Pin mesh-sdk at 14fd5cb6 (R4a's merge) and take the catalogue, overlay and validator from it, s to inventory (issue 1381, 4 of 6 import swaps)

go.mod and go.sum move to mesh-sdk 14fd5cb68fd1, the commit on its main that holds go/catalogue, go/overlay and go/validate (ADR 0453 clause 2); vendor/modules.txt follows in the last of the six commits.

internal/artifacts/hold.go

@@ -13,7 +13,7 @@ import (
 	"strings"
 	"time"
 
-	"github.com/novox/mesh-controller/internal/catalogue"
+	"git.novox.be/novox/mesh-sdk/go/catalogue"
 )
 
 // Every archive the store keeps is held by a manifest (novox/hq issue 253, ADR 0189).

internal/artifacts/hold_test.go

@@ -16,7 +16,7 @@ import (
 	"sync"
 	"testing"
 
-	"github.com/novox/mesh-controller/internal/catalogue"
+	"git.novox.be/novox/mesh-sdk/go/catalogue"
 )
 
 // Every kept archive is held by a manifest (novox/hq issue 253, ADR 0189).

internal/artifacts/live_registry_test.go

@@ -14,7 +14,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/novox/mesh-controller/internal/catalogue"
+	"git.novox.be/novox/mesh-sdk/go/catalogue"
 )
 
 // The registry's own collector keeps a held archive and takes a bare one (novox/hq issue 253,

internal/artifacts/platforms_test.go

@@ -11,7 +11,7 @@ import (
 	"sync"
 	"testing"
 
-	"github.com/novox/mesh-controller/internal/catalogue"
+	"git.novox.be/novox/mesh-sdk/go/catalogue"
 )
 
 // An index is let go of with the platform manifests it names, except those a kept index of the same

internal/artifacts/store.go

@@ -16,7 +16,7 @@ import (
 	"net/http"
 	"strings"
 
-	"github.com/novox/mesh-controller/internal/catalogue"
+	"git.novox.be/novox/mesh-sdk/go/catalogue"
 )
 
 // Store is the artifact store at an address, as this machine reaches it.

internal/artifacts/store_test.go

@@ -8,7 +8,7 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/novox/mesh-controller/internal/catalogue"
+	"git.novox.be/novox/mesh-sdk/go/catalogue"
 )
 
 // Asking the store to let go of what the mesh no longer keeps (novox/hq ADR 0189, issue 108).

internal/broker/agreement_catalogue_test.go

@@ -8,8 +8,8 @@ import (
 	"strings"
 	"testing"
 
+	"git.novox.be/novox/mesh-sdk/go/catalogue"
 	"github.com/novox/mesh-controller/internal/beside"
-	"github.com/novox/mesh-controller/internal/catalogue"
 )
 
 // **Do the catalogue's emitters and consumers agree?**

internal/broker/states_agreement_test.go

@@ -4,8 +4,8 @@ import (
 	"slices"
 	"testing"
 
+	"git.novox.be/novox/mesh-sdk/go/catalogue"
 	"github.com/novox/mesh-controller/internal/broker"
-	"github.com/novox/mesh-controller/internal/catalogue"
 	"github.com/novox/mesh-controller/internal/conditions"
 	"github.com/novox/mesh-controller/internal/link"
 )

internal/broker/stream_names_agreement_test.go

@@ -4,7 +4,7 @@ import (
 	"slices"
 	"testing"
 
-	"github.com/novox/mesh-controller/internal/catalogue"
+	"git.novox.be/novox/mesh-sdk/go/catalogue"
 )
 
 // The catalogue's list of the mesh's own stream names, which a module's stream may not take, is the broker's

internal/builder/binary_name_test.go

@@ -3,7 +3,7 @@ package builder
 import (
 	"testing"
 
-	"github.com/novox/mesh-controller/internal/catalogue"
+	"git.novox.be/novox/mesh-sdk/go/catalogue"
 )
 
 // The name a machine runs a binary by is not always the name of the package that built it. The host's

internal/builder/builder.go

@@ -21,8 +21,8 @@ import (
 	"strings"
 	"time"
 
+	"git.novox.be/novox/mesh-sdk/go/catalogue"
 	"git.novox.be/novox/mesh-sdk/go/delivery"
-	"github.com/novox/mesh-controller/internal/catalogue"
 )
 
 // Turning a repository into artifacts the mesh can pin.

internal/builder/builder_integration_test.go

@@ -10,7 +10,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/novox/mesh-controller/internal/catalogue"
+	"git.novox.be/novox/mesh-sdk/go/catalogue"
 )
 
 func TestABuildProducesAManifestThePinsAreIn(t *testing.T) {

internal/builder/builder_test.go

@@ -8,7 +8,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/novox/mesh-controller/internal/catalogue"
+	"git.novox.be/novox/mesh-sdk/go/catalogue"
 )
 
 // A repository becoming artifacts the mesh can pin.

internal/builder/check_builds.go

@@ -9,7 +9,7 @@ import (
 	"sync"
 	"time"
 
-	"github.com/novox/mesh-controller/internal/catalogue"
+	"git.novox.be/novox/mesh-sdk/go/catalogue"
 )
 
 // The builds a merge check makes for its merge (novox/hq ADR 0350 §1): every artifact of every module the delivery

internal/builder/context_test.go

@@ -4,7 +4,7 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/novox/mesh-controller/internal/catalogue"
+	"git.novox.be/novox/mesh-sdk/go/catalogue"
 )
 
 // A context on a seat is cloned from the base the mesh sent, joined to the repository's path; a

internal/builder/judge_build_test.go

@@ -76,7 +76,7 @@ import (
 	"fmt"
 	"os"
 
-	"github.com/novox/mesh-host/validate"
+	"git.novox.be/novox/mesh-sdk/go/validate"
 )
 
 func main() {

internal/builder/launchers_test.go

@@ -6,7 +6,7 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/novox/mesh-controller/internal/catalogue"
+	"git.novox.be/novox/mesh-sdk/go/catalogue"
 )
 
 // novox/hq ADR 0193: every entrypoint the runtime may serve is executable, and the runtime knows no

internal/builder/packages.go

@@ -11,7 +11,7 @@ import (
 	"sort"
 	"strings"
 
-	"github.com/novox/mesh-controller/internal/catalogue"
+	"git.novox.be/novox/mesh-sdk/go/catalogue"
 )
 
 // Npmrc is what a build needs to resolve the mesh's own shared library — and any other package the

internal/builder/predefined_test.go

@@ -8,7 +8,7 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/novox/mesh-controller/internal/catalogue"
+	"git.novox.be/novox/mesh-sdk/go/catalogue"
 )
 
 // A build reads the list of predefined keys at the root of the repository at the commit it builds (novox/hq ADR

internal/builder/registry_unbound_test.go

@@ -5,8 +5,8 @@ import (
 	"path/filepath"
 	"testing"
 
+	"git.novox.be/novox/mesh-sdk/go/catalogue"
 	"github.com/novox/mesh-controller/internal/beside"
-	"github.com/novox/mesh-controller/internal/catalogue"
 )
 
 // **A build that needs the registry fails loudly while the build agent has none** (novox/hq ADR 0336

internal/builder/reuse.go

@@ -15,8 +15,8 @@ import (
 	"strings"
 	"time"
 
+	"git.novox.be/novox/mesh-sdk/go/catalogue"
 	"github.com/novox/mesh-controller/internal/artifacts"
-	"github.com/novox/mesh-controller/internal/catalogue"
 )
 
 // One build per change (novox/hq ADR 0350).

internal/builder/reuse_test.go

@@ -12,7 +12,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/novox/mesh-controller/internal/catalogue"
+	"git.novox.be/novox/mesh-sdk/go/catalogue"
 )
 
 // One build per change (novox/hq ADR 0350): the merge check builds what the merge would move into the scratch

internal/builder/same_program.go

@@ -14,7 +14,7 @@ import (
 	"sort"
 	"strings"
 
-	"github.com/novox/mesh-controller/internal/catalogue"
+	"git.novox.be/novox/mesh-sdk/go/catalogue"
 )
 
 // A module moves only when its program changes (novox/hq issue 721). A merge check builds every module the delivery

internal/builder/same_program_test.go

@@ -10,7 +10,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/novox/mesh-controller/internal/catalogue"
+	"git.novox.be/novox/mesh-sdk/go/catalogue"
 )
 
 // aFilesystem is a filesystem tarball of files, each written at the time given.

internal/builder/source.go

@@ -10,8 +10,8 @@ import (
 	"sort"
 	"strings"
 
+	"git.novox.be/novox/mesh-sdk/go/catalogue"
 	"git.novox.be/novox/mesh-sdk/go/delivery"
-	"github.com/novox/mesh-controller/internal/catalogue"
 )
 
 // A build's source fingerprint: what it was made from, hashed (novox/hq issue 280).

internal/builder/standing_on_test.go

@@ -6,7 +6,7 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/novox/mesh-controller/internal/catalogue"
+	"git.novox.be/novox/mesh-sdk/go/catalogue"
 )
 
 // A module naming a base the mesh has not built is refused, and the refusal names what is missing.

internal/builder/template.go

@@ -11,7 +11,7 @@ import (
 	"io"
 	"path/filepath"
 
-	"github.com/novox/mesh-controller/internal/catalogue"
+	"git.novox.be/novox/mesh-sdk/go/catalogue"
 )
 
 // withTemplateTexts is what was built with each template's text, for a module whose files name templates (novox/hq ADR

internal/builder/template_integration_test.go

@@ -9,7 +9,7 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/novox/mesh-controller/internal/catalogue"
+	"git.novox.be/novox/mesh-sdk/go/catalogue"
 )
 
 func TestABuildReadsEachTemplateBackFromItsArchive(t *testing.T) {

internal/builder/template_test.go

@@ -6,7 +6,7 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/novox/mesh-controller/internal/catalogue"
+	"git.novox.be/novox/mesh-sdk/go/catalogue"
 )
 
 // A module's files kept as template files in its repository (novox/hq ADR 0349 §2, design 57 package T1, issue

internal/builder/upstream_file.go

@@ -19,7 +19,7 @@ import (
 	"strings"
 	"time"
 
-	"github.com/novox/mesh-controller/internal/catalogue"
+	"git.novox.be/novox/mesh-sdk/go/catalogue"
 	"github.com/therootcompany/xz"
 )
 

internal/builder/upstream_file_integration_test.go

@@ -13,7 +13,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/novox/mesh-controller/internal/catalogue"
+	"git.novox.be/novox/mesh-sdk/go/catalogue"
 )
 
 func TestAnArchivePinnedByURLIsFetchedCheckedAndPackedWithoutItsOwnDirectory(t *testing.T) {

internal/builder/upstream_file_test.go

@@ -20,7 +20,7 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/novox/mesh-controller/internal/catalogue"
+	"git.novox.be/novox/mesh-sdk/go/catalogue"
 )
 
 // An archive pinned by URL and sha256 (novox/hq ADR 0316 §2, §6; How it is checked: "an upstream artifact

internal/inventory/artifacts_test.go

@@ -7,7 +7,7 @@ import (
 	"fmt"
 	"testing"
 
-	"github.com/novox/mesh-controller/internal/catalogue"
+	"git.novox.be/novox/mesh-sdk/go/catalogue"
 )
 
 // **Every artifact made has one state, and a kept one says why** (novox/hq ADR 0251): what the

internal/inventory/asks_lab_test.go

@@ -28,8 +28,8 @@ import (
 	"github.com/nats-io/nats.go"
 	"golang.org/x/crypto/bcrypt"
 
+	"git.novox.be/novox/mesh-sdk/go/catalogue"
 	"github.com/novox/mesh-controller/internal/broker"
-	"github.com/novox/mesh-controller/internal/catalogue"
 )
 
 // labMachine is the one machine of the lab's bus.

internal/inventory/bindings.go

@@ -4,7 +4,7 @@ import (
 	"context"
 	"time"
 
-	"github.com/novox/mesh-controller/internal/catalogue"
+	"git.novox.be/novox/mesh-sdk/go/catalogue"
 )
 
 // A binding to data (novox/hq ADR 0232): where each consumer of a provision that keeps its data was

internal/inventory/bindings_test.go

@@ -5,7 +5,7 @@ package inventory
 import (
 	"testing"
 
-	"github.com/novox/mesh-controller/internal/catalogue"
+	"git.novox.be/novox/mesh-sdk/go/catalogue"
 )
 
 // Where a consumer of data was bound is kept, and a move keeps where it was (novox/hq ADR 0232).

internal/inventory/buildinput_test.go

@@ -3,7 +3,7 @@ package inventory
 import (
 	"testing"
 
-	"github.com/novox/mesh-controller/internal/catalogue"
+	"git.novox.be/novox/mesh-sdk/go/catalogue"
 )
 
 // The image every module is compiled on top of is built and never run.

internal/inventory/busrecords.go

@@ -6,8 +6,8 @@ import (
 	"slices"
 	"strings"
 
+	"git.novox.be/novox/mesh-sdk/go/catalogue"
 	"github.com/novox/mesh-controller/internal/broker"
-	"github.com/novox/mesh-controller/internal/catalogue"
 )
 
 // What the bus's user list is derived from, read out of the mesh's records.

internal/inventory/busrecords_integration_test.go

@@ -8,8 +8,8 @@ import (
 	"testing"
 	"time"
 
+	"git.novox.be/novox/mesh-sdk/go/catalogue"
 	"github.com/novox/mesh-controller/internal/broker"
-	"github.com/novox/mesh-controller/internal/catalogue"
 	"golang.org/x/crypto/bcrypt"
 )
 

internal/inventory/busrecords_test.go

@@ -4,8 +4,8 @@ import (
 	"strings"
 	"testing"
 
+	"git.novox.be/novox/mesh-sdk/go/catalogue"
 	"github.com/novox/mesh-controller/internal/broker"
-	"github.com/novox/mesh-controller/internal/catalogue"
 )
 
 // Reading the bus's user list out of the mesh's records, against a real store.

internal/inventory/catalogue.go

@@ -12,8 +12,8 @@ import (
 	"sync"
 	"time"
 
+	"git.novox.be/novox/mesh-sdk/go/catalogue"
 	"github.com/jackc/pgx/v5"
-	"github.com/novox/mesh-controller/internal/catalogue"
 )
 
 // noted is each stored manifest's unknown key already said, so a catalogue read on every plan says it once.

internal/inventory/catalogue_test.go

@@ -8,7 +8,7 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/novox/mesh-controller/internal/catalogue"
+	"git.novox.be/novox/mesh-sdk/go/catalogue"
 )
 
 func manifest(name string, provides, requires []string) catalogue.Manifest {

internal/inventory/chain_drop_test.go

@@ -6,7 +6,7 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/novox/mesh-controller/internal/catalogue"
+	"git.novox.be/novox/mesh-sdk/go/catalogue"
 	"github.com/novox/mesh-controller/internal/store"
 )
 

internal/inventory/chain_store_test.go

@@ -11,7 +11,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/novox/mesh-controller/internal/catalogue"
+	"git.novox.be/novox/mesh-sdk/go/catalogue"
 	"github.com/novox/mesh-controller/internal/chain"
 )