ci: bump actions/checkout from 5 to 7

.github/workflows/build.dev.yml

@@ -35,7 +35,7 @@ jobs:
     name: Go Unit Tests
     runs-on: blacksmith-4vcpu-ubuntu-2404
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
 
       - name: Set up Go
         uses: actions/setup-go@v6
@@ -49,6 +49,15 @@ jobs:
           version: 3.x
           repo-token: ${{ secrets.GITHUB_TOKEN }}
 
+      # go-winkit/winpe binds libwim through go-wimlib (cgo, resolved with
+      # pkg-config), and go-wimlib v0.2.0 made that mandatory for every cgo
+      # build. Same package go-winkit's own CI installs. Release binaries
+      # are CGO_ENABLED=0 and get the pure-Go stub instead.
+      - name: Install wimlib (cgo dependency of go-winkit/winpe)
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y --no-install-recommends libwim-dev
+
       # cmd/serve.go imports the gitignored api/swagger/ package, so the
       # docs must exist before cmd/ compiles (see AGENTS.md).
       - name: Generate swagger docs
@@ -66,7 +75,7 @@ jobs:
     name: Detect Secrets
     runs-on: blacksmith-4vcpu-ubuntu-2404
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
       # gitleaks CLI directly — bypasses gitleaks-action's org-license
@@ -99,7 +108,7 @@ jobs:
             platform: linux/arm64
     runs-on: ${{ matrix.runner }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
 
       - name: Set lowercase image name
         run: echo "IMAGE_NAME_LC=${IMAGE_NAME,,}" >> $GITHUB_ENV
@@ -212,7 +221,7 @@ jobs:
             arch: arm64
     runs-on: ${{ matrix.runner }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
 
       - name: Set lowercase image name
         run: echo "IMAGE_NAME_LC=${IMAGE_NAME,,}" >> $GITHUB_ENV
@@ -290,7 +299,7 @@ jobs:
             arch: arm64
     runs-on: ${{ matrix.runner }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
 
       - name: Set lowercase image name
         run: echo "IMAGE_NAME_LC=${IMAGE_NAME,,}" >> $GITHUB_ENV
@@ -366,14 +375,14 @@ jobs:
             -t "${R}:dev" \
             "${R}:v0.0.0-arm64-ultimate"
 
-  cell-build:
-    name: Cell CLI Dev Build
+  devcell-build:
+    name: Devcell CLI Dev Build
     needs: secrets
     runs-on: blacksmith-4vcpu-ubuntu-2404
     env:
       RELEASE_VERSION: v0.0.0
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
@@ -416,7 +425,7 @@ jobs:
 
   e2e-install:
     name: E2E Install (${{ matrix.arch }})
-    needs: [cell-build, docker-manifest]
+    needs: [devcell-build, docker-manifest]
     strategy:
       fail-fast: false
       matrix:
@@ -479,7 +488,7 @@ jobs:
 
   brew-install:
     name: Brew Install (${{ matrix.arch }})
-    needs: [cell-build]
+    needs: [devcell-build]
     strategy:
       fail-fast: false
       matrix:

.github/workflows/build.release.yml

@@ -43,7 +43,7 @@ jobs:
             platform: linux/arm64
     runs-on: ${{ matrix.runner }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
 
       - name: Set lowercase image name
         run: echo "IMAGE_NAME_LC=${IMAGE_NAME,,}" >> $GITHUB_ENV
@@ -160,11 +160,11 @@ jobs:
           echo "=== ${V} ==="
           docker buildx imagetools inspect "${R}:${V}"
 
-  cell-release:
-    name: Cell CLI Release Build
+  devcell-release:
+    name: Devcell CLI Release Build
     runs-on: blacksmith-4vcpu-ubuntu-2404
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
@@ -197,7 +197,7 @@ jobs:
 
   e2e-install:
     name: E2E Install (${{ matrix.arch }})
-    needs: [cell-release, docker-manifest]
+    needs: [devcell-release, docker-manifest]
     strategy:
       fail-fast: false
       matrix:

.gitignore

@@ -63,4 +63,7 @@ CLAUDE.local.md
 # local multi-repo workspace
 go.work
 go.work.sum
-.winkit
+.winkit
+# .product/ (product research + specs, see AGENTS.md) is tracked in this repo.
+# Some global gitignores exclude it; re-include explicitly so `git add` works everywhere.
+!.product/

.goreleaser.dev.yaml

@@ -4,7 +4,7 @@ project_name: devcell
 
 before:
   hooks:
-    - go run github.com/swaggo/swag/cmd/swag@latest init -g cmd/serve.go -o docs --parseDependency --parseInternal
+    - go run github.com/swaggo/swag/cmd/swag@latest init -g cmd/serve.go -o api/swagger --parseDependency --parseInternal
 
 builds:
   - id: devcell

.goreleaser.yaml

@@ -4,7 +4,7 @@ project_name: devcell
 
 before:
   hooks:
-    - go run github.com/swaggo/swag/cmd/swag@latest init -g cmd/serve.go -o docs --parseDependency --parseInternal
+    - go run github.com/swaggo/swag/cmd/swag@latest init -g cmd/serve.go -o api/swagger --parseDependency --parseInternal
 
 builds:
   - id: devcell