8 @@ import (
 	"net/http"
 	"strconv"
 
-	"git.wntrmute.dev/kyle/mcr/internal/db"
-	"git.wntrmute.dev/kyle/mcr/internal/policy"
+	"git.wntrmute.dev/mc/mcr/internal/db"
+	"git.wntrmute.dev/mc/mcr/internal/policy"
 )
 
 func (h *Handler) handleBlobGet(w http.ResponseWriter, r *http.Request, repo, digest string) {

internal/oci/catalog.go

@@ -6,7 +6,7 @@ import (
 	"net/http"
 	"strconv"
 
-	"git.wntrmute.dev/kyle/mcr/internal/policy"
+	"git.wntrmute.dev/mc/mcr/internal/policy"
 )
 
 type catalogResponse struct {

internal/oci/delete.go

@@ -5,8 +5,8 @@ import (
 	"fmt"
 	"net/http"
 
-	"git.wntrmute.dev/kyle/mcr/internal/db"
-	"git.wntrmute.dev/kyle/mcr/internal/policy"
+	"git.wntrmute.dev/mc/mcr/internal/db"
+	"git.wntrmute.dev/mc/mcr/internal/policy"
 )
 
 // handleManifestDelete handles DELETE /v2/<name>/manifests/<digest>.

internal/oci/handler.go

@@ -6,10 +6,10 @@ import (
 	"net/http"
 	"strings"
 
-	"git.wntrmute.dev/kyle/mcr/internal/auth"
-	"git.wntrmute.dev/kyle/mcr/internal/db"
-	"git.wntrmute.dev/kyle/mcr/internal/policy"
-	"git.wntrmute.dev/kyle/mcr/internal/storage"
+	"git.wntrmute.dev/mc/mcr/internal/auth"
+	"git.wntrmute.dev/mc/mcr/internal/db"
+	"git.wntrmute.dev/mc/mcr/internal/policy"
+	"git.wntrmute.dev/mc/mcr/internal/storage"
 )
 
 // DBQuerier provides the database operations needed by OCI handlers.

internal/oci/handler_test.go

@@ -10,10 +10,10 @@ import (
 
 	"github.com/go-chi/chi/v5"
 
-	"git.wntrmute.dev/kyle/mcr/internal/auth"
-	"git.wntrmute.dev/kyle/mcr/internal/db"
-	"git.wntrmute.dev/kyle/mcr/internal/policy"
-	"git.wntrmute.dev/kyle/mcr/internal/storage"
+	"git.wntrmute.dev/mc/mcr/internal/auth"
+	"git.wntrmute.dev/mc/mcr/internal/db"
+	"git.wntrmute.dev/mc/mcr/internal/policy"
+	"git.wntrmute.dev/mc/mcr/internal/storage"
 )
 
 // manifestKey uniquely identifies a manifest for test lookup.

internal/oci/manifest.go

@@ -10,9 +10,9 @@ import (
 	"net/http"
 	"strconv"
 
-	"git.wntrmute.dev/kyle/mcr/internal/auth"
-	"git.wntrmute.dev/kyle/mcr/internal/db"
-	"git.wntrmute.dev/kyle/mcr/internal/policy"
+	"git.wntrmute.dev/mc/mcr/internal/auth"
+	"git.wntrmute.dev/mc/mcr/internal/db"
+	"git.wntrmute.dev/mc/mcr/internal/policy"
 )
 
 func (h *Handler) handleManifestGet(w http.ResponseWriter, r *http.Request, repo, reference string) {

internal/oci/tags.go

@@ -7,8 +7,8 @@ import (
 	"net/http"
 	"strconv"
 
-	"git.wntrmute.dev/kyle/mcr/internal/db"
-	"git.wntrmute.dev/kyle/mcr/internal/policy"
+	"git.wntrmute.dev/mc/mcr/internal/db"
+	"git.wntrmute.dev/mc/mcr/internal/policy"
 )
 
 type tagListResponse struct {

internal/oci/upload.go

@@ -8,9 +8,9 @@ import (
 	"net/http"
 	"sync"
 
-	"git.wntrmute.dev/kyle/mcr/internal/db"
-	"git.wntrmute.dev/kyle/mcr/internal/policy"
-	"git.wntrmute.dev/kyle/mcr/internal/storage"
+	"git.wntrmute.dev/mc/mcr/internal/db"
+	"git.wntrmute.dev/mc/mcr/internal/policy"
+	"git.wntrmute.dev/mc/mcr/internal/storage"
 )
 
 // uploadManager tracks in-progress blob writers by UUID.

internal/oci/upload_test.go

@@ -12,8 +12,8 @@ import (
 
 	"github.com/go-chi/chi/v5"
 
-	"git.wntrmute.dev/kyle/mcr/internal/auth"
-	"git.wntrmute.dev/kyle/mcr/internal/storage"
+	"git.wntrmute.dev/mc/mcr/internal/auth"
+	"git.wntrmute.dev/mc/mcr/internal/storage"
 )
 
 // testHandlerWithStorage creates a handler with real storage in t.TempDir().

internal/server/admin.go

@@ -4,7 +4,7 @@ import (
 	"encoding/json"
 	"net/http"
 
-	"git.wntrmute.dev/kyle/mcr/internal/auth"
+	"git.wntrmute.dev/mc/mcr/internal/auth"
 )
 
 type adminErrorResponse struct {

internal/server/admin_audit.go

@@ -4,7 +4,7 @@ import (
 	"net/http"
 	"strconv"
 
-	"git.wntrmute.dev/kyle/mcr/internal/db"
+	"git.wntrmute.dev/mc/mcr/internal/db"
 )
 
 // AdminListAuditHandler handles GET /v1/audit.

internal/server/admin_audit_test.go

@@ -4,7 +4,7 @@ import (
 	"encoding/json"
 	"testing"
 
-	"git.wntrmute.dev/kyle/mcr/internal/db"
+	"git.wntrmute.dev/mc/mcr/internal/db"
 )
 
 func TestAdminListAuditEvents(t *testing.T) {

internal/server/admin_auth_test.go

@@ -6,7 +6,7 @@ import (
 
 	"github.com/go-chi/chi/v5"
 
-	"git.wntrmute.dev/kyle/mcr/internal/auth"
+	"git.wntrmute.dev/mc/mcr/internal/auth"
 )
 
 func TestAdminHealthHandler(t *testing.T) {

internal/server/admin_gc.go

@@ -9,7 +9,7 @@ import (
 
 	"github.com/google/uuid"
 
-	"git.wntrmute.dev/kyle/mcr/internal/gc"
+	"git.wntrmute.dev/mc/mcr/internal/gc"
 )
 
 // GCLastRun records the result of the last GC run.

internal/server/admin_policy.go

@@ -9,9 +9,9 @@ import (
 
 	"github.com/go-chi/chi/v5"
 
-	"git.wntrmute.dev/kyle/mcr/internal/auth"
-	"git.wntrmute.dev/kyle/mcr/internal/db"
-	"git.wntrmute.dev/kyle/mcr/internal/policy"
+	"git.wntrmute.dev/mc/mcr/internal/auth"
+	"git.wntrmute.dev/mc/mcr/internal/db"
+	"git.wntrmute.dev/mc/mcr/internal/policy"
 )
 
 // PolicyReloader can reload policy rules from a store.

internal/server/admin_policy_test.go

@@ -5,7 +5,7 @@ import (
 	"fmt"
 	"testing"
 
-	"git.wntrmute.dev/kyle/mcr/internal/db"
+	"git.wntrmute.dev/mc/mcr/internal/db"
 )
 
 func TestAdminPolicyCRUDCycle(t *testing.T) {

internal/server/admin_repo.go

@@ -7,8 +7,8 @@ import (
 
 	"github.com/go-chi/chi/v5"
 
-	"git.wntrmute.dev/kyle/mcr/internal/auth"
-	"git.wntrmute.dev/kyle/mcr/internal/db"
+	"git.wntrmute.dev/mc/mcr/internal/auth"
+	"git.wntrmute.dev/mc/mcr/internal/db"
 )
 
 // AdminListReposHandler handles GET /v1/repositories.

internal/server/admin_repo_test.go

@@ -4,7 +4,7 @@ import (
 	"encoding/json"
 	"testing"
 
-	"git.wntrmute.dev/kyle/mcr/internal/db"
+	"git.wntrmute.dev/mc/mcr/internal/db"
 )
 
 // seedRepoForAdmin inserts a repository with a manifest and tags into the test DB.

internal/server/admin_routes.go

@@ -3,7 +3,7 @@ package server
 import (
 	"github.com/go-chi/chi/v5"
 
-	"git.wntrmute.dev/kyle/mcr/internal/db"
+	"git.wntrmute.dev/mc/mcr/internal/db"
 )
 
 // AdminDeps holds the dependencies needed by admin routes.

internal/server/admin_test.go

@@ -10,9 +10,9 @@ import (
 
 	"github.com/go-chi/chi/v5"
 
-	"git.wntrmute.dev/kyle/mcr/internal/auth"
-	"git.wntrmute.dev/kyle/mcr/internal/db"
-	"git.wntrmute.dev/kyle/mcr/internal/policy"
+	"git.wntrmute.dev/mc/mcr/internal/auth"
+	"git.wntrmute.dev/mc/mcr/internal/db"
+	"git.wntrmute.dev/mc/mcr/internal/policy"
 )
 
 func openAdminTestDB(t *testing.T) *db.DB {

internal/server/middleware.go

@@ -5,7 +5,7 @@ import (
 	"net/http"
 	"strings"
 
-	"git.wntrmute.dev/kyle/mcr/internal/auth"
+	"git.wntrmute.dev/mc/mcr/internal/auth"
 )
 
 // TokenValidator abstracts token validation so the middleware can work

internal/server/middleware_test.go

@@ -6,7 +6,7 @@ import (
 	"net/http/httptest"
 	"testing"
 
-	"git.wntrmute.dev/kyle/mcr/internal/auth"
+	"git.wntrmute.dev/mc/mcr/internal/auth"
 )
 
 type fakeValidator struct {

internal/server/policy.go

@@ -5,8 +5,8 @@ import (
 
 	"github.com/go-chi/chi/v5"
 
-	"git.wntrmute.dev/kyle/mcr/internal/auth"
-	"git.wntrmute.dev/kyle/mcr/internal/policy"
+	"git.wntrmute.dev/mc/mcr/internal/auth"
+	"git.wntrmute.dev/mc/mcr/internal/policy"
 )
 
 // PolicyEvaluator abstracts the policy engine for testability.

internal/server/policy_test.go

@@ -8,8 +8,8 @@ import (
 
 	"github.com/go-chi/chi/v5"
 
-	"git.wntrmute.dev/kyle/mcr/internal/auth"
-	"git.wntrmute.dev/kyle/mcr/internal/policy"
+	"git.wntrmute.dev/mc/mcr/internal/auth"
+	"git.wntrmute.dev/mc/mcr/internal/policy"
 )
 
 type fakePolicyEvaluator struct {

internal/server/routes_test.go

@@ -6,7 +6,7 @@ import (
 	"net/http/httptest"
 	"testing"
 
-	"git.wntrmute.dev/kyle/mcr/internal/auth"
+	"git.wntrmute.dev/mc/mcr/internal/auth"
 )
 
 func TestRoutesV2Authenticated(t *testing.T) {

internal/server/token_test.go

@@ -6,7 +6,7 @@ import (
 	"net/http/httptest"
 	"testing"
 
-	"git.wntrmute.dev/kyle/mcr/internal/auth"
+	"git.wntrmute.dev/mc/mcr/internal/auth"
 )
 
 type fakeLoginClient struct {

internal/webserver/handlers.go

@@ -7,7 +7,7 @@ import (
 	"strconv"
 	"strings"
 
-	mcrv1 "git.wntrmute.dev/kyle/mcr/gen/mcr/v1"
+	mcrv1 "git.wntrmute.dev/mc/mcr/gen/mcr/v1"
 
 	"google.golang.org/grpc/codes"
 	"google.golang.org/grpc/metadata"

internal/webserver/server.go

@@ -14,8 +14,8 @@ import (
 	"github.com/go-chi/chi/v5"
 	"github.com/go-chi/chi/v5/middleware"
 
-	mcrv1 "git.wntrmute.dev/kyle/mcr/gen/mcr/v1"
-	"git.wntrmute.dev/kyle/mcr/web"
+	mcrv1 "git.wntrmute.dev/mc/mcr/gen/mcr/v1"
+	"git.wntrmute.dev/mc/mcr/web"
 )
 
 // LoginFunc authenticates a user and returns a bearer token.

internal/webserver/server_test.go

@@ -15,7 +15,7 @@ import (
 	"google.golang.org/grpc/credentials/insecure"
 	"google.golang.org/grpc/status"
 
-	mcrv1 "git.wntrmute.dev/kyle/mcr/gen/mcr/v1"
+	mcrv1 "git.wntrmute.dev/mc/mcr/gen/mcr/v1"
 )
 
 // fakeRegistryService implements RegistryServiceServer for testing.

internal/webserver/templates.go

@@ -8,7 +8,7 @@ import (
 	"strings"
 	"time"
 
-	"git.wntrmute.dev/kyle/mcr/web"
+	"git.wntrmute.dev/mc/mcr/web"
 )
 
 // templateSet wraps parsed templates and provides a render method.