Update module URL

README.md

@@ -257,7 +257,7 @@ $ curl -s https://meshtender.com/version
   "arch": "amd64",
   "executableSHA256": "9f2c…",
   "imageDigest": "sha256:a41b…",
-  "source": "https://github.com/jleight/meshtender",
+  "source": "https://github.com/MeshTender/MeshTender",
   "license": "AGPL-3.0-only"
 }
 ```
@@ -270,7 +270,7 @@ binary, which `commit` then lets you check.
 Then rebuild that commit for that platform and compare digests:
 
 ```sh
-git clone https://github.com/jleight/meshtender && cd meshtender
+git clone https://github.com/MeshTender/MeshTender && cd MeshTender
 git checkout 62e30036ee0bfb28f6c1a4a3f5ac5f4a52e4b1c9   # the commit /version reported
 mise install                                            # installs the pinned Go and ko
 mise run image --platform linux/amd64                   # the os/arch /version reported

TRADEMARKS.md

@@ -60,7 +60,7 @@ You must:
    it is what the footer link on every page and the `/version` endpoint report, so
    leaving it as ours would advertise source you are not running.
 4. **Keep the attribution.** Say somewhere visible that your service is based on
-   MeshTender, with a link to <https://github.com/jleight/meshtender>. Copyright
+   MeshTender, with a link to <https://github.com/MeshTender/MeshTender>. Copyright
    notices in the source stay as they are (AGPL §5(a)).
 
 You may not imply that your instance is run, endorsed, reviewed, or supported by
@@ -77,7 +77,7 @@ the MeshTender project or its maintainer.
 ## Contact
 
 For anything this file does not cover, including permission to use the name or
-mark, ask first: <https://github.com/jleight/meshtender/issues>.
+mark, ask first: <https://github.com/MeshTender/MeshTender/issues>.
 
 Copyright © 2026 Jonathon Leight. All rights in the MeshTender name and marks are
 reserved.

cmd/licenses/main.go

@@ -31,7 +31,8 @@ import (
 	"strings"
 
 	"github.com/google/licensecheck"
-	"github.com/jleight/meshtender/internal/licenses"
+
+	"github.com/MeshTender/MeshTender/internal/licenses"
 )
 
 // minCoverage mirrors the threshold the package test uses.

cmd/meshtender/main.go

@@ -12,15 +12,15 @@ import (
 	"syscall"
 	"time"
 
-	"github.com/jleight/meshtender/internal/analytics"
-	"github.com/jleight/meshtender/internal/auth"
-	"github.com/jleight/meshtender/internal/config"
-	"github.com/jleight/meshtender/internal/core"
-	"github.com/jleight/meshtender/internal/identity"
-	"github.com/jleight/meshtender/internal/mail"
-	"github.com/jleight/meshtender/internal/seed"
-	"github.com/jleight/meshtender/internal/store"
-	"github.com/jleight/meshtender/internal/web"
+	"github.com/MeshTender/MeshTender/internal/analytics"
+	"github.com/MeshTender/MeshTender/internal/auth"
+	"github.com/MeshTender/MeshTender/internal/config"
+	"github.com/MeshTender/MeshTender/internal/core"
+	"github.com/MeshTender/MeshTender/internal/identity"
+	"github.com/MeshTender/MeshTender/internal/mail"
+	"github.com/MeshTender/MeshTender/internal/seed"
+	"github.com/MeshTender/MeshTender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/web"
 )
 
 func main() {

go.mod

@@ -1,4 +1,4 @@
-module github.com/jleight/meshtender
+module github.com/MeshTender/MeshTender
 
 // The exact toolchain is pinned with GOTOOLCHAIN (see .config/mise/config.toml
 // and .woodpecker/build.yaml) rather than a `toolchain` directive, which Go

internal/analytics/analytics.go

@@ -16,9 +16,9 @@ import (
 	"strings"
 	"time"
 
-	"github.com/jleight/meshtender/internal/config"
-	"github.com/jleight/meshtender/internal/store"
-	"github.com/jleight/meshtender/internal/web"
+	"github.com/MeshTender/MeshTender/internal/config"
+	"github.com/MeshTender/MeshTender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/web"
 )
 
 const (

internal/analytics/analytics_test.go

@@ -5,8 +5,8 @@ import (
 	"net/http/httptest"
 	"testing"
 
-	"github.com/jleight/meshtender/internal/config"
-	"github.com/jleight/meshtender/internal/web"
+	"github.com/MeshTender/MeshTender/internal/config"
+	"github.com/MeshTender/MeshTender/internal/web"
 )
 
 func testRecorder() *Recorder {

internal/analytics/main_test.go

@@ -4,7 +4,7 @@ import (
 	"os"
 	"testing"
 
-	"github.com/jleight/meshtender/internal/testdb"
+	"github.com/MeshTender/MeshTender/internal/testdb"
 )
 
 // TestMain wires testdb's container teardown. The container only starts if a test

internal/analytics/shutdown_test.go

@@ -5,9 +5,9 @@ import (
 	"testing"
 	"time"
 
-	"github.com/jleight/meshtender/internal/config"
-	"github.com/jleight/meshtender/internal/store"
-	"github.com/jleight/meshtender/internal/testdb"
+	"github.com/MeshTender/MeshTender/internal/config"
+	"github.com/MeshTender/MeshTender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/testdb"
 )
 
 func analyticsMigrate(dsn string) error {

internal/auth/account.go

@@ -13,8 +13,8 @@ import (
 
 	meshcore "github.com/meshcore-go/meshcore-go"
 
-	"github.com/jleight/meshtender/internal/store"
-	"github.com/jleight/meshtender/internal/web"
+	"github.com/MeshTender/MeshTender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/web"
 )
 
 // passkeyView is display metadata for one registered passkey.

internal/auth/delete_handlers.go

@@ -4,8 +4,8 @@ import (
 	"errors"
 	"net/http"
 
-	"github.com/jleight/meshtender/internal/store"
-	"github.com/jleight/meshtender/internal/web"
+	"github.com/MeshTender/MeshTender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/web"
 )
 
 // Account deletion. The page's job is to make the consequences legible before

internal/auth/email.go

@@ -12,8 +12,8 @@ import (
 	"strings"
 	"time"
 
-	mailer "github.com/jleight/meshtender/internal/mail"
-	"github.com/jleight/meshtender/internal/store"
+	mailer "github.com/MeshTender/MeshTender/internal/mail"
+	"github.com/MeshTender/MeshTender/internal/store"
 )
 
 // ErrTooManyEmails reports that an account has asked for more messages of one kind

internal/auth/email_handlers.go

@@ -6,8 +6,8 @@ import (
 
 	"github.com/go-chi/chi/v5"
 
-	"github.com/jleight/meshtender/internal/store"
-	"github.com/jleight/meshtender/internal/web"
+	"github.com/MeshTender/MeshTender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/web"
 )
 
 // Flash keys "em" (success) and "emerr" (failure) render inside the account page's

internal/auth/handlers.go

@@ -11,8 +11,8 @@ import (
 	"github.com/go-webauthn/webauthn/protocol"
 	"github.com/go-webauthn/webauthn/webauthn"
 
-	"github.com/jleight/meshtender/internal/store"
-	"github.com/jleight/meshtender/internal/web"
+	"github.com/MeshTender/MeshTender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/web"
 )
 
 // RequireUser is middleware that sends unauthenticated requests to the auth

internal/auth/password_handlers.go

@@ -6,7 +6,7 @@ import (
 	"net/http"
 	"net/url"
 
-	"github.com/jleight/meshtender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/store"
 )
 
 // SignupPassword handles a form-based account creation with a password.

internal/auth/reauth.go

@@ -6,7 +6,7 @@ import (
 	"net/http"
 	"time"
 
-	"github.com/jleight/meshtender/internal/web"
+	"github.com/MeshTender/MeshTender/internal/web"
 )
 
 // Re-authentication ("sudo mode"): proving, right now, that the person driving

internal/auth/reset.go

@@ -7,8 +7,8 @@ import (
 	"net/http"
 	"strings"
 
-	mailer "github.com/jleight/meshtender/internal/mail"
-	"github.com/jleight/meshtender/internal/store"
+	mailer "github.com/MeshTender/MeshTender/internal/mail"
+	"github.com/MeshTender/MeshTender/internal/store"
 )
 
 // ErrResetNotAllowed reports that a redeemed reset token can no longer be used to set

internal/auth/reset_handlers.go

@@ -7,8 +7,8 @@ import (
 
 	"github.com/go-chi/chi/v5"
 
-	"github.com/jleight/meshtender/internal/store"
-	"github.com/jleight/meshtender/internal/web"
+	"github.com/MeshTender/MeshTender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/web"
 )
 
 // pageForgot renders the "forgot password" form.

internal/auth/service.go

@@ -15,8 +15,8 @@ import (
 	"github.com/jackc/pgx/v5/pgxpool"
 	"golang.org/x/crypto/bcrypt"
 
-	"github.com/jleight/meshtender/internal/mail"
-	"github.com/jleight/meshtender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/mail"
+	"github.com/MeshTender/MeshTender/internal/store"
 )
 
 const (

internal/auth/user.go

@@ -10,7 +10,7 @@ import (
 
 	"github.com/go-webauthn/webauthn/webauthn"
 
-	"github.com/jleight/meshtender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/store"
 )
 
 // webauthnUser adapts a store.User plus its credentials to webauthn.User.

internal/auth/web.go

@@ -7,7 +7,7 @@ import (
 
 	"github.com/go-chi/chi/v5"
 
-	"github.com/jleight/meshtender/internal/web"
+	"github.com/MeshTender/MeshTender/internal/web"
 )
 
 //go:embed templates/*.html

internal/config/config.go

@@ -8,7 +8,7 @@ import (
 	"os"
 	"strings"
 
-	"github.com/jleight/meshtender/internal/buildinfo"
+	"github.com/MeshTender/MeshTender/internal/buildinfo"
 )
 
 // Config holds all runtime configuration for the server.

internal/core/account_delete_test.go

@@ -8,7 +8,7 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/jleight/meshtender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/store"
 )
 
 // TestDeleteAccountPageShowsConsequences: the confirm page has to state what

internal/core/admin.go

@@ -8,8 +8,8 @@ import (
 
 	"github.com/go-chi/chi/v5"
 
-	"github.com/jleight/meshtender/internal/store"
-	"github.com/jleight/meshtender/internal/web"
+	"github.com/MeshTender/MeshTender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/web"
 )
 
 // requireCap is middleware that allows the request only if the current user

internal/core/admin_build.go

@@ -3,7 +3,7 @@ package core
 import (
 	"net/http"
 
-	"github.com/jleight/meshtender/internal/web"
+	"github.com/MeshTender/MeshTender/internal/web"
 )
 
 // The admin view of build provenance. It renders the same facts as the public

internal/core/admin_csp.go

@@ -4,8 +4,8 @@ import (
 	"fmt"
 	"net/http"
 
-	"github.com/jleight/meshtender/internal/store"
-	"github.com/jleight/meshtender/internal/web"
+	"github.com/MeshTender/MeshTender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/web"
 )
 
 // The CSP violation report view. Reports arrive at web.CSPReportPath on every host

internal/core/admin_identity.go

@@ -4,9 +4,9 @@ import (
 	"errors"
 	"net/http"
 
-	"github.com/jleight/meshtender/internal/identity"
-	"github.com/jleight/meshtender/internal/store"
-	"github.com/jleight/meshtender/internal/web"
+	"github.com/MeshTender/MeshTender/internal/identity"
+	"github.com/MeshTender/MeshTender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/web"
 )
 
 // The server-identity backup page. The identity is a 32-byte seed sealed under

internal/core/admin_identity_test.go

@@ -10,7 +10,7 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/jleight/meshtender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/store"
 )
 
 // identityAdmin spins up a server with a signed-in admin holding CapManageUsers.

internal/core/analytics.go

@@ -4,8 +4,8 @@ import (
 	"net/http"
 	"time"
 
-	"github.com/jleight/meshtender/internal/analytics"
-	"github.com/jleight/meshtender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/analytics"
+	"github.com/MeshTender/MeshTender/internal/store"
 )
 
 // analyticsBar is one day's column in the traffic charts; heights are percentages

internal/core/audit.go

@@ -4,8 +4,8 @@ import (
 	"net/http"
 	"time"
 
-	"github.com/jleight/meshtender/internal/store"
-	"github.com/jleight/meshtender/internal/web"
+	"github.com/MeshTender/MeshTender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/web"
 )
 
 // pageCommandLog shows the command audit log for a repeater (owner only),

internal/core/build_provenance_test.go

@@ -8,8 +8,8 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/jleight/meshtender/internal/buildinfo"
-	"github.com/jleight/meshtender/internal/web"
+	"github.com/MeshTender/MeshTender/internal/buildinfo"
+	"github.com/MeshTender/MeshTender/internal/web"
 )
 
 // testDigest is a syntactically valid image digest for the fixture deployments.

internal/core/config_profile.go

@@ -10,8 +10,8 @@ import (
 
 	"github.com/go-chi/chi/v5"
 
-	"github.com/jleight/meshtender/internal/store"
-	"github.com/jleight/meshtender/internal/web"
+	"github.com/MeshTender/MeshTender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/web"
 )
 
 // pageOrgConfig renders an org's configuration read-only: a selected profile's

internal/core/config_profile_test.go

@@ -4,7 +4,7 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/jleight/meshtender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/store"
 )
 
 // configCatalog reuses the resolver test catalog plus a risky command, so the

internal/core/config_region.go

@@ -9,9 +9,9 @@ import (
 
 	"github.com/go-chi/chi/v5"
 
-	"github.com/jleight/meshtender/internal/geo"
-	"github.com/jleight/meshtender/internal/store"
-	"github.com/jleight/meshtender/internal/web"
+	"github.com/MeshTender/MeshTender/internal/geo"
+	"github.com/MeshTender/MeshTender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/web"
 )
 
 // Regions are edited one at a time, split by what each part needs from the screen:

internal/core/config_region_modal_test.go

@@ -7,8 +7,8 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/jleight/meshtender/internal/geo"
-	"github.com/jleight/meshtender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/geo"
+	"github.com/MeshTender/MeshTender/internal/store"
 )
 
 // TestConfigRegionEditorSurfaces: the region attribute editor serves the modal

internal/core/config_region_test.go

@@ -3,7 +3,7 @@ package core
 import (
 	"testing"
 
-	"github.com/jleight/meshtender/internal/geo"
+	"github.com/MeshTender/MeshTender/internal/geo"
 )
 
 func TestRegionGeofence(t *testing.T) {

internal/core/console.go

@@ -14,10 +14,10 @@ import (
 	meshcore "github.com/meshcore-go/meshcore-go"
 	"github.com/meshcore-go/meshcore-go/hardware"
 
-	"github.com/jleight/meshtender/internal/mesh"
-	"github.com/jleight/meshtender/internal/store"
-	"github.com/jleight/meshtender/internal/web"
-	"github.com/jleight/meshtender/internal/wsbridge"
+	"github.com/MeshTender/MeshTender/internal/mesh"
+	"github.com/MeshTender/MeshTender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/web"
+	"github.com/MeshTender/MeshTender/internal/wsbridge"
 )
 
 const (

internal/core/console_config.go

@@ -5,8 +5,8 @@ import (
 	"net/http"
 	"strconv"
 
-	"github.com/jleight/meshtender/internal/store"
-	"github.com/jleight/meshtender/internal/web"
+	"github.com/MeshTender/MeshTender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/web"
 )
 
 // consoleConfig is the JSON payload behind the console's "Apply organization

internal/core/console_config_test.go

@@ -8,8 +8,8 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/jleight/meshtender/internal/geo"
-	"github.com/jleight/meshtender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/geo"
+	"github.com/MeshTender/MeshTender/internal/store"
 )
 
 // cmdIDByKey resolves a catalog command's id by its key (test helper, via the

internal/core/console_integration_test.go

@@ -16,9 +16,9 @@ import (
 	meshcore "github.com/meshcore-go/meshcore-go"
 	"github.com/meshcore-go/meshcore-go/hardware"
 
-	"github.com/jleight/meshtender/internal/auth"
-	"github.com/jleight/meshtender/internal/identity"
-	"github.com/jleight/meshtender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/auth"
+	"github.com/MeshTender/MeshTender/internal/identity"
+	"github.com/MeshTender/MeshTender/internal/store"
 )
 
 // TestConsoleRoundTrip drives the command console end to end: the test plays the

internal/core/console_location_test.go

@@ -17,9 +17,9 @@ import (
 	meshcore "github.com/meshcore-go/meshcore-go"
 	"github.com/meshcore-go/meshcore-go/hardware"
 
-	"github.com/jleight/meshtender/internal/auth"
-	"github.com/jleight/meshtender/internal/identity"
-	"github.com/jleight/meshtender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/auth"
+	"github.com/MeshTender/MeshTender/internal/identity"
+	"github.com/MeshTender/MeshTender/internal/store"
 )
 
 func TestParseLocationFloat(t *testing.T) {

internal/core/console_login_test.go

@@ -17,9 +17,9 @@ import (
 	meshcore "github.com/meshcore-go/meshcore-go"
 	"github.com/meshcore-go/meshcore-go/hardware"
 
-	"github.com/jleight/meshtender/internal/auth"
-	"github.com/jleight/meshtender/internal/identity"
-	"github.com/jleight/meshtender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/auth"
+	"github.com/MeshTender/MeshTender/internal/identity"
+	"github.com/MeshTender/MeshTender/internal/store"
 )
 
 // TestConsoleLoginConfirms drives the console's login/confirm-on-connect path

internal/core/console_resolve_test.go

@@ -6,7 +6,7 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/jleight/meshtender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/store"
 )
 
 // cmd builds a catalog entry; resolveCommand only reads Template and Arity, and

internal/core/console_retry_test.go

@@ -16,9 +16,9 @@ import (
 	meshcore "github.com/meshcore-go/meshcore-go"
 	"github.com/meshcore-go/meshcore-go/hardware"
 
-	"github.com/jleight/meshtender/internal/auth"
-	"github.com/jleight/meshtender/internal/identity"
-	"github.com/jleight/meshtender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/auth"
+	"github.com/MeshTender/MeshTender/internal/identity"
+	"github.com/MeshTender/MeshTender/internal/store"
 )
 
 // TestConsoleLoginRetry drops the first login (simulating a lost packet) and

internal/core/crosssite_test.go

@@ -8,7 +8,7 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/jleight/meshtender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/store"
 )
 
 // postFetchSite issues a form POST carrying an explicit Sec-Fetch-Site header

internal/core/csp_report_test.go

@@ -9,10 +9,10 @@ import (
 	"testing"
 	"time"
 
-	"github.com/jleight/meshtender/internal/auth"
-	"github.com/jleight/meshtender/internal/identity"
-	"github.com/jleight/meshtender/internal/store"
-	"github.com/jleight/meshtender/internal/web"
+	"github.com/MeshTender/MeshTender/internal/auth"
+	"github.com/MeshTender/MeshTender/internal/identity"
+	"github.com/MeshTender/MeshTender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/web"
 )
 
 // cspServer stands up the full split-host server AND hands back the *Server, which

internal/core/dbtest_test.go

@@ -8,10 +8,10 @@ import (
 	"testing"
 	"time"
 
-	"github.com/jleight/meshtender/internal/auth"
-	"github.com/jleight/meshtender/internal/config"
-	"github.com/jleight/meshtender/internal/store"
-	"github.com/jleight/meshtender/internal/testdb"
+	"github.com/MeshTender/MeshTender/internal/auth"
+	"github.com/MeshTender/MeshTender/internal/config"
+	"github.com/MeshTender/MeshTender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/testdb"
 )
 
 // appLogin creates a user and returns it plus a live app-host session cookie,

internal/core/email_recovery_test.go

@@ -14,7 +14,7 @@ import (
 
 	"golang.org/x/crypto/bcrypt"
 
-	mailer "github.com/jleight/meshtender/internal/mail"
+	mailer "github.com/MeshTender/MeshTender/internal/mail"
 )
 
 // Black-box coverage for the optional account email: setting it, confirming it, and

internal/core/endpoints_auth_test.go

@@ -10,7 +10,7 @@ import (
 
 	"golang.org/x/crypto/bcrypt"
 
-	"github.com/jleight/meshtender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/store"
 )
 
 // Black-box coverage for the auth host's non-visual POST endpoints: password

internal/core/endpoints_org_test.go

@@ -8,7 +8,7 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/jleight/meshtender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/store"
 )
 
 // Black-box coverage for the org-management POST endpoints (create/edit/links/

internal/core/endpoints_repeater_test.go

@@ -11,7 +11,7 @@ import (
 
 	meshcore "github.com/meshcore-go/meshcore-go"
 
-	"github.com/jleight/meshtender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/store"
 )
 
 // TestCleanRepeaterName pins the firmware-derived byte bound: MeshCore stores a

internal/core/filter_order_test.go

@@ -7,7 +7,7 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/jleight/meshtender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/store"
 )
 
 // TestFilterControlsPrecedeTheList pins audit U2 across every list page that has a

internal/core/handoff_test.go

@@ -8,10 +8,10 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/jleight/meshtender/internal/auth"
-	"github.com/jleight/meshtender/internal/config"
-	"github.com/jleight/meshtender/internal/identity"
-	"github.com/jleight/meshtender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/auth"
+	"github.com/MeshTender/MeshTender/internal/config"
+	"github.com/MeshTender/MeshTender/internal/identity"
+	"github.com/MeshTender/MeshTender/internal/store"
 )
 
 const (

internal/core/heading_structure_test.go

@@ -10,7 +10,7 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/jleight/meshtender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/store"
 )
 
 var headingRe = regexp.MustCompile(`(?i)<h([1-6])\b`)

internal/core/legal_pages_test.go

@@ -9,8 +9,8 @@ import (
 	"testing"
 	"time"
 
-	"github.com/jleight/meshtender/internal/analytics"
-	"github.com/jleight/meshtender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/analytics"
+	"github.com/MeshTender/MeshTender/internal/store"
 )
 
 // fetchPage GETs a path on a host and returns its body, failing on non-200.

internal/core/login_enumeration_test.go

@@ -7,7 +7,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/jleight/meshtender/internal/auth"
+	"github.com/MeshTender/MeshTender/internal/auth"
 )
 
 // TestVerifyPasswordSpendsEqualTime is the test that actually guards the fix: it

internal/core/login_revoke_test.go

@@ -6,8 +6,8 @@ import (
 	"net/http/httptest"
 	"testing"
 
-	"github.com/jleight/meshtender/internal/auth"
-	"github.com/jleight/meshtender/internal/identity"
+	"github.com/MeshTender/MeshTender/internal/auth"
+	"github.com/MeshTender/MeshTender/internal/identity"
 )
 
 // TestRevokedLoginLogsOut is the cross-host logout guarantee in miniature:

internal/core/modem.go

@@ -8,9 +8,9 @@ import (
 	"strings"
 	"time"
 
-	"github.com/jleight/meshtender/internal/mesh"
-	"github.com/jleight/meshtender/internal/web"
-	"github.com/jleight/meshtender/internal/wsbridge"
+	"github.com/MeshTender/MeshTender/internal/mesh"
+	"github.com/MeshTender/MeshTender/internal/web"
+	"github.com/MeshTender/MeshTender/internal/wsbridge"
 )
 
 // Packet send tuning for the console's login/command exchanges. perTryReply is

internal/core/org_domains.go

@@ -6,7 +6,7 @@ import (
 	"strconv"
 	"strings"
 
-	"github.com/jleight/meshtender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/store"
 )
 
 // txtRecordName is the DNS label an org adds under its domain to prove ownership.

internal/core/org_domains_test.go

@@ -3,7 +3,7 @@ package core
 import (
 	"testing"
 
-	"github.com/jleight/meshtender/internal/web"
+	"github.com/MeshTender/MeshTender/internal/web"
 )
 
 func TestNormalizeHostname(t *testing.T) {

internal/core/org_map_json_test.go

@@ -7,7 +7,7 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/jleight/meshtender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/store"
 )
 
 // mapPoint mirrors the JSON shape the public map endpoint serves (store.MapPoint).

internal/core/org_participation.go

@@ -6,7 +6,7 @@ import (
 
 	"github.com/go-chi/chi/v5"
 
-	"github.com/jleight/meshtender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/store"
 )
 
 // repeaterOrgContext resolves the {id} repeater (must be owned by the caller) and

internal/core/orgs.go

@@ -8,8 +8,8 @@ import (
 
 	"github.com/go-chi/chi/v5"
 
-	"github.com/jleight/meshtender/internal/store"
-	"github.com/jleight/meshtender/internal/web"
+	"github.com/MeshTender/MeshTender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/web"
 )
 
 // orgID resolves the {id} URL param (a slug) to the internal int64 primary key.

internal/core/password_floor_test.go

@@ -9,7 +9,7 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/jleight/meshtender/internal/auth"
+	"github.com/MeshTender/MeshTender/internal/auth"
 )
 
 // TestPasswordFloorAppliesOnlyWhenSetting is the guarantee behind raising the

internal/core/password_reset_test.go

@@ -9,8 +9,8 @@ import (
 	"strings"
 	"testing"
 
-	mailer "github.com/jleight/meshtender/internal/mail"
-	"github.com/jleight/meshtender/internal/store"
+	mailer "github.com/MeshTender/MeshTender/internal/mail"
+	"github.com/MeshTender/MeshTender/internal/store"
 )
 
 // Black-box coverage for the password-reset flow: /forgot and /reset/{token}.

internal/core/presets.go

@@ -1,6 +1,6 @@
 package core
 
-import "github.com/jleight/meshtender/internal/config"
+import "github.com/MeshTender/MeshTender/internal/config"
 
 // RadioPreset is a convenience set of LoRa parameters for a MeshCore region,
 // offered in the add-repeater form. They are starting points — regions vary and

internal/core/proxytest.go

@@ -6,7 +6,7 @@ import (
 	"sort"
 	"strings"
 
-	"github.com/jleight/meshtender/internal/web"
+	"github.com/MeshTender/MeshTender/internal/web"
 )
 
 // proxyHeaders are the forwarding-related headers worth surfacing first when

internal/core/registry.go

@@ -6,7 +6,7 @@ import (
 	"strings"
 	"time"
 
-	"github.com/jleight/meshtender/internal/web"
+	"github.com/MeshTender/MeshTender/internal/web"
 )
 
 // This file backs the repeater "registry" tabs: site Documentation (public and

internal/core/render_test.go

@@ -5,8 +5,8 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/jleight/meshtender/internal/config"
-	"github.com/jleight/meshtender/internal/web"
+	"github.com/MeshTender/MeshTender/internal/config"
+	"github.com/MeshTender/MeshTender/internal/web"
 )
 
 // TestBuildPagesComposeAndExecute verifies every content page is pre-built with

internal/core/repeater_setup.go

@@ -10,8 +10,8 @@ import (
 
 	meshcore "github.com/meshcore-go/meshcore-go"
 
-	"github.com/jleight/meshtender/internal/store"
-	"github.com/jleight/meshtender/internal/web"
+	"github.com/MeshTender/MeshTender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/web"
 )
 
 // The "set up from scratch over USB serial" path of the add-repeater wizard.

internal/core/repeater_setup_test.go

@@ -9,7 +9,7 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/jleight/meshtender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/store"
 )
 
 // jsonPost issues a JSON POST with an explicit Host header and cookies.

internal/core/repeaters.go

@@ -12,9 +12,9 @@ import (
 
 	meshcore "github.com/meshcore-go/meshcore-go"
 
-	"github.com/jleight/meshtender/internal/config"
-	"github.com/jleight/meshtender/internal/store"
-	"github.com/jleight/meshtender/internal/web"
+	"github.com/MeshTender/MeshTender/internal/config"
+	"github.com/MeshTender/MeshTender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/web"
 )
 
 // setupOrgOption is an org the user belongs to, with the names of its config

internal/core/root_pagination_test.go

@@ -6,7 +6,7 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/jleight/meshtender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/store"
 )
 
 // TestRootOrgDirectoryLoadMore verifies the directory's htmx "load more": the

internal/core/share_expiry_page_test.go

@@ -7,7 +7,7 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/jleight/meshtender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/store"
 )
 
 // TestSharePageShowsInviteExpiry checks how the share page presents link expiry to

internal/core/shares.go

@@ -10,8 +10,8 @@ import (
 
 	"github.com/go-chi/chi/v5"
 
-	"github.com/jleight/meshtender/internal/store"
-	"github.com/jleight/meshtender/internal/web"
+	"github.com/MeshTender/MeshTender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/web"
 )
 
 // inviteTTLDays is store.InviteTTL in whole days, for the owner-facing and

internal/core/shares_url_test.go

@@ -4,8 +4,8 @@ import (
 	"net/http/httptest"
 	"testing"
 
-	"github.com/jleight/meshtender/internal/config"
-	"github.com/jleight/meshtender/internal/web"
+	"github.com/MeshTender/MeshTender/internal/config"
+	"github.com/MeshTender/MeshTender/internal/web"
 )
 
 // TestAbsoluteURLIgnoresForwardedProto: the share-link base URL takes its scheme

internal/core/transfer.go

@@ -5,8 +5,8 @@ import (
 	"net/http"
 	"strconv"
 
-	"github.com/jleight/meshtender/internal/store"
-	"github.com/jleight/meshtender/internal/web"
+	"github.com/MeshTender/MeshTender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/web"
 )
 
 // Ownership transfer hands a repeater to one of its stewards — the co-maintainers

internal/core/web.go

@@ -13,13 +13,13 @@ import (
 
 	"github.com/go-chi/chi/v5"
 
-	"github.com/jleight/meshtender/internal/auth"
-	"github.com/jleight/meshtender/internal/buildinfo"
-	"github.com/jleight/meshtender/internal/config"
-	"github.com/jleight/meshtender/internal/identity"
-	"github.com/jleight/meshtender/internal/marketing"
-	"github.com/jleight/meshtender/internal/store"
-	"github.com/jleight/meshtender/internal/web"
+	"github.com/MeshTender/MeshTender/internal/auth"
+	"github.com/MeshTender/MeshTender/internal/buildinfo"
+	"github.com/MeshTender/MeshTender/internal/config"
+	"github.com/MeshTender/MeshTender/internal/identity"
+	"github.com/MeshTender/MeshTender/internal/marketing"
+	"github.com/MeshTender/MeshTender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/web"
 )
 
 //go:embed templates/*.html

internal/core/ws_deadline_test.go

@@ -13,9 +13,9 @@ import (
 	"github.com/coder/websocket"
 	meshcore "github.com/meshcore-go/meshcore-go"
 
-	"github.com/jleight/meshtender/internal/auth"
-	"github.com/jleight/meshtender/internal/identity"
-	"github.com/jleight/meshtender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/auth"
+	"github.com/MeshTender/MeshTender/internal/identity"
+	"github.com/MeshTender/MeshTender/internal/store"
 )
 
 // TestConsoleWebSocketOutlivesServerReadTimeout pins the one thing audit O1's server

internal/core/ws_drain_test.go

@@ -14,9 +14,9 @@ import (
 	"github.com/coder/websocket"
 	meshcore "github.com/meshcore-go/meshcore-go"
 
-	"github.com/jleight/meshtender/internal/auth"
-	"github.com/jleight/meshtender/internal/identity"
-	"github.com/jleight/meshtender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/auth"
+	"github.com/MeshTender/MeshTender/internal/identity"
+	"github.com/MeshTender/MeshTender/internal/store"
 )
 
 // TestDrainWebSockets: an active console WebSocket is closed and its handler

internal/e2e/account_delete_test.go

@@ -9,7 +9,7 @@ import (
 
 	"github.com/chromedp/chromedp"
 
-	"github.com/jleight/meshtender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/store"
 )
 
 // waitForUserGone polls until the account is gone, so the assertion doesn't race

internal/e2e/analytics_cards_test.go

@@ -9,7 +9,7 @@ import (
 
 	"github.com/chromedp/chromedp"
 
-	"github.com/jleight/meshtender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/store"
 )
 
 // TestAnalyticsKindCards drives the traffic dashboard in a real browser after

internal/e2e/config_profiles_test.go

@@ -10,7 +10,7 @@ import (
 	"github.com/chromedp/cdproto/network"
 	"github.com/chromedp/chromedp"
 
-	"github.com/jleight/meshtender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/store"
 )
 
 // TestE2EConfigProfileSelect: the profile list on the Configuration page selects a

internal/e2e/console_config_test.go

@@ -9,8 +9,8 @@ import (
 	"github.com/chromedp/cdproto/network"
 	"github.com/chromedp/chromedp"
 
-	"github.com/jleight/meshtender/internal/geo"
-	"github.com/jleight/meshtender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/geo"
+	"github.com/MeshTender/MeshTender/internal/store"
 )
 
 // TestE2EConsoleConfigPanel drives the "Apply organization configuration" panel:

internal/e2e/contrast_test.go

@@ -14,7 +14,7 @@ import (
 	"github.com/chromedp/cdproto/network"
 	"github.com/chromedp/chromedp"
 
-	"github.com/jleight/meshtender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/store"
 )
 
 // contrastProbe measures the WCAG contrast ratio of every visible piece of text on the

internal/e2e/csp_report_test.go

@@ -10,7 +10,7 @@ import (
 	"github.com/chromedp/cdproto/network"
 	"github.com/chromedp/chromedp"
 
-	"github.com/jleight/meshtender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/store"
 )
 
 // flushCSP drains whatever the collector has queued into the database, the same way

internal/e2e/footer_source_test.go

@@ -22,7 +22,7 @@ import (
 func TestFooterSourceLinkOnEverySurface(t *testing.T) {
 	srv := newE2EServer(t)
 
-	const wantHref = "https://github.com/jleight/meshtender"
+	const wantHref = "https://github.com/MeshTender/MeshTender"
 
 	for _, tc := range []struct {
 		name string

internal/e2e/harness_test.go

@@ -50,13 +50,13 @@ import (
 	meshcore "github.com/meshcore-go/meshcore-go"
 	"golang.org/x/crypto/bcrypt"
 
-	"github.com/jleight/meshtender/internal/auth"
-	"github.com/jleight/meshtender/internal/config"
-	"github.com/jleight/meshtender/internal/core"
-	"github.com/jleight/meshtender/internal/identity"
-	mailer "github.com/jleight/meshtender/internal/mail"
-	"github.com/jleight/meshtender/internal/store"
-	"github.com/jleight/meshtender/internal/testdb"
+	"github.com/MeshTender/MeshTender/internal/auth"
+	"github.com/MeshTender/MeshTender/internal/config"
+	"github.com/MeshTender/MeshTender/internal/core"
+	"github.com/MeshTender/MeshTender/internal/identity"
+	mailer "github.com/MeshTender/MeshTender/internal/mail"
+	"github.com/MeshTender/MeshTender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/testdb"
 )
 
 // TestMain manages the shared testdb container/template for the whole package.

internal/e2e/org_map_test.go

@@ -12,7 +12,7 @@ import (
 	"github.com/chromedp/chromedp"
 	meshcore "github.com/meshcore-go/meshcore-go"
 
-	"github.com/jleight/meshtender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/store"
 )
 
 // TestE2EOrgPublicMap renders the public org Repeaters map in a real browser and

internal/e2e/region_editor_test.go

@@ -12,8 +12,8 @@ import (
 	"github.com/chromedp/cdproto/network"
 	"github.com/chromedp/chromedp"
 
-	"github.com/jleight/meshtender/internal/geo"
-	"github.com/jleight/meshtender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/geo"
+	"github.com/MeshTender/MeshTender/internal/store"
 )
 
 // TestE2ERegionModalSave: an admin adds a region from the Configuration page — the

internal/e2e/share_invite_expiry_test.go

@@ -11,7 +11,7 @@ import (
 	"github.com/chromedp/cdproto/network"
 	"github.com/chromedp/chromedp"
 
-	"github.com/jleight/meshtender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/store"
 )
 
 // TestE2EInviteExpiryBadges renders the share page with one live and one expired

internal/e2e/share_invite_test.go

@@ -10,7 +10,7 @@ import (
 	"github.com/chromedp/cdproto/network"
 	"github.com/chromedp/chromedp"
 
-	"github.com/jleight/meshtender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/store"
 )
 
 // TestE2ECreateInviteModal drives the share page's "Create single-use link"

internal/e2e/share_limits_test.go

@@ -10,7 +10,7 @@ import (
 	"github.com/chromedp/cdproto/network"
 	"github.com/chromedp/chromedp"
 
-	"github.com/jleight/meshtender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/store"
 )
 
 // TestE2EShareOrgLimitsModal drives the share page's per-org "Edit limits" modal:

internal/e2e/share_person_test.go

@@ -10,7 +10,7 @@ import (
 	"github.com/chromedp/cdproto/network"
 	"github.com/chromedp/chromedp"
 
-	"github.com/jleight/meshtender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/store"
 )
 
 // TestE2EPersonAccessModal drives the People-with-access "Manage access" button:

internal/e2e/user_public_test.go

@@ -12,7 +12,7 @@ import (
 	"github.com/chromedp/chromedp"
 	meshcore "github.com/meshcore-go/meshcore-go"
 
-	"github.com/jleight/meshtender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/store"
 )
 
 // TestE2EUserPublicLinks renders a public profile in a real browser and checks

internal/e2e/webauthn_test.go

@@ -11,7 +11,7 @@ import (
 	"github.com/chromedp/cdproto/webauthn"
 	"github.com/chromedp/chromedp"
 
-	"github.com/jleight/meshtender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/store"
 )
 
 // virtualAuthenticator enables the WebAuthn CDP domain and installs a virtual

internal/e2e/wizard_access_test.go

@@ -10,7 +10,7 @@ import (
 	"github.com/chromedp/cdproto/network"
 	"github.com/chromedp/chromedp"
 
-	"github.com/jleight/meshtender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/store"
 )
 
 // TestE2EWizardManageAccessModal verifies the add-repeater wizard's final step

internal/identity/service.go

@@ -8,7 +8,7 @@ import (
 
 	meshcore "github.com/meshcore-go/meshcore-go"
 
-	"github.com/jleight/meshtender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/store"
 )
 
 // Service holds the loaded server-wide MeshCore identity.

internal/marketing/marketing.go

@@ -11,8 +11,8 @@ import (
 
 	"github.com/go-chi/chi/v5"
 
-	"github.com/jleight/meshtender/internal/auth"
-	"github.com/jleight/meshtender/internal/web"
+	"github.com/MeshTender/MeshTender/internal/auth"
+	"github.com/MeshTender/MeshTender/internal/web"
 )
 
 //go:embed templates/*.html

internal/marketing/orgs.go

@@ -5,8 +5,8 @@ import (
 	"strings"
 	"time"
 
-	"github.com/jleight/meshtender/internal/store"
-	"github.com/jleight/meshtender/internal/web"
+	"github.com/MeshTender/MeshTender/internal/store"
+	"github.com/MeshTender/MeshTender/internal/web"
 )
 
 // pageOrgs is the public organization directory. It renders anonymously — the