fix: migrate module paths from forge.lthn.ai to dappco.re

Co-Authored-By: Virgil <virgil@lethean.io>

CLAUDE.md

@@ -13,7 +13,7 @@ go vet ./...                     # Static analysis
 
 ## Workspace Context
 
-This module (`forge.lthn.ai/core/go-devops`) is part of a 57-module Go workspace rooted at `/Users/snider/Code/go.work`. The parent framework module `forge.lthn.ai/core/go` (at `../go`) provides core libraries: `core.E` errors, `io.Medium` filesystem abstraction, config, i18n, and logging.
+This module (`dappco.re/go/core/devops`) is part of a 57-module Go workspace rooted at `/Users/snider/Code/go.work`. The parent framework module `forge.lthn.ai/core/go` (at `../go`) provides core libraries: `core.E` errors, `io.Medium` filesystem abstraction, config, i18n, and logging.
 
 Most implementation code (ansible engine, build system, infra clients, release pipeline, devkit, SDK generators) lives in the parent framework. This repo contains CLI commands that wire those packages together, plus deployment integrations and infrastructure playbooks.
 
@@ -21,15 +21,16 @@ Most implementation code (ansible engine, build system, infra clients, release p
 
 ### Package Layout
 
-- **`cmd/dev/`** — Multi-repo developer commands registered under `core dev`. The main CLI surface (~4,400 LOC across 21 files).
+- **`cmd/dev/`** — Multi-repo developer commands registered under `core dev`. The main CLI surface (~4,700 LOC across 21 files).
 - **`cmd/deploy/`** — `core deploy servers` — Coolify PaaS server/app listing.
 - **`cmd/docs/`** — `core docs sync` — Documentation sync across the multi-repo workspace.
 - **`cmd/setup/`** — `core setup repo` — Generate `.core` configuration for a project.
-- **`cmd/gitcmd/`** — Git helper commands.
+- **`cmd/gitcmd/`** — Git helper commands (mirrors dev commands under `core git`).
 - **`cmd/vanity-import/`** — Vanity import path server (the default build target in `.core/build.yaml`).
-- **`cmd/community/`** — Community-related commands.
+- **`cmd/community/`** — Community landing page assets.
 - **`deploy/coolify/`** — Coolify PaaS API HTTP client.
 - **`deploy/python/`** — Embedded Python 3.13 runtime wrapper (adds ~50 MB to binary).
+- **`locales/`** — Embedded i18n translation files (en.json).
 - **`snapshot/`** — `core.json` release manifest generation.
 - **`playbooks/`** — Ansible YAML playbooks for production infrastructure (Galera, Redis). Executed by the native Go Ansible engine, not `ansible-playbook`.
 
@@ -81,11 +82,11 @@ Configuration lives in `.core/build.yaml` (targets, ldflags) and `.core/release.
 - **Co-Author**: `Co-Authored-By: Virgil <virgil@lethean.io>`
 - **Licence**: EUPL-1.2
 - **Imports**: stdlib → forge.lthn.ai → third-party, each group separated by blank line
-- **Errors**: `core.E()` for contextual errors, or `fmt.Errorf("%w", err)` for wrapping
+- **Errors**: `log.E(op, msg, err)` from `go-log` for all contextual errors (never `fmt.Errorf` or `errors.New`)
 
 ## Forge
 
-- **Repo**: `forge.lthn.ai/core/go-devops`
+- **Repo**: `dappco.re/go/core/devops` (hosted at `forge.lthn.ai/core/go-devops`)
 - **Push via SSH**: `git push forge main` (remote: `ssh://git@forge.lthn.ai:2223/core/go-devops.git`)
 - **Issues/PRs**: Managed via Forgejo SDK (`code.gitea.io/sdk/gitea`), not GitHub
 

cmd/deploy/cmd_commands.go

@@ -2,11 +2,12 @@ package deploy
 
 import (
 	"forge.lthn.ai/core/cli/pkg/cli"
-	"forge.lthn.ai/core/go-devops/locales"
+
+	_ "dappco.re/go/core/devops/locales"
 )
 
 func init() {
-	cli.RegisterCommands(AddDeployCommands, locales.FS)
+	cli.RegisterCommands(AddDeployCommands)
 }
 
 // AddDeployCommands registers the 'deploy' command and all subcommands.

cmd/deploy/cmd_deploy.go

@@ -7,9 +7,9 @@ import (
 	"os"
 
 	"forge.lthn.ai/core/cli/pkg/cli"
-	"forge.lthn.ai/core/go-devops/deploy/coolify"
-	"forge.lthn.ai/core/go-i18n"
-	log "forge.lthn.ai/core/go-log"
+	"dappco.re/go/core/devops/deploy/coolify"
+	"dappco.re/go/core/i18n"
+	log "dappco.re/go/core/log"
 )
 
 var (

cmd/dev/cmd_api.go

@@ -1,8 +1,8 @@
 package dev
 
 import (
+	"dappco.re/go/core/i18n"
 	"forge.lthn.ai/core/cli/pkg/cli"
-	"forge.lthn.ai/core/go-i18n"
 )
 
 // addAPICommands adds the 'api' command and its subcommands to the given parent command.
@@ -17,6 +17,6 @@ func addAPICommands(parent *cli.Command) {
 	// Add the 'sync' command to 'api'
 	addSyncCommand(apiCmd)
 
-	// TODO: Add the 'test-gen' command to 'api'
-	// addTestGenCommand(apiCmd)
+	// Add the 'test-gen' command to 'api'
+	addTestGenCommand(apiCmd)
 }

cmd/dev/cmd_api_testgen.go

@@ -0,0 +1,112 @@
+package dev
+
+import (
+	"bytes"
+	"path/filepath"
+	"text/template"
+
+	"dappco.re/go/core/i18n"
+	coreio "dappco.re/go/core/io"
+	"forge.lthn.ai/core/cli/pkg/cli"
+)
+
+func addTestGenCommand(parent *cli.Command) {
+	testGenCmd := &cli.Command{
+		Use:   "test-gen",
+		Short: i18n.T("cmd.dev.api.test_gen.short"),
+		Long:  i18n.T("cmd.dev.api.test_gen.long"),
+		RunE: func(cmd *cli.Command, args []string) error {
+			if err := runTestGen(); err != nil {
+				return cli.Wrap(err, i18n.Label("error"))
+			}
+			cli.Text(i18n.T("i18n.done.sync", "public API tests"))
+			return nil
+		},
+	}
+
+	parent.AddCommand(testGenCmd)
+}
+
+func runTestGen() error {
+	pkgDir := "pkg"
+	internalDirs, err := coreio.Local.List(pkgDir)
+	if err != nil {
+		return cli.Wrap(err, "failed to read pkg directory")
+	}
+
+	for _, dir := range internalDirs {
+		if !dir.IsDir() || dir.Name() == "core" {
+			continue
+		}
+
+		serviceName := dir.Name()
+		internalDir := filepath.Join(pkgDir, serviceName)
+		publicDir := serviceName
+		publicTestFile := filepath.Join(publicDir, serviceName+"_test.go")
+
+		if !coreio.Local.Exists(internalDir) {
+			continue
+		}
+
+		symbols, err := getExportedSymbols(internalDir)
+		if err != nil {
+			return cli.Wrap(err, cli.Sprintf("error getting symbols for service '%s'", serviceName))
+		}
+
+		if len(symbols) == 0 {
+			continue
+		}
+
+		if err := generatePublicAPITestFile(publicDir, publicTestFile, serviceName, symbols); err != nil {
+			return cli.Wrap(err, cli.Sprintf("error generating public API test file for service '%s'", serviceName))
+		}
+	}
+
+	return nil
+}
+
+const publicAPITestTemplate = `// Code generated by "core dev api test-gen"; DO NOT EDIT.
+package {{.ServiceName}}
+
+import (
+	impl "forge.lthn.ai/core/cli/{{.ServiceName}}"
+)
+
+{{range .Symbols}}
+{{- if eq .Kind "type"}}
+type _ = impl.{{.Name}}
+{{- else if eq .Kind "const"}}
+const _ = impl.{{.Name}}
+{{- else if eq .Kind "var"}}
+var _ = impl.{{.Name}}
+{{- else if eq .Kind "func"}}
+var _ = impl.{{.Name}}
+{{- end}}
+{{end}}
+`
+
+func generatePublicAPITestFile(dir, path, serviceName string, symbols []symbolInfo) error {
+	if err := coreio.Local.EnsureDir(dir); err != nil {
+		return err
+	}
+
+	tmpl, err := template.New("publicAPITest").Parse(publicAPITestTemplate)
+	if err != nil {
+		return err
+	}
+
+	data := struct {
+		ServiceName string
+		Symbols     []symbolInfo
+	}{
+		ServiceName: serviceName,
+		Symbols:     symbols,
+	}
+
+	var buf bytes.Buffer
+	if err := tmpl.Execute(&buf, data); err != nil {
+		return err
+	}
+
+	return coreio.Local.Write(path, buf.String())
+}

cmd/dev/cmd_api_testgen_test.go

@@ -0,0 +1,115 @@
+package dev
+
+import (
+	"os"
+	"path/filepath"
+	"strings"
+	"testing"
+
+	"github.com/stretchr/testify/require"
+
+	"dappco.re/go/core/io"
+)
+
+func TestRunTestGen_Good(t *testing.T) {
+	tmpDir := t.TempDir()
+
+	originalWD, err := os.Getwd()
+	require.NoError(t, err)
+	t.Cleanup(func() {
+		_ = os.Chdir(originalWD)
+	})
+	require.NoError(t, os.Chdir(tmpDir))
+
+	serviceDir := filepath.Join(tmpDir, "pkg", "demo")
+	require.NoError(t, io.Local.EnsureDir(serviceDir))
+	require.NoError(t, io.Local.Write(filepath.Join(serviceDir, "demo.go"), `package demo
+
+type Example struct{}
+
+const Answer = 42
+
+var Value = Example{}
+
+func Run() {}
+`))
+	require.NoError(t, io.Local.Write(filepath.Join(serviceDir, "extra.go"), `package demo
+
+type Another struct{}
+
+func Extra() {}
+`))
+	require.NoError(t, io.Local.Write(filepath.Join(serviceDir, "demo_test.go"), `package demo
+
+func Ignored() {}
+`))
+
+	require.NoError(t, runTestGen())
+
+	generatedPath := filepath.Join(tmpDir, "demo", "demo_test.go")
+	content, err := io.Local.Read(generatedPath)
+	require.NoError(t, err)
+
+	require.Contains(t, content, `// Code generated by "core dev api test-gen"; DO NOT EDIT.`)
+	require.Contains(t, content, `package demo`)
+	require.Contains(t, content, `impl "forge.lthn.ai/core/cli/demo"`)
+	require.Contains(t, content, `type _ = impl.Example`)
+	require.Contains(t, content, `type _ = impl.Another`)
+	require.Contains(t, content, `const _ = impl.Answer`)
+	require.Contains(t, content, `var _ = impl.Value`)
+	require.Contains(t, content, `var _ = impl.Run`)
+	require.Contains(t, content, `var _ = impl.Extra`)
+	require.NotContains(t, content, `Ignored`)
+}
+
+func TestGeneratePublicAPITestFile_Good(t *testing.T) {
+	tmpDir := t.TempDir()
+
+	require.NoError(t, generatePublicAPITestFile(
+		filepath.Join(tmpDir, "demo"),
+		filepath.Join(tmpDir, "demo", "demo_test.go"),
+		"demo",
+		[]symbolInfo{
+			{Name: "Example", Kind: "type"},
+			{Name: "Answer", Kind: "const"},
+		},
+	))
+
+	content, err := io.Local.Read(filepath.Join(tmpDir, "demo", "demo_test.go"))
+	require.NoError(t, err)
+
+	require.True(t, strings.Contains(content, `type _ = impl.Example`))
+	require.True(t, strings.Contains(content, `const _ = impl.Answer`))
+}
+
+func TestGetExportedSymbols_Good_MultiFile(t *testing.T) {
+	tmpDir := t.TempDir()
+
+	serviceDir := filepath.Join(tmpDir, "demo")
+	require.NoError(t, io.Local.EnsureDir(serviceDir))
+	require.NoError(t, io.Local.Write(filepath.Join(serviceDir, "demo.go"), `package demo
+
+type Example struct{}
+
+const Answer = 42
+`))
+	require.NoError(t, io.Local.Write(filepath.Join(serviceDir, "extra.go"), `package demo
+
+var Value = Example{}
+
+func Run() {}
+`))
+	require.NoError(t, io.Local.Write(filepath.Join(serviceDir, "demo_test.go"), `package demo
+
+type Ignored struct{}
+`))
+
+	symbols, err := getExportedSymbols(serviceDir)
+	require.NoError(t, err)
+	require.Equal(t, []symbolInfo{
+		{Name: "Answer", Kind: "const"},
+		{Name: "Example", Kind: "type"},
+		{Name: "Run", Kind: "func"},
+		{Name: "Value", Kind: "var"},
+	}, symbols)
+}

cmd/dev/cmd_apply.go

@@ -12,14 +12,14 @@ import (
 	"os"
 	"os/exec"
 	"path/filepath"
-	"strings"
+	"sort"
 
+	"dappco.re/go/core/i18n"
+	"dappco.re/go/core/io"
+	core "dappco.re/go/core/log"
+	"dappco.re/go/core/scm/git"
+	"dappco.re/go/core/scm/repos"
 	"forge.lthn.ai/core/cli/pkg/cli"
-	core "forge.lthn.ai/core/go-log"
-	"forge.lthn.ai/core/go-scm/git"
-	"forge.lthn.ai/core/go-i18n"
-	"forge.lthn.ai/core/go-io"
-	"forge.lthn.ai/core/go-scm/repos"
 )
 
 // Apply command flags
@@ -235,29 +235,39 @@ func getApplyTargetRepos() ([]*repos.Repo, error) {
 		return nil, core.E("dev.apply", "failed to load registry", err)
 	}
 
-	// If --repos specified, filter to those
-	if applyRepos != "" {
-		repoNames := strings.Split(applyRepos, ",")
-		nameSet := make(map[string]bool)
-		for _, name := range repoNames {
-			nameSet[strings.TrimSpace(name)] = true
-		}
+	return filterTargetRepos(registry, applyRepos), nil
+}
 
-		var matched []*repos.Repo
-		for _, repo := range registry.Repos {
-			if nameSet[repo.Name] {
+// filterTargetRepos selects repos by exact name/path or glob pattern.
+func filterTargetRepos(registry *repos.Registry, selection string) []*repos.Repo {
+	repoNames := make([]string, 0, len(registry.Repos))
+	for name := range registry.Repos {
+		repoNames = append(repoNames, name)
+	}
+	sort.Strings(repoNames)
+
+	if selection == "" {
+		matched := make([]*repos.Repo, 0, len(repoNames))
+		for _, name := range repoNames {
+			matched = append(matched, registry.Repos[name])
+		}
+		return matched
+	}
+
+	patterns := splitPatterns(selection)
+	var matched []*repos.Repo
+
+	for _, name := range repoNames {
+		repo := registry.Repos[name]
+		for _, candidate := range patterns {
+			if matchGlob(repo.Name, candidate) || matchGlob(repo.Path, candidate) {
 				matched = append(matched, repo)
+				break
 			}
 		}
-		return matched, nil
 	}
 
-	// Return all repos as slice
-	var all []*repos.Repo
-	for _, repo := range registry.Repos {
-		all = append(all, repo)
-	}
-	return all, nil
+	return matched
 }
 
 // runCommandInRepo runs a shell command in a repo directory

cmd/dev/cmd_apply_test.go

@@ -0,0 +1,39 @@
+package dev
+
+import (
+	"testing"
+
+	"github.com/stretchr/testify/require"
+
+	"dappco.re/go/core/scm/repos"
+)
+
+func TestFilterTargetRepos_Good(t *testing.T) {
+	registry := &repos.Registry{
+		Repos: map[string]*repos.Repo{
+			"core-api":  &repos.Repo{Name: "core-api", Path: "packages/core-api"},
+			"core-web":  &repos.Repo{Name: "core-web", Path: "packages/core-web"},
+			"docs-site": &repos.Repo{Name: "docs-site", Path: "sites/docs"},
+		},
+	}
+
+	t.Run("exact names", func(t *testing.T) {
+		matched := filterTargetRepos(registry, "core-api,docs-site")
+		require.Len(t, matched, 2)
+		require.Equal(t, "core-api", matched[0].Name)
+		require.Equal(t, "docs-site", matched[1].Name)
+	})
+
+	t.Run("glob patterns", func(t *testing.T) {
+		matched := filterTargetRepos(registry, "core-*,sites/*")
+		require.Len(t, matched, 3)
+		require.Equal(t, "core-api", matched[0].Name)
+		require.Equal(t, "core-web", matched[1].Name)
+		require.Equal(t, "docs-site", matched[2].Name)
+	})
+
+	t.Run("all repos when empty", func(t *testing.T) {
+		matched := filterTargetRepos(registry, "")
+		require.Len(t, matched, 3)
+	})
+}

cmd/dev/cmd_bundles.go

@@ -2,10 +2,9 @@ package dev
 
 import (
 	"context"
+	"fmt"
 
-	agentic "forge.lthn.ai/core/agent/pkg/lifecycle"
-	"forge.lthn.ai/core/go/pkg/core"
-	"forge.lthn.ai/core/go-scm/git"
+	"dappco.re/go/core"
 )
 
 // WorkBundle contains the Core instance for dev work operations.
@@ -16,71 +15,52 @@ type WorkBundle struct {
 // WorkBundleOptions configures the work bundle.
 type WorkBundleOptions struct {
 	RegistryPath string
-	AllowEdit    bool // Allow agentic to use Write/Edit tools
 }
 
 // NewWorkBundle creates a bundle for dev work operations.
-// Includes: dev (orchestration), git, agentic services.
+// Includes: dev (orchestration) service.
 func NewWorkBundle(opts WorkBundleOptions) (*WorkBundle, error) {
-	c, err := core.New(
-		core.WithService(NewService(ServiceOptions{
+	c := core.New()
+
+	svc := &Service{
+		ServiceRuntime: core.NewServiceRuntime(c, ServiceOptions{
 			RegistryPath: opts.RegistryPath,
-		})),
-		core.WithService(git.NewService(git.ServiceOptions{})),
-		core.WithService(agentic.NewService(agentic.ServiceOptions{
-			AllowEdit: opts.AllowEdit,
-		})),
-		core.WithServiceLock(),
-	)
-	if err != nil {
-		return nil, err
+		}),
 	}
 
+	c.Service("dev", core.Service{
+		OnStart: func() core.Result {
+			c.RegisterTask(svc.handleTask)
+			return core.Result{OK: true}
+		},
+	})
+
+	c.LockEnable()
+	c.LockApply()
+
 	return &WorkBundle{Core: c}, nil
 }
 
 // Start initialises the bundle services.
 func (b *WorkBundle) Start(ctx context.Context) error {
-	return b.Core.ServiceStartup(ctx, nil)
+	return resultError(b.Core.ServiceStartup(ctx, nil))
 }
 
 // Stop shuts down the bundle services.
 func (b *WorkBundle) Stop(ctx context.Context) error {
-	return b.Core.ServiceShutdown(ctx)
+	return resultError(b.Core.ServiceShutdown(ctx))
 }
 
-// StatusBundle contains the Core instance for status-only operations.
-type StatusBundle struct {
-	Core *core.Core
-}
-
-// StatusBundleOptions configures the status bundle.
-type StatusBundleOptions struct {
-	RegistryPath string
-}
-
-// NewStatusBundle creates a bundle for status-only operations.
-// Includes: dev (orchestration), git services. No agentic - commits not available.
-func NewStatusBundle(opts StatusBundleOptions) (*StatusBundle, error) {
-	c, err := core.New(
-		core.WithService(NewService(ServiceOptions(opts))),
-		core.WithService(git.NewService(git.ServiceOptions{})),
-		// No agentic service - TaskCommit will be unhandled
-		core.WithServiceLock(),
-	)
-	if err != nil {
-		return nil, err
+// resultError extracts an error from a failed core.Result, returning nil on success.
+func resultError(r core.Result) error {
+	if !r.OK {
+		if err, ok := r.Value.(error); ok {
+			return err
+		}
+		if r.Value != nil {
+			return fmt.Errorf("service operation failed: %v", r.Value)
+		}
+		return fmt.Errorf("service operation failed")
 	}
-
-	return &StatusBundle{Core: c}, nil
-}
-
-// Start initialises the bundle services.
-func (b *StatusBundle) Start(ctx context.Context) error {
-	return b.Core.ServiceStartup(ctx, nil)
-}
-
-// Stop shuts down the bundle services.
-func (b *StatusBundle) Stop(ctx context.Context) error {
-	return b.Core.ServiceShutdown(ctx)
+	return nil
 }

cmd/dev/cmd_ci.go

@@ -8,7 +8,7 @@ import (
 	"code.gitea.io/sdk/gitea"
 
 	"forge.lthn.ai/core/cli/pkg/cli"
-	"forge.lthn.ai/core/go-i18n"
+	"dappco.re/go/core/i18n"
 )
 
 // CI-specific styles (aliases to shared)

cmd/dev/cmd_commit.go

@@ -6,9 +6,9 @@ import (
 	"path/filepath"
 
 	"forge.lthn.ai/core/cli/pkg/cli"
-	"forge.lthn.ai/core/go-scm/git"
-	"forge.lthn.ai/core/go-i18n"
-	coreio "forge.lthn.ai/core/go-io"
+	"dappco.re/go/core/scm/git"
+	"dappco.re/go/core/i18n"
+	coreio "dappco.re/go/core/io"
 )
 
 // Commit command flags
@@ -117,7 +117,7 @@ func runCommit(registryPath string, all bool) error {
 	for _, s := range dirtyRepos {
 		cli.Print("%s %s\n", dimStyle.Render(i18n.T("cmd.dev.committing")), s.Name)
 
-		if err := claudeCommit(ctx, s.Path, s.Name, registryPath); err != nil {
+		if err := doCommit(ctx, s.Path, false); err != nil {
 			cli.Print("  %s %s\n", errorStyle.Render("x"), err)
 			failed++
 		} else {
@@ -192,7 +192,7 @@ func runCommitSingleRepo(ctx context.Context, repoPath string, all bool) error {
 	cli.Blank()
 
 	// Commit
-	if err := claudeCommit(ctx, repoPath, repoName, ""); err != nil {
+	if err := doCommit(ctx, repoPath, false); err != nil {
 		cli.Print("  %s %s\n", errorStyle.Render("x"), err)
 		return err
 	}

cmd/dev/cmd_dev.go

@@ -19,6 +19,7 @@
 //
 // API Tools:
 //   - api sync: Synchronize public service APIs
+//   - api test-gen: Generate compile-time API test stubs
 //
 // Dev Environment (VM management):
 //   - install: Download dev environment image
@@ -33,13 +34,14 @@
 package dev
 
 import (
+	"dappco.re/go/core/i18n"
 	"forge.lthn.ai/core/cli/pkg/cli"
-	"forge.lthn.ai/core/go-devops/locales"
-	"forge.lthn.ai/core/go-i18n"
+
+	_ "dappco.re/go/core/devops/locales"
 )
 
 func init() {
-	cli.RegisterCommands(AddDevCommands, locales.FS)
+	cli.RegisterCommands(AddDevCommands)
 }
 
 // Style aliases from shared package

cmd/dev/cmd_file_sync.go

@@ -14,12 +14,12 @@ import (
 	"path/filepath"
 	"strings"
 
+	"dappco.re/go/core/i18n"
+	coreio "dappco.re/go/core/io"
+	"dappco.re/go/core/log"
+	"dappco.re/go/core/scm/git"
+	"dappco.re/go/core/scm/repos"
 	"forge.lthn.ai/core/cli/pkg/cli"
-	"forge.lthn.ai/core/go-scm/git"
-	"forge.lthn.ai/core/go-i18n"
-	coreio "forge.lthn.ai/core/go-io"
-	"forge.lthn.ai/core/go-log"
-	"forge.lthn.ai/core/go-scm/repos"
 )
 
 // File sync command flags
@@ -29,6 +29,7 @@ var (
 	fileSyncCoAuthor string
 	fileSyncDryRun   bool
 	fileSyncPush     bool
+	fileSyncYes      bool
 )
 
 // AddFileSyncCommand adds the 'sync' command to dev for file syncing.
@@ -48,6 +49,7 @@ func AddFileSyncCommand(parent *cli.Command) {
 	syncCmd.Flags().StringVar(&fileSyncCoAuthor, "co-author", "", i18n.T("cmd.dev.file_sync.flag.co_author"))
 	syncCmd.Flags().BoolVar(&fileSyncDryRun, "dry-run", false, i18n.T("cmd.dev.file_sync.flag.dry_run"))
 	syncCmd.Flags().BoolVar(&fileSyncPush, "push", false, i18n.T("cmd.dev.file_sync.flag.push"))
+	syncCmd.Flags().BoolVarP(&fileSyncYes, "yes", "y", false, i18n.T("cmd.dev.file_sync.flag.yes"))
 
 	_ = syncCmd.MarkFlagRequired("to")
 
@@ -64,23 +66,6 @@ func runFileSync(source string) error {
 
 	// Validate source exists
 	sourceInfo, err := os.Stat(source) // Keep os.Stat for local source check or use coreio? coreio.Local.IsFile is bool.
-	// If source is local file on disk (not in medium), we can use os.Stat.
-	// But concept is everything is via Medium?
-	// User is running CLI on host. `source` is relative to CWD.
-	// coreio.Local uses absolute path or relative to root (which is "/" by default).
-	// So coreio.Local works.
-	if !coreio.Local.IsFile(source) {
-		// Might be directory
-		// IsFile returns false for directory.
-	}
-	// Let's rely on os.Stat for initial source check to distinguish dir vs file easily if coreio doesn't expose Stat.
-	// coreio doesn't expose Stat.
-
-	// Check using standard os for source determination as we are outside strict sandbox for input args potentially?
-	// But we should use coreio where possible.
-	// coreio.Local.List worked for dirs.
-	// Let's stick to os.Stat for source properties finding as typically allowed for CLI args.
-
 	if err != nil {
 		return log.E("dev.sync", i18n.T("cmd.dev.file_sync.error.source_not_found", map[string]any{"Path": source}), err)
 	}
@@ -103,6 +88,16 @@ func runFileSync(source string) error {
 	}
 	cli.Blank()
 
+	if !fileSyncDryRun && !fileSyncYes {
+		cli.Print("%s\n", warningStyle.Render(i18n.T("cmd.dev.file_sync.warning")))
+		cli.Blank()
+		if !cli.Confirm(i18n.T("cmd.dev.file_sync.confirm")) {
+			cli.Text(i18n.T("cli.aborted"))
+			return nil
+		}
+		cli.Blank()
+	}
+
 	var succeeded, skipped, failed int
 
 	for _, repo := range targetRepos {
@@ -219,22 +214,48 @@ func resolveTargetRepos(pattern string) ([]*repos.Repo, error) {
 
 	// Match pattern against repo names
 	var matched []*repos.Repo
+	patterns := splitPatterns(pattern)
 	for _, repo := range registry.Repos {
-		if matchGlob(repo.Name, pattern) || matchGlob(repo.Path, pattern) {
-			matched = append(matched, repo)
+		for _, candidate := range patterns {
+			if matchGlob(repo.Name, candidate) || matchGlob(repo.Path, candidate) {
+				matched = append(matched, repo)
+				break
+			}
 		}
 	}
 
 	return matched, nil
 }
 
+// splitPatterns normalises comma-separated glob patterns.
+func splitPatterns(pattern string) []string {
+	raw := strings.Split(pattern, ",")
+	out := make([]string, 0, len(raw))
+
+	for _, p := range raw {
+		p = strings.TrimSpace(p)
+		if p == "" {
+			continue
+		}
+		out = append(out, p)
+	}
+
+	return out
+}
+
 // matchGlob performs simple glob matching with * wildcards
 func matchGlob(s, pattern string) bool {
-	// Handle exact match
+	// Handle exact match and simple glob patterns.
 	if s == pattern {
 		return true
 	}
 
+	matched, err := filepath.Match(pattern, s)
+	if err == nil {
+		return matched
+	}
+
+	// Fallback to legacy wildcard rules for invalid glob patterns.
 	// Handle * at end
 	if strings.HasSuffix(pattern, "*") {
 		prefix := strings.TrimSuffix(pattern, "*")

cmd/dev/cmd_file_sync_test.go

@@ -0,0 +1,40 @@
+package dev
+
+import (
+	"testing"
+
+	"github.com/stretchr/testify/require"
+
+	"forge.lthn.ai/core/cli/pkg/cli"
+)
+
+func TestAddFileSyncCommand_Good(t *testing.T) {
+	root := &cli.Command{Use: "core"}
+
+	AddDevCommands(root)
+
+	syncCmd, _, err := root.Find([]string{"dev", "sync"})
+	require.NoError(t, err)
+	require.NotNil(t, syncCmd)
+
+	yesFlag := syncCmd.Flags().Lookup("yes")
+	require.NotNil(t, yesFlag)
+	require.Equal(t, "y", yesFlag.Shorthand)
+
+	require.NotNil(t, syncCmd.Flags().Lookup("dry-run"))
+	require.NotNil(t, syncCmd.Flags().Lookup("push"))
+}
+
+func TestSplitPatterns_Good(t *testing.T) {
+	patterns := splitPatterns("packages/core-*,  apps/* ,services/*,")
+	require.Equal(t, []string{"packages/core-*", "apps/*", "services/*"}, patterns)
+}
+
+func TestMatchGlob_Good(t *testing.T) {
+	require.True(t, matchGlob("packages/core-xyz", "packages/core-*"))
+	require.True(t, matchGlob("packages/core-xyz", "*/core-*"))
+	require.True(t, matchGlob("a-b", "a?b"))
+	require.True(t, matchGlob("foo", "foo"))
+	require.False(t, matchGlob("core-other", "packages/*"))
+	require.False(t, matchGlob("abc", "[]"))
+}

cmd/dev/cmd_health.go

@@ -8,8 +8,8 @@ import (
 	"strings"
 
 	"forge.lthn.ai/core/cli/pkg/cli"
-	"forge.lthn.ai/core/go-scm/git"
-	"forge.lthn.ai/core/go-i18n"
+	"dappco.re/go/core/scm/git"
+	"dappco.re/go/core/i18n"
 )
 
 // Health command flags

cmd/dev/cmd_impact.go

@@ -4,10 +4,10 @@ import (
 	"slices"
 
 	"forge.lthn.ai/core/cli/pkg/cli"
-	"forge.lthn.ai/core/go-i18n"
-	"forge.lthn.ai/core/go-io"
-	log "forge.lthn.ai/core/go-log"
-	"forge.lthn.ai/core/go-scm/repos"
+	"dappco.re/go/core/i18n"
+	"dappco.re/go/core/io"
+	log "dappco.re/go/core/log"
+	"dappco.re/go/core/scm/repos"
 )
 
 // Impact-specific styles (aliases to shared)

cmd/dev/cmd_issues.go

@@ -8,7 +8,7 @@ import (
 	"code.gitea.io/sdk/gitea"
 
 	"forge.lthn.ai/core/cli/pkg/cli"
-	"forge.lthn.ai/core/go-i18n"
+	"dappco.re/go/core/i18n"
 )
 
 // Issue-specific styles (aliases to shared)

cmd/dev/cmd_pull.go

@@ -5,8 +5,8 @@ import (
 	"os/exec"
 
 	"forge.lthn.ai/core/cli/pkg/cli"
-	"forge.lthn.ai/core/go-scm/git"
-	"forge.lthn.ai/core/go-i18n"
+	"dappco.re/go/core/scm/git"
+	"dappco.re/go/core/i18n"
 )
 
 // Pull command flags

cmd/dev/cmd_push.go

@@ -6,8 +6,8 @@ import (
 	"path/filepath"
 
 	"forge.lthn.ai/core/cli/pkg/cli"
-	"forge.lthn.ai/core/go-scm/git"
-	"forge.lthn.ai/core/go-i18n"
+	"dappco.re/go/core/scm/git"
+	"dappco.re/go/core/i18n"
 )
 
 // Push command flags
@@ -206,7 +206,7 @@ func runPushSingleRepo(ctx context.Context, repoPath string, force bool) error {
 				// Use edit-enabled commit if only untracked files (may need .gitignore fix)
 				var err error
 				if s.Modified == 0 && s.Staged == 0 && s.Untracked > 0 {
-					err = claudeEditCommit(ctx, repoPath, repoName, "")
+					err = doCommit(ctx, repoPath, true)
 				} else {
 					err = runCommitSingleRepo(ctx, repoPath, false)
 				}

cmd/dev/cmd_reviews.go

@@ -8,7 +8,7 @@ import (
 	"code.gitea.io/sdk/gitea"
 
 	"forge.lthn.ai/core/cli/pkg/cli"
-	"forge.lthn.ai/core/go-i18n"
+	"dappco.re/go/core/i18n"
 )
 
 // PR-specific styles (aliases to shared)

cmd/dev/cmd_sync.go

@@ -6,12 +6,15 @@ import (
 	"go/parser"
 	"go/token"
 	"path/filepath"
+	"sort"
+	"strings"
 	"text/template"
 
-	"forge.lthn.ai/core/cli/pkg/cli"  // Added
-	"forge.lthn.ai/core/go-i18n" // Added
-	coreio "forge.lthn.ai/core/go-io"
-	// Added
+	"dappco.re/go/core/i18n"
+	coreio "dappco.re/go/core/io"
+
+	"forge.lthn.ai/core/cli/pkg/cli"
+
 	"golang.org/x/text/cases"
 	"golang.org/x/text/language"
 )
@@ -52,15 +55,15 @@ func runSync() error {
 		}
 
 		serviceName := dir.Name()
-		internalFile := filepath.Join(pkgDir, serviceName, serviceName+".go")
+		internalDir := filepath.Join(pkgDir, serviceName)
 		publicDir := serviceName
 		publicFile := filepath.Join(publicDir, serviceName+".go")
 
-		if !coreio.Local.IsFile(internalFile) {
+		if !coreio.Local.Exists(internalDir) {
 			continue
 		}
 
-		symbols, err := getExportedSymbols(internalFile)
+		symbols, err := getExportedSymbols(internalDir)
 		if err != nil {
 			return cli.Wrap(err, cli.Sprintf("error getting symbols for service '%s'", serviceName))
 		}
@@ -74,23 +77,29 @@ func runSync() error {
 }
 
 func getExportedSymbols(path string) ([]symbolInfo, error) {
-	// ParseFile expects a filename/path and reads it using os.Open by default if content is nil.
-	// Since we want to use our Medium abstraction, we should read the file content first.
-	content, err := coreio.Local.Read(path)
+	files, err := listGoFiles(path)
 	if err != nil {
 		return nil, err
 	}
 
-	fset := token.NewFileSet()
-	// ParseFile can take content as string (src argument).
-	node, err := parser.ParseFile(fset, path, content, parser.ParseComments)
-	if err != nil {
-		return nil, err
-	}
+	symbolsByName := make(map[string]symbolInfo)
+	for _, file := range files {
+		content, err := coreio.Local.Read(file)
+		if err != nil {
+			return nil, err
+		}
+
+		fset := token.NewFileSet()
+		node, err := parser.ParseFile(fset, file, content, parser.ParseComments)
+		if err != nil {
+			return nil, err
+		}
+
+		for name, obj := range node.Scope.Objects {
+			if !ast.IsExported(name) {
+				continue
+			}
 
-	var symbols []symbolInfo
-	for name, obj := range node.Scope.Objects {
-		if ast.IsExported(name) {
 			kind := "unknown"
 			switch obj.Kind {
 			case ast.Con:
@@ -102,14 +111,59 @@ func getExportedSymbols(path string) ([]symbolInfo, error) {
 			case ast.Typ:
 				kind = "type"
 			}
-			if kind != "unknown" {
-				symbols = append(symbols, symbolInfo{Name: name, Kind: kind})
+
+			if kind == "unknown" {
+				continue
+			}
+
+			if _, exists := symbolsByName[name]; !exists {
+				symbolsByName[name] = symbolInfo{Name: name, Kind: kind}
 			}
 		}
 	}
+
+	symbols := make([]symbolInfo, 0, len(symbolsByName))
+	for _, symbol := range symbolsByName {
+		symbols = append(symbols, symbol)
+	}
+
+	sort.Slice(symbols, func(i, j int) bool {
+		if symbols[i].Name == symbols[j].Name {
+			return symbols[i].Kind < symbols[j].Kind
+		}
+		return symbols[i].Name < symbols[j].Name
+	})
+
 	return symbols, nil
 }
 
+func listGoFiles(path string) ([]string, error) {
+	entries, err := coreio.Local.List(path)
+	if err == nil {
+		files := make([]string, 0, len(entries))
+		for _, entry := range entries {
+			if entry.IsDir() {
+				continue
+			}
+
+			name := entry.Name()
+			if !strings.HasSuffix(name, ".go") || strings.HasSuffix(name, "_test.go") {
+				continue
+			}
+
+			files = append(files, filepath.Join(path, name))
+		}
+		sort.Strings(files)
+		return files, nil
+	}
+
+	if coreio.Local.IsFile(path) {
+		return []string{path}, nil
+	}
+
+	return nil, err
+}
+
 const publicAPITemplate = `// package {{.ServiceName}} provides the public API for the {{.ServiceName}} service.
 package {{.ServiceName}}
 

cmd/dev/cmd_tag.go

@@ -10,8 +10,8 @@ import (
 	"strings"
 
 	"forge.lthn.ai/core/cli/pkg/cli"
-	"forge.lthn.ai/core/go-i18n"
-	log "forge.lthn.ai/core/go-log"
+	"dappco.re/go/core/i18n"
+	log "dappco.re/go/core/log"
 )
 
 // Tag command flags

cmd/dev/cmd_vm.go

@@ -5,11 +5,11 @@ import (
 	"os"
 	"time"
 
+	"dappco.re/go/core/i18n"
+	"dappco.re/go/core/io"
+	log "dappco.re/go/core/log"
 	"forge.lthn.ai/core/cli/pkg/cli"
 	"forge.lthn.ai/core/go-container/devenv"
-	"forge.lthn.ai/core/go-i18n"
-	"forge.lthn.ai/core/go-io"
-	log "forge.lthn.ai/core/go-log"
 )
 
 // addVMCommands adds the dev environment VM commands to the dev parent command.
@@ -190,10 +190,13 @@ func runVMStop() error {
 	return nil
 }
 
-// addVMStatusCommand adds the 'devops status' command.
+// addVMStatusCommand adds the 'dev status' command.
 func addVMStatusCommand(parent *cli.Command) {
 	statusCmd := &cli.Command{
-		Use:   "vm-status",
+		Use: "status",
+		Aliases: []string{
+			"vm-status",
+		},
 		Short: i18n.T("cmd.dev.vm.status.short"),
 		Long:  i18n.T("cmd.dev.vm.status.long"),
 		RunE: func(cmd *cli.Command, args []string) error {

cmd/dev/cmd_vm_test.go

@@ -0,0 +1,26 @@
+package dev
+
+import (
+	"testing"
+
+	"github.com/stretchr/testify/require"
+
+	"forge.lthn.ai/core/cli/pkg/cli"
+)
+
+func TestAddVMStatusCommand_Good(t *testing.T) {
+	root := &cli.Command{Use: "core"}
+
+	AddDevCommands(root)
+
+	statusCmd, _, err := root.Find([]string{"dev", "status"})
+	require.NoError(t, err)
+	require.NotNil(t, statusCmd)
+	require.Equal(t, "status", statusCmd.Use)
+	require.Contains(t, statusCmd.Aliases, "vm-status")
+
+	aliasCmd, _, err := root.Find([]string{"dev", "vm-status"})
+	require.NoError(t, err)
+	require.NotNil(t, aliasCmd)
+	require.Equal(t, statusCmd, aliasCmd)
+}

cmd/dev/cmd_work.go

@@ -3,15 +3,12 @@ package dev
 import (
 	"cmp"
 	"context"
-	"os"
-	"os/exec"
 	"slices"
 	"strings"
 
 	"forge.lthn.ai/core/cli/pkg/cli"
-	agentic "forge.lthn.ai/core/agent/pkg/lifecycle"
-	"forge.lthn.ai/core/go-scm/git"
-	"forge.lthn.ai/core/go-i18n"
+	"dappco.re/go/core/i18n"
+	"dappco.re/go/core/scm/git"
 )
 
 // Work command flags
@@ -57,42 +54,30 @@ func runWork(registryPath string, statusOnly, autoCommit bool) error {
 	defer func() { _ = bundle.Stop(ctx) }()
 
 	// Load registry and get paths
-	paths, names, err := func() ([]string, map[string]string, error) {
-		reg, _, err := loadRegistryWithConfig(registryPath)
-		if err != nil {
-			return nil, nil, err
-		}
-		var paths []string
-		names := make(map[string]string)
-		for _, repo := range reg.List() {
-			if repo.IsGitRepo() {
-				paths = append(paths, repo.Path)
-				names[repo.Path] = repo.Name
-			}
-		}
-		return paths, names, nil
-	}()
+	reg, _, err := loadRegistryWithConfig(registryPath)
 	if err != nil {
 		return err
 	}
 
+	var paths []string
+	names := make(map[string]string)
+	for _, repo := range reg.List() {
+		if repo.IsGitRepo() {
+			paths = append(paths, repo.Path)
+			names[repo.Path] = repo.Name
+		}
+	}
+
 	if len(paths) == 0 {
 		cli.Text(i18n.T("cmd.dev.no_git_repos"))
 		return nil
 	}
 
-	// QUERY git status
-	result, handled, err := bundle.Core.QUERY(git.QueryStatus{
+	// Query git status directly
+	statuses := git.Status(ctx, git.StatusOptions{
 		Paths: paths,
 		Names: names,
 	})
-	if !handled {
-		return cli.Err("git service not available")
-	}
-	if err != nil {
-		return err
-	}
-	statuses := result.([]git.RepoStatus)
 
 	// Sort by repo name for consistent output
 	slices.SortFunc(statuses, func(a, b git.RepoStatus) int {
@@ -125,15 +110,7 @@ func runWork(registryPath string, statusOnly, autoCommit bool) error {
 		cli.Blank()
 
 		for _, s := range dirtyRepos {
-			// PERFORM commit via agentic service
-			_, handled, err := bundle.Core.PERFORM(agentic.TaskCommit{
-				Path: s.Path,
-				Name: s.Name,
-			})
-			if !handled {
-				cli.Print("  %s %s: %s\n", warningStyle.Render("!"), s.Name, "agentic service not available")
-				continue
-			}
+			err := doCommit(ctx, s.Path, false)
 			if err != nil {
 				cli.Print("  %s %s: %s\n", errorStyle.Render("x"), s.Name, err)
 			} else {
@@ -141,12 +118,11 @@ func runWork(registryPath string, statusOnly, autoCommit bool) error {
 			}
 		}
 
-		// Re-QUERY status after commits
-		result, _, _ = bundle.Core.QUERY(git.QueryStatus{
+		// Re-query status after commits
+		statuses = git.Status(ctx, git.StatusOptions{
 			Paths: paths,
 			Names: names,
 		})
-		statuses = result.([]git.RepoStatus)
 
 		// Rebuild ahead repos list
 		aheadRepos = nil
@@ -187,18 +163,11 @@ func runWork(registryPath string, statusOnly, autoCommit bool) error {
 
 	cli.Blank()
 
-	// PERFORM push for each repo
+	// Push each repo directly
 	var divergedRepos []git.RepoStatus
 
 	for _, s := range aheadRepos {
-		_, handled, err := bundle.Core.PERFORM(git.TaskPush{
-			Path: s.Path,
-			Name: s.Name,
-		})
-		if !handled {
-			cli.Print("  %s %s: %s\n", errorStyle.Render("x"), s.Name, "git service not available")
-			continue
-		}
+		err := git.Push(ctx, s.Path)
 		if err != nil {
 			if git.IsNonFastForward(err) {
 				cli.Print("  %s %s: %s\n", warningStyle.Render("!"), s.Name, i18n.T("cmd.dev.push.diverged"))
@@ -220,8 +189,8 @@ func runWork(registryPath string, statusOnly, autoCommit bool) error {
 			for _, s := range divergedRepos {
 				cli.Print("  %s %s...\n", dimStyle.Render("↓"), s.Name)
 
-				// PERFORM pull
-				_, _, err := bundle.Core.PERFORM(git.TaskPull{Path: s.Path, Name: s.Name})
+				// Pull directly
+				err := git.Pull(ctx, s.Path)
 				if err != nil {
 					cli.Print("  %s %s: %s\n", errorStyle.Render("x"), s.Name, err)
 					continue
@@ -229,8 +198,8 @@ func runWork(registryPath string, statusOnly, autoCommit bool) error {
 
 				cli.Print("  %s %s...\n", dimStyle.Render("↑"), s.Name)
 
-				// PERFORM push
-				_, _, err = bundle.Core.PERFORM(git.TaskPush{Path: s.Path, Name: s.Name})
+				// Push directly
+				err = git.Push(ctx, s.Path)
 				if err != nil {
 					cli.Print("  %s %s: %s\n", errorStyle.Render("x"), s.Name, err)
 					continue
@@ -318,28 +287,3 @@ func printStatusTable(statuses []git.RepoStatus) {
 	}
 }
 
-// claudeCommit shells out to claude for committing (legacy helper for other commands)
-func claudeCommit(ctx context.Context, repoPath, repoName, registryPath string) error {
-	prompt := agentic.Prompt("commit")
-
-	cmd := exec.CommandContext(ctx, "claude", "-p", prompt, "--allowedTools", "Bash,Read,Glob,Grep")
-	cmd.Dir = repoPath
-	cmd.Stdout = os.Stdout
-	cmd.Stderr = os.Stderr
-	cmd.Stdin = os.Stdin
-
-	return cmd.Run()
-}
-
-// claudeEditCommit shells out to claude with edit permissions (legacy helper)
-func claudeEditCommit(ctx context.Context, repoPath, repoName, registryPath string) error {
-	prompt := agentic.Prompt("commit")
-
-	cmd := exec.CommandContext(ctx, "claude", "-p", prompt, "--allowedTools", "Bash,Read,Write,Edit,Glob,Grep")
-	cmd.Dir = repoPath
-	cmd.Stdout = os.Stdout
-	cmd.Stderr = os.Stderr
-	cmd.Stdin = os.Stdin
-
-	return cmd.Run()
-}

cmd/dev/cmd_workflow.go

@@ -7,10 +7,10 @@ import (
 	"slices"
 	"strings"
 
+	"dappco.re/go/core/i18n"
+	"dappco.re/go/core/io"
+	"dappco.re/go/core/scm/repos"
 	"forge.lthn.ai/core/cli/pkg/cli"
-	"forge.lthn.ai/core/go-i18n"
-	"forge.lthn.ai/core/go-io"
-	"forge.lthn.ai/core/go-scm/repos"
 )
 
 // Workflow command flags
@@ -117,6 +117,10 @@ func runWorkflowList(registryPath string) error {
 	for _, wf := range templateWorkflows {
 		templateSet[wf] = true
 	}
+	templateNames := slices.Sorted(maps.Keys(templateSet))
+	if len(templateNames) > 0 {
+		cli.Print("%s %s\n\n", i18n.T("cmd.dev.workflow.templates"), strings.Join(templateNames, ", "))
+	}
 
 	// Build table
 	headers := []string{i18n.T("cmd.dev.workflow.header.repo")}

cmd/dev/cmd_workflow_test.go

@@ -1,10 +1,12 @@
 package dev
 
 import (
+	"maps"
 	"path/filepath"
+	"slices"
 	"testing"
 
-	"forge.lthn.ai/core/go-io"
+	"dappco.re/go/core/io"
 )
 
 func TestFindWorkflows_Good(t *testing.T) {
@@ -106,3 +108,21 @@ func TestFindTemplateWorkflow_NotFound(t *testing.T) {
 		t.Errorf("Expected empty string for non-existent template, got %s", result)
 	}
 }
+
+func TestTemplateNames_Good(t *testing.T) {
+	templateSet := map[string]bool{
+		"z.yml": true,
+		"a.yml": true,
+		"m.yml": true,
+	}
+
+	names := slices.Sorted(maps.Keys(templateSet))
+
+	if len(names) != 3 {
+		t.Fatalf("Expected 3 template names, got %d", len(names))
+	}
+
+	if names[0] != "a.yml" || names[1] != "m.yml" || names[2] != "z.yml" {
+		t.Fatalf("Expected sorted template names, got %v", names)
+	}
+}

cmd/dev/forge_client.go

@@ -6,9 +6,9 @@ import (
 
 	"code.gitea.io/sdk/gitea"
 
-	coreio "forge.lthn.ai/core/go-io"
-	log "forge.lthn.ai/core/go-log"
-	"forge.lthn.ai/core/go-scm/forge"
+	coreio "dappco.re/go/core/io"
+	log "dappco.re/go/core/log"
+	"dappco.re/go/core/scm/forge"
 )
 
 // forgeAPIClient creates a Gitea SDK client configured for the Forge instance.

cmd/dev/registry.go

@@ -5,11 +5,11 @@ import (
 	"path/filepath"
 	"strings"
 
-	"forge.lthn.ai/core/agent/cmd/workspace"
+	"dappco.re/go/agent/cmd/workspace"
+	"dappco.re/go/core/i18n"
+	"dappco.re/go/core/io"
+	"dappco.re/go/core/scm/repos"
 	"forge.lthn.ai/core/cli/pkg/cli"
-	"forge.lthn.ai/core/go-i18n"
-	"forge.lthn.ai/core/go-io"
-	"forge.lthn.ai/core/go-scm/repos"
 )
 
 // loadRegistryWithConfig loads the registry and applies workspace configuration.

cmd/dev/service.go

@@ -1,32 +1,14 @@
 package dev
 
 import (
-	"cmp"
 	"context"
-	"slices"
-	"strings"
+	"os"
+	"os/exec"
 
-	"forge.lthn.ai/core/cli/pkg/cli"
-	agentic "forge.lthn.ai/core/agent/pkg/lifecycle"
-	"forge.lthn.ai/core/go-scm/git"
-	"forge.lthn.ai/core/go/pkg/core"
+	agentic "dappco.re/go/agent/pkg/lifecycle"
+	"dappco.re/go/core"
 )
 
-// Tasks for dev service
-
-// TaskWork runs the full dev workflow: status, commit, push.
-type TaskWork struct {
-	RegistryPath string
-	StatusOnly   bool
-	AutoCommit   bool
-	AutoPush     bool
-}
-
-// TaskStatus displays git status for all repos.
-type TaskStatus struct {
-	RegistryPath string
-}
-
 // ServiceOptions for configuring the dev service.
 type ServiceOptions struct {
 	RegistryPath string
@@ -37,256 +19,24 @@ type Service struct {
 	*core.ServiceRuntime[ServiceOptions]
 }
 
-// NewService creates a dev service factory.
-func NewService(opts ServiceOptions) func(*core.Core) (any, error) {
-	return func(c *core.Core) (any, error) {
-		return &Service{
-			ServiceRuntime: core.NewServiceRuntime(c, opts),
-		}, nil
-	}
+func (s *Service) handleTask(_ *core.Core, _ core.Task) core.Result {
+	return core.Result{}
 }
 
-// OnStartup registers task handlers.
-func (s *Service) OnStartup(ctx context.Context) error {
-	s.Core().RegisterTask(s.handleTask)
-	return nil
-}
-
-func (s *Service) handleTask(c *core.Core, t core.Task) (any, bool, error) {
-	switch m := t.(type) {
-	case TaskWork:
-		err := s.runWork(m)
-		return nil, true, err
-
-	case TaskStatus:
-		err := s.runStatus(m)
-		return nil, true, err
-	}
-	return nil, false, nil
-}
-
-func (s *Service) runWork(task TaskWork) error {
-	// Load registry
-	paths, names, err := s.loadRegistry(task.RegistryPath)
-	if err != nil {
-		return err
-	}
-
-	if len(paths) == 0 {
-		cli.Println("No git repositories found")
-		return nil
-	}
-
-	// QUERY git status
-	result, handled, err := s.Core().QUERY(git.QueryStatus{
-		Paths: paths,
-		Names: names,
-	})
-	if !handled {
-		return cli.Err("git service not available")
-	}
-	if err != nil {
-		return err
-	}
-	statuses := result.([]git.RepoStatus)
-
-	// Sort by name
-	slices.SortFunc(statuses, func(a, b git.RepoStatus) int {
-		return cmp.Compare(a.Name, b.Name)
-	})
-
-	// Display status table
-	s.printStatusTable(statuses)
-
-	// Collect dirty and ahead repos
-	var dirtyRepos []git.RepoStatus
-	var aheadRepos []git.RepoStatus
-
-	for _, st := range statuses {
-		if st.Error != nil {
-			continue
-		}
-		if st.IsDirty() {
-			dirtyRepos = append(dirtyRepos, st)
-		}
-		if st.HasUnpushed() {
-			aheadRepos = append(aheadRepos, st)
-		}
-	}
-
-	// Auto-commit dirty repos if requested
-	if task.AutoCommit && len(dirtyRepos) > 0 {
-		cli.Blank()
-		cli.Println("Committing changes...")
-		cli.Blank()
-
-		for _, repo := range dirtyRepos {
-			_, handled, err := s.Core().PERFORM(agentic.TaskCommit{
-				Path: repo.Path,
-				Name: repo.Name,
-			})
-			if !handled {
-				// Agentic service not available - skip silently
-				cli.Print("  - %s: agentic service not available\n", repo.Name)
-				continue
-			}
-			if err != nil {
-				cli.Print("  x %s: %s\n", repo.Name, err)
-			} else {
-				cli.Print("  v %s\n", repo.Name)
-			}
-		}
-
-		// Re-query status after commits
-		result, _, _ = s.Core().QUERY(git.QueryStatus{
-			Paths: paths,
-			Names: names,
-		})
-		statuses = result.([]git.RepoStatus)
-
-		// Rebuild ahead repos list
-		aheadRepos = nil
-		for _, st := range statuses {
-			if st.Error == nil && st.HasUnpushed() {
-				aheadRepos = append(aheadRepos, st)
-			}
-		}
-	}
-
-	// If status only, we're done
-	if task.StatusOnly {
-		if len(dirtyRepos) > 0 && !task.AutoCommit {
-			cli.Blank()
-			cli.Println("Use --commit flag to auto-commit dirty repos")
-		}
-		return nil
-	}
-
-	// Push repos with unpushed commits
-	if len(aheadRepos) == 0 {
-		cli.Blank()
-		cli.Println("All repositories are up to date")
-		return nil
-	}
-
-	cli.Blank()
-	cli.Print("%d repos with unpushed commits:\n", len(aheadRepos))
-	for _, st := range aheadRepos {
-		cli.Print("  %s: %d commits\n", st.Name, st.Ahead)
-	}
-
-	if !task.AutoPush {
-		cli.Blank()
-		cli.Print("Push all? [y/N] ")
-		var answer string
-		_, _ = cli.Scanln(&answer)
-		if strings.ToLower(answer) != "y" {
-			cli.Println("Aborted")
-			return nil
-		}
-	}
-
-	cli.Blank()
-
-	// Push each repo
-	for _, st := range aheadRepos {
-		_, handled, err := s.Core().PERFORM(git.TaskPush{
-			Path: st.Path,
-			Name: st.Name,
-		})
-		if !handled {
-			cli.Print("  x %s: git service not available\n", st.Name)
-			continue
-		}
-		if err != nil {
-			if git.IsNonFastForward(err) {
-				cli.Print("  ! %s: branch has diverged\n", st.Name)
-			} else {
-				cli.Print("  x %s: %s\n", st.Name, err)
-			}
-		} else {
-			cli.Print("  v %s\n", st.Name)
-		}
-	}
-
-	return nil
-}
-
-func (s *Service) runStatus(task TaskStatus) error {
-	paths, names, err := s.loadRegistry(task.RegistryPath)
-	if err != nil {
-		return err
-	}
-
-	if len(paths) == 0 {
-		cli.Println("No git repositories found")
-		return nil
-	}
-
-	result, handled, err := s.Core().QUERY(git.QueryStatus{
-		Paths: paths,
-		Names: names,
-	})
-	if !handled {
-		return cli.Err("git service not available")
-	}
-	if err != nil {
-		return err
-	}
-
-	statuses := result.([]git.RepoStatus)
-	slices.SortFunc(statuses, func(a, b git.RepoStatus) int {
-		return cmp.Compare(a.Name, b.Name)
-	})
-
-	s.printStatusTable(statuses)
-	return nil
-}
-
-func (s *Service) loadRegistry(registryPath string) ([]string, map[string]string, error) {
-	reg, _, err := loadRegistryWithConfig(registryPath)
-	if err != nil {
-		return nil, nil, err
-	}
-
-	var paths []string
-	names := make(map[string]string)
-
-	for _, repo := range reg.List() {
-		if repo.IsGitRepo() {
-			paths = append(paths, repo.Path)
-			names[repo.Path] = repo.Name
-		}
-	}
-
-	return paths, names, nil
-}
-
-func (s *Service) printStatusTable(statuses []git.RepoStatus) {
-	// Calculate column widths
-	nameWidth := 4 // "Repo"
-	for _, st := range statuses {
-		if len(st.Name) > nameWidth {
-			nameWidth = len(st.Name)
-		}
-	}
-
-	// Print header
-	cli.Print("%-*s  %8s  %9s  %6s  %5s\n",
-		nameWidth, "Repo", "Modified", "Untracked", "Staged", "Ahead")
-
-	// Print separator
-	cli.Text(strings.Repeat("-", nameWidth+2+10+11+8+7))
-
-	// Print rows
-	for _, st := range statuses {
-		if st.Error != nil {
-			cli.Print("%-*s  error: %s\n", nameWidth, st.Name, st.Error)
-			continue
-		}
-
-		cli.Print("%-*s  %8d  %9d  %6d  %5d\n",
-			nameWidth, st.Name,
-			st.Modified, st.Untracked, st.Staged, st.Ahead)
-	}
+// doCommit shells out to claude for AI-assisted commit.
+func doCommit(ctx context.Context, repoPath string, allowEdit bool) error {
+	prompt := agentic.Prompt("commit")
+
+	tools := "Bash,Read,Glob,Grep"
+	if allowEdit {
+		tools = "Bash,Read,Write,Edit,Glob,Grep"
+	}
+
+	cmd := exec.CommandContext(ctx, "claude", "-p", prompt, "--allowedTools", tools)
+	cmd.Dir = repoPath
+	cmd.Stdout = os.Stdout
+	cmd.Stderr = os.Stderr
+	cmd.Stdin = os.Stdin
+
+	return cmd.Run()
 }

cmd/docs/cmd_commands.go

@@ -10,11 +10,12 @@ package docs
 
 import (
 	"forge.lthn.ai/core/cli/pkg/cli"
-	"forge.lthn.ai/core/go-devops/locales"
+
+	_ "dappco.re/go/core/devops/locales"
 )
 
 func init() {
-	cli.RegisterCommands(AddDocsCommands, locales.FS)
+	cli.RegisterCommands(AddDocsCommands)
 }
 
 // AddDocsCommands registers the 'docs' command and all subcommands.

cmd/docs/cmd_docs.go

@@ -3,7 +3,7 @@ package docs
 
 import (
 	"forge.lthn.ai/core/cli/pkg/cli"
-	"forge.lthn.ai/core/go-i18n"
+	"dappco.re/go/core/i18n"
 )
 
 // Style and utility aliases from shared

cmd/docs/cmd_list.go

@@ -4,7 +4,7 @@ import (
 	"strings"
 
 	"forge.lthn.ai/core/cli/pkg/cli"
-	"forge.lthn.ai/core/go-i18n"
+	"dappco.re/go/core/i18n"
 )
 
 // Flag variable for list command

cmd/docs/cmd_scan.go

@@ -6,11 +6,11 @@ import (
 	"path/filepath"
 	"strings"
 
-	"forge.lthn.ai/core/agent/cmd/workspace"
+	"dappco.re/go/agent/cmd/workspace"
+	"dappco.re/go/core/i18n"
+	"dappco.re/go/core/io"
+	"dappco.re/go/core/scm/repos"
 	"forge.lthn.ai/core/cli/pkg/cli"
-	"forge.lthn.ai/core/go-i18n"
-	"forge.lthn.ai/core/go-io"
-	"forge.lthn.ai/core/go-scm/repos"
 )
 
 // RepoDocInfo holds documentation info for a repo

cmd/docs/cmd_sync.go

@@ -6,10 +6,10 @@ import (
 	"path/filepath"
 	"strings"
 
+	"dappco.re/go/core/i18n"
+	"dappco.re/go/core/io"
+	"dappco.re/go/core/scm/repos"
 	"forge.lthn.ai/core/cli/pkg/cli"
-	"forge.lthn.ai/core/go-i18n"
-	"forge.lthn.ai/core/go-io"
-	"forge.lthn.ai/core/go-scm/repos"
 )
 
 // Flag variables for sync command
@@ -140,9 +140,7 @@ func runPHPSync(reg *repos.Registry, basePath string, outputDir string, dryRun b
 		repoOutDir := filepath.Join(outputDir, outName)
 
 		// Clear existing directory (recursively)
-		_ = io.Local.DeleteAll(repoOutDir)
-
-		if err := io.Local.EnsureDir(repoOutDir); err != nil {
+		if err := resetOutputDir(repoOutDir); err != nil {
 			cli.Print("  %s %s: %s\n", errorStyle.Render("✗"), info.Name, err)
 			continue
 		}
@@ -275,6 +273,7 @@ func runZensicalSync(reg *repos.Registry, basePath string, outputDir string, dry
 
 	cli.Blank()
 	var synced int
+repoLoop:
 	for _, info := range docsInfo {
 		section, folder := zensicalOutputName(info.Name)
 
@@ -283,6 +282,11 @@ func runZensicalSync(reg *repos.Registry, basePath string, outputDir string, dry
 			destDir = filepath.Join(destDir, folder)
 		}
 
+		if err := resetOutputDir(destDir); err != nil {
+			cli.Print("  %s %s: %s\n", errorStyle.Render("✗"), info.Name, err)
+			continue
+		}
+
 		weight := 10
 		docsDir := filepath.Join(info.Path, "docs")
 		for _, f := range info.DocsFiles {
@@ -295,9 +299,8 @@ func runZensicalSync(reg *repos.Registry, basePath string, outputDir string, dry
 			weight += 10
 		}
 
-		if info.Readme != "" && folder != "" {
-			dst := filepath.Join(destDir, "index.md")
-			if err := copyWithFrontMatter(info.Readme, dst, 1); err != nil {
+		if info.Readme != "" {
+			if err := copyZensicalReadme(info.Readme, destDir); err != nil {
 				cli.Print("  %s README: %s\n", errorStyle.Render("✗"), err)
 			}
 		}
@@ -305,6 +308,10 @@ func runZensicalSync(reg *repos.Registry, basePath string, outputDir string, dry
 		if len(info.KBFiles) > 0 {
 			suffix := strings.TrimPrefix(info.Name, "go-")
 			kbDestDir := filepath.Join(outputDir, "kb", suffix)
+			if err := resetOutputDir(kbDestDir); err != nil {
+				cli.Print("  %s KB: %s\n", errorStyle.Render("✗"), err)
+				continue repoLoop
+			}
 			kbDir := filepath.Join(info.Path, "KB")
 			kbWeight := 10
 			for _, f := range info.KBFiles {
@@ -326,10 +333,24 @@ func runZensicalSync(reg *repos.Registry, basePath string, outputDir string, dry
 	return nil
 }
 
+// copyZensicalReadme copies a repository README to index.md in the target directory.
+func copyZensicalReadme(src, destDir string) error {
+	dst := filepath.Join(destDir, "index.md")
+	return copyWithFrontMatter(src, dst, 1)
+}
+
+// resetOutputDir clears and recreates a target directory before copying files into it.
+func resetOutputDir(dir string) error {
+	if err := io.Local.DeleteAll(dir); err != nil {
+		return err
+	}
+	return io.Local.EnsureDir(dir)
+}
+
 // goHelpOutputName maps repo name to output folder name for go-help.
 func goHelpOutputName(repoName string) string {
 	if repoName == "core" {
-		return "cli"
+		return "go"
 	}
 	if strings.HasPrefix(repoName, "core-") {
 		return strings.TrimPrefix(repoName, "core-")
@@ -388,9 +409,7 @@ func runGoHelpSync(reg *repos.Registry, basePath string, outputDir string, dryRu
 		repoOutDir := filepath.Join(outputDir, outName)
 
 		// Clear existing directory
-		_ = io.Local.DeleteAll(repoOutDir)
-
-		if err := io.Local.EnsureDir(repoOutDir); err != nil {
+		if err := resetOutputDir(repoOutDir); err != nil {
 			cli.Print("  %s %s: %s\n", errorStyle.Render("✗"), info.Name, err)
 			continue
 		}

cmd/docs/cmd_sync_test.go

@@ -0,0 +1,80 @@
+package docs
+
+import (
+	"os"
+	"path/filepath"
+	"strings"
+	"testing"
+)
+
+func TestCopyZensicalReadme_Good(t *testing.T) {
+	srcDir := t.TempDir()
+	destDir := t.TempDir()
+
+	src := filepath.Join(srcDir, "README.md")
+	if err := os.WriteFile(src, []byte("# Hello\n\nBody text.\n"), 0o644); err != nil {
+		t.Fatalf("write source README: %v", err)
+	}
+
+	if err := copyZensicalReadme(src, destDir); err != nil {
+		t.Fatalf("copy README: %v", err)
+	}
+
+	output := filepath.Join(destDir, "index.md")
+	data, err := os.ReadFile(output)
+	if err != nil {
+		t.Fatalf("read output index.md: %v", err)
+	}
+
+	content := string(data)
+	if !strings.HasPrefix(content, "---\n") {
+		t.Fatalf("expected Hugo front matter at start, got: %q", content)
+	}
+	if !strings.Contains(content, "title: \"README\"") {
+		t.Fatalf("expected README title in front matter, got: %q", content)
+	}
+	if !strings.Contains(content, "Body text.") {
+		t.Fatalf("expected README body to be preserved, got: %q", content)
+	}
+}
+
+func TestResetOutputDir_ClearsExistingFiles(t *testing.T) {
+	dir := t.TempDir()
+
+	stale := filepath.Join(dir, "stale.md")
+	if err := os.WriteFile(stale, []byte("old content"), 0o644); err != nil {
+		t.Fatalf("write stale file: %v", err)
+	}
+
+	if err := resetOutputDir(dir); err != nil {
+		t.Fatalf("reset output dir: %v", err)
+	}
+
+	if _, err := os.Stat(stale); !os.IsNotExist(err) {
+		t.Fatalf("expected stale file to be removed, got err=%v", err)
+	}
+
+	info, err := os.Stat(dir)
+	if err != nil {
+		t.Fatalf("stat output dir: %v", err)
+	}
+	if !info.IsDir() {
+		t.Fatalf("expected output dir to exist as a directory")
+	}
+}
+
+func TestGoHelpOutputName_Good(t *testing.T) {
+	cases := map[string]string{
+		"core":        "go",
+		"core-admin":  "admin",
+		"core-api":    "api",
+		"go-example":  "go-example",
+		"custom-repo": "custom-repo",
+	}
+
+	for input, want := range cases {
+		if got := goHelpOutputName(input); got != want {
+			t.Fatalf("goHelpOutputName(%q) = %q, want %q", input, got, want)
+		}
+	}
+}

cmd/gitcmd/cmd_git.go

@@ -13,9 +13,9 @@
 package gitcmd
 
 import (
-	"forge.lthn.ai/core/go-devops/cmd/dev"
+	"dappco.re/go/core/devops/cmd/dev"
 	"forge.lthn.ai/core/cli/pkg/cli"
-	"forge.lthn.ai/core/go-i18n"
+	"dappco.re/go/core/i18n"
 )
 
 func init() {

cmd/setup/cmd_bootstrap.go

@@ -13,11 +13,11 @@ import (
 	"path/filepath"
 	"strings"
 
-	"forge.lthn.ai/core/agent/cmd/workspace"
-	"forge.lthn.ai/core/go-i18n"
-	coreio "forge.lthn.ai/core/go-io"
-	log "forge.lthn.ai/core/go-log"
-	"forge.lthn.ai/core/go-scm/repos"
+	"dappco.re/go/agent/cmd/workspace"
+	"dappco.re/go/core/i18n"
+	coreio "dappco.re/go/core/io"
+	log "dappco.re/go/core/log"
+	"dappco.re/go/core/scm/repos"
 )
 
 // runSetupOrchestrator decides between registry mode and bootstrap mode.

cmd/setup/cmd_ci.go

@@ -6,8 +6,8 @@ import (
 	"path/filepath"
 	"runtime"
 
+	coreio "dappco.re/go/core/io"
 	"forge.lthn.ai/core/cli/pkg/cli"
-	coreio "forge.lthn.ai/core/go-io"
 	"gopkg.in/yaml.v3"
 )
 
@@ -32,7 +32,7 @@ func DefaultCIConfig() *CIConfig {
 	return &CIConfig{
 		Tap:            "host-uk/tap",
 		Formula:        "core",
-		ScoopBucket:    "https://https://forge.lthn.ai/core/scoop-bucket.git",
+		ScoopBucket:    "https://forge.lthn.ai/core/scoop-bucket.git",
 		ChocolateyPkg:  "core-cli",
 		Repository:     "host-uk/core",
 		DefaultVersion: "dev",

cmd/setup/cmd_ci_test.go

@@ -0,0 +1,64 @@
+package setup
+
+import (
+	"bytes"
+	"io"
+	"os"
+	"testing"
+
+	"github.com/stretchr/testify/require"
+)
+
+func captureStdout(t *testing.T, fn func() error) (string, error) {
+	t.Helper()
+
+	oldStdout := os.Stdout
+	r, w, err := os.Pipe()
+	require.NoError(t, err)
+	defer func() {
+		_ = r.Close()
+	}()
+
+	os.Stdout = w
+	defer func() {
+		os.Stdout = oldStdout
+	}()
+
+	outC := make(chan string, 1)
+	errC := make(chan error, 1)
+
+	go func() {
+		var buf bytes.Buffer
+		_, copyErr := io.Copy(&buf, r)
+		errC <- copyErr
+		outC <- buf.String()
+	}()
+
+	runErr := fn()
+
+	require.NoError(t, w.Close())
+	require.NoError(t, <-errC)
+	out := <-outC
+
+	return out, runErr
+}
+
+func TestDefaultCIConfig_Good(t *testing.T) {
+	cfg := DefaultCIConfig()
+
+	require.Equal(t, "host-uk/tap", cfg.Tap)
+	require.Equal(t, "core", cfg.Formula)
+	require.Equal(t, "https://forge.lthn.ai/core/scoop-bucket.git", cfg.ScoopBucket)
+	require.Equal(t, "core-cli", cfg.ChocolateyPkg)
+	require.Equal(t, "host-uk/core", cfg.Repository)
+	require.Equal(t, "dev", cfg.DefaultVersion)
+}
+
+func TestOutputPowershellInstall_Good(t *testing.T) {
+	out, err := captureStdout(t, func() error {
+		return outputPowershellInstall(DefaultCIConfig(), "dev")
+	})
+	require.NoError(t, err)
+	require.Contains(t, out, `scoop bucket add host-uk $ScoopBucket`)
+	require.NotContains(t, out, `https://https://forge.lthn.ai/core/scoop-bucket.git`)
+}

cmd/setup/cmd_commands.go

@@ -25,12 +25,13 @@ package setup
 
 import (
 	"forge.lthn.ai/core/cli/pkg/cli"
-	"forge.lthn.ai/core/go-devops/locales"
-	"forge.lthn.ai/core/go-i18n"
+	"dappco.re/go/core/i18n"
+
+	_ "dappco.re/go/core/devops/locales"
 )
 
 func init() {
-	cli.RegisterCommands(AddSetupCommands, locales.FS)
+	cli.RegisterCommands(AddSetupCommands)
 }
 
 // AddSetupCommands registers the 'setup' command and all subcommands.

cmd/setup/cmd_github.go

@@ -22,10 +22,10 @@ import (
 	"path/filepath"
 
 	"forge.lthn.ai/core/cli/pkg/cli"
-	"forge.lthn.ai/core/go-i18n"
-	coreio "forge.lthn.ai/core/go-io"
-	log "forge.lthn.ai/core/go-log"
-	"forge.lthn.ai/core/go-scm/repos"
+	"dappco.re/go/core/i18n"
+	coreio "dappco.re/go/core/io"
+	log "dappco.re/go/core/log"
+	"dappco.re/go/core/scm/repos"
 )
 
 // GitHub command flags

cmd/setup/cmd_registry.go

@@ -13,12 +13,12 @@ import (
 	"path/filepath"
 	"strings"
 
-	"forge.lthn.ai/core/agent/cmd/workspace"
+	"dappco.re/go/agent/cmd/workspace"
+	"dappco.re/go/core/i18n"
+	coreio "dappco.re/go/core/io"
+	log "dappco.re/go/core/log"
+	"dappco.re/go/core/scm/repos"
 	"forge.lthn.ai/core/cli/pkg/cli"
-	"forge.lthn.ai/core/go-i18n"
-	coreio "forge.lthn.ai/core/go-io"
-	log "forge.lthn.ai/core/go-log"
-	"forge.lthn.ai/core/go-scm/repos"
 )
 
 // runRegistrySetup loads a registry from path and runs setup.

cmd/setup/cmd_repo.go

@@ -8,15 +8,42 @@ package setup
 
 import (
 	"fmt"
+	"net/url"
+	"os"
 	"os/exec"
 	"path/filepath"
 	"strings"
 
-	"forge.lthn.ai/core/go-i18n"
-	coreio "forge.lthn.ai/core/go-io"
-	log "forge.lthn.ai/core/go-log"
+	"dappco.re/go/core/i18n"
+	coreio "dappco.re/go/core/io"
+	log "dappco.re/go/core/log"
+	"forge.lthn.ai/core/cli/pkg/cli"
 )
 
+var repoDryRun bool
+
+// addRepoCommand adds the 'repo' subcommand to generate .core configuration.
+func addRepoCommand(parent *cli.Command) {
+	repoCmd := &cli.Command{
+		Use:   "repo",
+		Short: i18n.T("cmd.setup.repo.short"),
+		Long:  i18n.T("cmd.setup.repo.long"),
+		Args:  cli.ExactArgs(0),
+		RunE: func(cmd *cli.Command, args []string) error {
+			cwd, err := os.Getwd()
+			if err != nil {
+				return log.E("setup.repo", "failed to get working directory", err)
+			}
+
+			return runRepoSetup(cwd, repoDryRun)
+		},
+	}
+
+	repoCmd.Flags().BoolVar(&repoDryRun, "dry-run", false, i18n.T("cmd.setup.flag.dry_run"))
+
+	parent.AddCommand(repoCmd)
+}
+
 // runRepoSetup sets up the current repository with .core/ configuration.
 func runRepoSetup(repoPath string, dryRun bool) error {
 	fmt.Printf("%s %s: %s\n", dimStyle.Render(">>"), i18n.T("cmd.setup.repo.setting_up"), repoPath)
@@ -73,12 +100,12 @@ func detectProjectType(path string) string {
 	if coreio.Local.IsFile(filepath.Join(path, "go.mod")) {
 		return "go"
 	}
-	if coreio.Local.IsFile(filepath.Join(path, "composer.json")) {
-		return "php"
-	}
 	if coreio.Local.IsFile(filepath.Join(path, "package.json")) {
 		return "node"
 	}
+	if coreio.Local.IsFile(filepath.Join(path, "composer.json")) {
+		return "php"
+	}
 	return "unknown"
 }
 
@@ -268,23 +295,46 @@ func detectGitHubRepo() string {
 		return ""
 	}
 
-	url := strings.TrimSpace(string(output))
+	return parseGitHubRepoURL(strings.TrimSpace(string(output)))
+}
 
-	// Handle SSH format: git@github.com:owner/repo.git
-	if strings.HasPrefix(url, "git@github.com:") {
-		repo := strings.TrimPrefix(url, "git@github.com:")
-		repo = strings.TrimSuffix(repo, ".git")
-		return repo
+// parseGitHubRepoURL extracts owner/repo from a GitHub remote URL.
+//
+// Supports the common remote formats used by git:
+// - git@github.com:owner/repo.git
+// - ssh://git@github.com/owner/repo.git
+// - https://github.com/owner/repo.git
+// - git://github.com/owner/repo.git
+func parseGitHubRepoURL(remote string) string {
+	remote = strings.TrimSpace(remote)
+	if remote == "" {
+		return ""
 	}
 
-	// Handle HTTPS format: https://github.com/owner/repo.git
-	if strings.Contains(url, "github.com/") {
-		parts := strings.Split(url, "github.com/")
-		if len(parts) == 2 {
-			repo := strings.TrimSuffix(parts[1], ".git")
+	// Handle SSH-style scp syntax first.
+	if strings.HasPrefix(remote, "git@github.com:") {
+		repo := strings.TrimPrefix(remote, "git@github.com:")
+		return strings.TrimSuffix(repo, ".git")
+	}
+
+	if parsed, err := url.Parse(remote); err == nil && parsed.Host != "" {
+		host := strings.TrimPrefix(parsed.Hostname(), "www.")
+		if host == "github.com" {
+			repo := strings.TrimPrefix(parsed.Path, "/")
+			repo = strings.TrimSuffix(repo, ".git")
+			repo = strings.TrimSuffix(repo, "/")
 			return repo
 		}
 	}
 
+	if strings.Contains(remote, "github.com/") {
+		parts := strings.SplitN(remote, "github.com/", 2)
+		if len(parts) == 2 {
+			repo := strings.TrimPrefix(parts[1], "/")
+			repo = strings.TrimSuffix(repo, ".git")
+			return strings.TrimSuffix(repo, "/")
+		}
+	}
+
 	return ""
 }

cmd/setup/cmd_repo_test.go

@@ -0,0 +1,52 @@
+package setup
+
+import (
+	"os"
+	"path/filepath"
+	"testing"
+
+	"github.com/stretchr/testify/require"
+)
+
+func TestRunRepoSetup_CreatesCoreConfigs(t *testing.T) {
+	dir := t.TempDir()
+	require.NoError(t, os.WriteFile(filepath.Join(dir, "go.mod"), []byte("module example.com/test\n"), 0o644))
+
+	require.NoError(t, runRepoSetup(dir, false))
+
+	for _, name := range []string{"build.yaml", "release.yaml", "test.yaml"} {
+		path := filepath.Join(dir, ".core", name)
+		_, err := os.Stat(path)
+		require.NoErrorf(t, err, "expected %s to exist", path)
+	}
+}
+
+func TestDetectProjectType_PrefersPackageOverComposer(t *testing.T) {
+	dir := t.TempDir()
+	require.NoError(t, os.WriteFile(filepath.Join(dir, "package.json"), []byte("{}\n"), 0o644))
+	require.NoError(t, os.WriteFile(filepath.Join(dir, "composer.json"), []byte("{}\n"), 0o644))
+
+	require.Equal(t, "node", detectProjectType(dir))
+}
+
+func TestParseGitHubRepoURL_Good(t *testing.T) {
+	cases := map[string]string{
+		"git@github.com:owner/repo.git":            "owner/repo",
+		"ssh://git@github.com/owner/repo.git":      "owner/repo",
+		"https://github.com/owner/repo.git":        "owner/repo",
+		"git://github.com/owner/repo.git":          "owner/repo",
+		"https://www.github.com/owner/repo":        "owner/repo",
+		"git@github.com:owner/nested/repo.git":     "owner/nested/repo",
+		"ssh://git@github.com/owner/nested/repo/":  "owner/nested/repo",
+		"ssh://git@github.com:443/owner/repo.git":  "owner/repo",
+		"https://example.com/owner/repo.git":       "",
+		"git@bitbucket.org:owner/repo.git":         "",
+		"   ssh://git@github.com/owner/repo.git  ": "owner/repo",
+	}
+
+	for remote, expected := range cases {
+		t.Run(remote, func(t *testing.T) {
+			require.Equal(t, expected, parseGitHubRepoURL(remote))
+		})
+	}
+}

cmd/setup/cmd_setup.go

@@ -2,8 +2,8 @@
 package setup
 
 import (
+	"dappco.re/go/core/i18n"
 	"forge.lthn.ai/core/cli/pkg/cli"
-	"forge.lthn.ai/core/go-i18n"
 )
 
 // Style aliases from shared package
@@ -51,6 +51,7 @@ func initSetupFlags() {
 // AddSetupCommand adds the 'setup' command to the given parent command.
 func AddSetupCommand(root *cli.Command) {
 	initSetupFlags()
+	addRepoCommand(setupCmd)
 	addGitHubCommand(setupCmd)
 	root.AddCommand(setupCmd)
 }

cmd/setup/cmd_wizard.go

@@ -7,9 +7,9 @@ import (
 	"os"
 	"slices"
 
+	"dappco.re/go/core/i18n"
+	"dappco.re/go/core/scm/repos"
 	"forge.lthn.ai/core/cli/pkg/cli"
-	"forge.lthn.ai/core/go-i18n"
-	"forge.lthn.ai/core/go-scm/repos"
 	"golang.org/x/term"
 )
 
@@ -39,6 +39,9 @@ func promptProjectName(defaultName string) (string, error) {
 // runPackageWizard presents an interactive multi-select UI for package selection.
 func runPackageWizard(reg *repos.Registry, preselectedTypes []string) ([]string, error) {
 	allRepos := reg.List()
+	if len(preselectedTypes) > 0 {
+		allRepos = filterReposByTypes(allRepos, preselectedTypes)
+	}
 
 	// Build options
 	var options []string
@@ -57,6 +60,10 @@ func runPackageWizard(reg *repos.Registry, preselectedTypes []string) ([]string,
 		options = append(options, label)
 	}
 
+	if len(options) == 0 {
+		return nil, nil
+	}
+
 	fmt.Println(cli.TitleStyle.Render(i18n.T("cmd.setup.wizard.package_selection")))
 	fmt.Println(i18n.T("cmd.setup.wizard.selection_hint"))
 
@@ -87,6 +94,33 @@ func runPackageWizard(reg *repos.Registry, preselectedTypes []string) ([]string,
 	return selected, nil
 }
 
+func filterReposByTypes(repoList []*repos.Repo, allowedTypes []string) []*repos.Repo {
+	if len(allowedTypes) == 0 {
+		return repoList
+	}
+
+	allowed := make(map[string]struct{}, len(allowedTypes))
+	for _, repoType := range allowedTypes {
+		if repoType == "" {
+			continue
+		}
+		allowed[repoType] = struct{}{}
+	}
+
+	if len(allowed) == 0 {
+		return repoList
+	}
+
+	filtered := make([]*repos.Repo, 0, len(repoList))
+	for _, repo := range repoList {
+		if _, ok := allowed[repo.Type]; ok {
+			filtered = append(filtered, repo)
+		}
+	}
+
+	return filtered
+}
+
 // confirmClone asks for confirmation before cloning.
 func confirmClone(count int, target string) (bool, error) {
 	confirmed := cli.Confirm(i18n.T("cmd.setup.wizard.confirm_clone", map[string]any{"Count": count, "Target": target}))

cmd/setup/cmd_wizard_test.go

@@ -0,0 +1,34 @@
+package setup
+
+import (
+	"testing"
+
+	"dappco.re/go/core/scm/repos"
+	"github.com/stretchr/testify/require"
+)
+
+func TestFilterReposByTypes_Good(t *testing.T) {
+	reposList := []*repos.Repo{
+		{Name: "foundation-a", Type: "foundation"},
+		{Name: "module-a", Type: "module"},
+		{Name: "product-a", Type: "product"},
+	}
+
+	filtered := filterReposByTypes(reposList, []string{"module", "product"})
+
+	require.Len(t, filtered, 2)
+	require.Equal(t, "module-a", filtered[0].Name)
+	require.Equal(t, "product-a", filtered[1].Name)
+}
+
+func TestFilterReposByTypes_EmptyFilter_Good(t *testing.T) {
+	reposList := []*repos.Repo{
+		{Name: "foundation-a", Type: "foundation"},
+		{Name: "module-a", Type: "module"},
+	}
+
+	filtered := filterReposByTypes(reposList, nil)
+
+	require.Len(t, filtered, 2)
+	require.Equal(t, reposList, filtered)
+}

cmd/setup/github_config.go

@@ -12,8 +12,8 @@ import (
 	"regexp"
 	"strings"
 
-	coreio "forge.lthn.ai/core/go-io"
-	log "forge.lthn.ai/core/go-log"
+	coreio "dappco.re/go/core/io"
+	log "dappco.re/go/core/log"
 	"gopkg.in/yaml.v3"
 )
 

cmd/setup/github_diff.go

@@ -9,7 +9,7 @@ import (
 	"strings"
 
 	"forge.lthn.ai/core/cli/pkg/cli"
-	"forge.lthn.ai/core/go-i18n"
+	"dappco.re/go/core/i18n"
 )
 
 // ChangeType indicates the type of change being made.

cmd/setup/github_protection.go

@@ -13,7 +13,7 @@ import (
 	"strings"
 
 	"forge.lthn.ai/core/cli/pkg/cli"
-	log "forge.lthn.ai/core/go-log"
+	log "dappco.re/go/core/log"
 )
 
 // GitHubBranchProtection represents branch protection rules from the GitHub API.

cmd/setup/github_security.go

@@ -15,7 +15,7 @@ import (
 	"strings"
 
 	"forge.lthn.ai/core/cli/pkg/cli"
-	log "forge.lthn.ai/core/go-log"
+	log "dappco.re/go/core/log"
 )
 
 // GitHubSecurityStatus represents the security settings status of a repository.

cmd/setup/github_webhooks.go

@@ -13,7 +13,7 @@ import (
 	"strings"
 
 	"forge.lthn.ai/core/cli/pkg/cli"
-	log "forge.lthn.ai/core/go-log"
+	log "dappco.re/go/core/log"
 )
 
 // GitHubWebhook represents a webhook as returned by the GitHub API.

deploy/coolify/client.go

@@ -3,13 +3,12 @@ package coolify
 import (
 	"context"
 	"encoding/json"
-	"fmt"
 	"os"
 	"sync"
 
-	log "forge.lthn.ai/core/go-log"
+	log "dappco.re/go/core/log"
 
-	"forge.lthn.ai/core/go-devops/deploy/python"
+	"dappco.re/go/core/devops/deploy/python"
 )
 
 // Client wraps the Python CoolifyClient for Go usage.
@@ -78,7 +77,7 @@ func (c *Client) Call(ctx context.Context, operationID string, params map[string
 	}
 	output, err := python.RunScript(ctx, script)
 	if err != nil {
-		return nil, log.E("coolify", fmt.Sprintf("API call %s failed", operationID), err)
+		return nil, log.E("coolify", "API call "+operationID+" failed", err)
 	}
 
 	// Parse JSON result
@@ -89,7 +88,7 @@ func (c *Client) Call(ctx context.Context, operationID string, params map[string
 		if err2 := json.Unmarshal([]byte(output), &arrResult); err2 == nil {
 			return map[string]any{"result": arrResult}, nil
 		}
-		return nil, log.E("coolify", fmt.Sprintf("failed to parse response (output: %s)", output), err)
+		return nil, log.E("coolify", "failed to parse response (output: "+output+")", err)
 	}
 
 	return result, nil

deploy/python/python.go

@@ -9,7 +9,7 @@ import (
 	"path/filepath"
 	"sync"
 
-	"forge.lthn.ai/core/go-log"
+	"dappco.re/go/core/log"
 	"github.com/kluctl/go-embed-python/python"
 )
 
@@ -63,9 +63,9 @@ func RunScript(ctx context.Context, code string, args ...string) (string, error)
 	// Run with context
 	output, err := cmd.Output()
 	if err != nil {
-		// Try to get stderr for better error message
+		// Include stderr in the error message for better diagnostics
 		if exitErr, ok := err.(*exec.ExitError); ok {
-			return "", log.E("python", "run script", fmt.Errorf("%w: %s", err, string(exitErr.Stderr)))
+			return "", log.E("python", "run script: "+string(exitErr.Stderr), err)
 		}
 		return "", log.E("python", "run script", err)
 	}
@@ -87,7 +87,7 @@ func RunModule(ctx context.Context, module string, args ...string) (string, erro
 
 	output, err := cmd.Output()
 	if err != nil {
-		return "", log.E("python", fmt.Sprintf("run module %s", module), err)
+		return "", log.E("python", "run module "+module, err)
 	}
 
 	return string(output), nil

devkit/coverage.go

@@ -0,0 +1,323 @@
+package devkit
+
+import (
+	"encoding/json"
+	"fmt"
+	"os"
+	"path"
+	"path/filepath"
+	"regexp"
+	"sort"
+	"strconv"
+	"strings"
+	"time"
+)
+
+// CoveragePackage describes coverage for a single package or directory.
+type CoveragePackage struct {
+	Name              string  `json:"name"`
+	CoveredStatements int     `json:"covered_statements"`
+	TotalStatements   int     `json:"total_statements"`
+	Coverage          float64 `json:"coverage"`
+}
+
+// CoverageSnapshot captures a point-in-time view of coverage across packages.
+type CoverageSnapshot struct {
+	CapturedAt time.Time         `json:"captured_at"`
+	Packages   []CoveragePackage `json:"packages"`
+	Total      CoveragePackage   `json:"total"`
+}
+
+// CoverageDelta describes how a single package changed between snapshots.
+type CoverageDelta struct {
+	Name     string  `json:"name"`
+	Previous float64 `json:"previous"`
+	Current  float64 `json:"current"`
+	Delta    float64 `json:"delta"`
+}
+
+// CoverageComparison summarises the differences between two coverage snapshots.
+type CoverageComparison struct {
+	Regressions  []CoverageDelta   `json:"regressions"`
+	Improvements []CoverageDelta   `json:"improvements"`
+	NewPackages  []CoveragePackage `json:"new_packages"`
+	Removed      []CoveragePackage `json:"removed"`
+	TotalDelta   float64           `json:"total_delta"`
+}
+
+// CoverageStore persists coverage snapshots to disk.
+type CoverageStore struct {
+	path string
+}
+
+type coverageBucket struct {
+	covered int
+	total   int
+}
+
+var coverProfileLineRE = regexp.MustCompile(`^(.+?):\d+\.\d+,\d+\.\d+\s+(\d+)\s+(\d+)$`)
+var coverOutputLineRE = regexp.MustCompile(`^(?:ok|\?)?\s*(\S+)\s+.*coverage:\s+([0-9]+(?:\.[0-9]+)?)% of statements$`)
+
+// NewCoverageStore creates a store backed by the given file path.
+func NewCoverageStore(path string) *CoverageStore {
+	return &CoverageStore{path: path}
+}
+
+// Append stores a new snapshot, creating the parent directory if needed.
+func (s *CoverageStore) Append(snapshot CoverageSnapshot) error {
+	if err := os.MkdirAll(filepath.Dir(s.path), 0o755); err != nil {
+		return err
+	}
+
+	snapshots, err := s.Load()
+	if err != nil {
+		return err
+	}
+
+	snapshot.CapturedAt = snapshot.CapturedAt.UTC()
+	snapshots = append(snapshots, snapshot)
+
+	data, err := json.MarshalIndent(snapshots, "", "  ")
+	if err != nil {
+		return err
+	}
+
+	return os.WriteFile(s.path, data, 0o600)
+}
+
+// Load reads all snapshots from disk.
+func (s *CoverageStore) Load() ([]CoverageSnapshot, error) {
+	data, err := os.ReadFile(s.path)
+	if err != nil {
+		if os.IsNotExist(err) {
+			return nil, nil
+		}
+		return nil, err
+	}
+	if len(strings.TrimSpace(string(data))) == 0 {
+		return nil, nil
+	}
+
+	var snapshots []CoverageSnapshot
+	if err := json.Unmarshal(data, &snapshots); err != nil {
+		return nil, err
+	}
+	return snapshots, nil
+}
+
+// Latest returns the newest snapshot in the store.
+func (s *CoverageStore) Latest() (CoverageSnapshot, error) {
+	snapshots, err := s.Load()
+	if err != nil {
+		return CoverageSnapshot{}, err
+	}
+	if len(snapshots) == 0 {
+		return CoverageSnapshot{}, fmt.Errorf("coverage store is empty")
+	}
+	return snapshots[len(snapshots)-1], nil
+}
+
+// ParseCoverProfile parses go test -coverprofile output into a coverage snapshot.
+func ParseCoverProfile(data string) (CoverageSnapshot, error) {
+	if strings.TrimSpace(data) == "" {
+		return CoverageSnapshot{}, nil
+	}
+
+	packages := make(map[string]*coverageBucket)
+	total := coverageBucket{}
+
+	for _, rawLine := range strings.Split(strings.TrimSpace(data), "\n") {
+		line := strings.TrimSpace(rawLine)
+		if line == "" || strings.HasPrefix(line, "mode:") {
+			continue
+		}
+
+		match := coverProfileLineRE.FindStringSubmatch(line)
+		if match == nil {
+			return CoverageSnapshot{}, fmt.Errorf("invalid cover profile line: %s", line)
+		}
+
+		file := filepath.ToSlash(match[1])
+		stmts, err := strconv.Atoi(match[2])
+		if err != nil {
+			return CoverageSnapshot{}, err
+		}
+		count, err := strconv.Atoi(match[3])
+		if err != nil {
+			return CoverageSnapshot{}, err
+		}
+
+		dir := path.Dir(file)
+		if dir == "" {
+			dir = "."
+		}
+
+		b := packages[dir]
+		if b == nil {
+			b = &coverageBucket{}
+			packages[dir] = b
+		}
+		b.total += stmts
+		total.total += stmts
+		if count > 0 {
+			b.covered += stmts
+			total.covered += stmts
+		}
+	}
+
+	return snapshotFromBuckets(packages, total), nil
+}
+
+// ParseCoverOutput parses human-readable go test -cover output into a snapshot.
+func ParseCoverOutput(output string) (CoverageSnapshot, error) {
+	if strings.TrimSpace(output) == "" {
+		return CoverageSnapshot{}, nil
+	}
+
+	packages := make(map[string]*CoveragePackage)
+	var total CoveragePackage
+
+	for _, rawLine := range strings.Split(strings.TrimSpace(output), "\n") {
+		line := strings.TrimSpace(rawLine)
+		if line == "" {
+			continue
+		}
+
+		match := coverOutputLineRE.FindStringSubmatch(line)
+		if match == nil {
+			continue
+		}
+
+		name := match[1]
+		coverage, err := strconv.ParseFloat(match[2], 64)
+		if err != nil {
+			return CoverageSnapshot{}, err
+		}
+
+		pkg := &CoveragePackage{
+			Name:     name,
+			Coverage: coverage,
+		}
+		packages[name] = pkg
+
+		total.Coverage += coverage
+		total.TotalStatements++
+	}
+
+	if len(packages) == 0 {
+		return CoverageSnapshot{}, nil
+	}
+
+	snapshot := CoverageSnapshot{
+		CapturedAt: time.Now().UTC(),
+		Packages:   make([]CoveragePackage, 0, len(packages)),
+	}
+
+	for _, pkg := range packages {
+		snapshot.Packages = append(snapshot.Packages, *pkg)
+	}
+	sort.Slice(snapshot.Packages, func(i, j int) bool {
+		return snapshot.Packages[i].Name < snapshot.Packages[j].Name
+	})
+
+	snapshot.Total.Name = "total"
+	if total.TotalStatements > 0 {
+		snapshot.Total.Coverage = total.Coverage / float64(total.TotalStatements)
+	}
+	return snapshot, nil
+}
+
+// CompareCoverage compares two snapshots and reports regressions and improvements.
+func CompareCoverage(previous, current CoverageSnapshot) CoverageComparison {
+	prevPackages := coverageMap(previous.Packages)
+	currPackages := coverageMap(current.Packages)
+
+	comparison := CoverageComparison{
+		NewPackages: make([]CoveragePackage, 0),
+		Removed:     make([]CoveragePackage, 0),
+	}
+
+	for name, curr := range currPackages {
+		prev, ok := prevPackages[name]
+		if !ok {
+			comparison.NewPackages = append(comparison.NewPackages, curr)
+			continue
+		}
+
+		delta := curr.Coverage - prev.Coverage
+		change := CoverageDelta{
+			Name:     name,
+			Previous: prev.Coverage,
+			Current:  curr.Coverage,
+			Delta:    delta,
+		}
+		if delta < 0 {
+			comparison.Regressions = append(comparison.Regressions, change)
+		} else if delta > 0 {
+			comparison.Improvements = append(comparison.Improvements, change)
+		}
+	}
+
+	for name, prev := range prevPackages {
+		if _, ok := currPackages[name]; !ok {
+			comparison.Removed = append(comparison.Removed, prev)
+		}
+	}
+
+	sortCoverageComparison(&comparison)
+	comparison.TotalDelta = current.Total.Coverage - previous.Total.Coverage
+	return comparison
+}
+
+func snapshotFromBuckets(packages map[string]*coverageBucket, total coverageBucket) CoverageSnapshot {
+	snapshot := CoverageSnapshot{
+		CapturedAt: time.Now().UTC(),
+		Packages:   make([]CoveragePackage, 0, len(packages)),
+	}
+
+	for name, b := range packages {
+		snapshot.Packages = append(snapshot.Packages, coverageAverage(name, b.covered, b.total))
+	}
+
+	sort.Slice(snapshot.Packages, func(i, j int) bool {
+		return snapshot.Packages[i].Name < snapshot.Packages[j].Name
+	})
+
+	snapshot.Total = coverageAverage("total", total.covered, total.total)
+	return snapshot
+}
+
+func coverageAverage(name string, covered, total int) CoveragePackage {
+	pkg := CoveragePackage{
+		Name:              name,
+		CoveredStatements: covered,
+		TotalStatements:   total,
+	}
+	if total > 0 {
+		pkg.Coverage = float64(covered) / float64(total) * 100
+	}
+	return pkg
+}
+
+func coverageMap(packages []CoveragePackage) map[string]CoveragePackage {
+	result := make(map[string]CoveragePackage, len(packages))
+	for _, pkg := range packages {
+		result[pkg.Name] = pkg
+	}
+	return result
+}
+
+func sortCoverageComparison(comparison *CoverageComparison) {
+	sort.Slice(comparison.Regressions, func(i, j int) bool {
+		return comparison.Regressions[i].Name < comparison.Regressions[j].Name
+	})
+	sort.Slice(comparison.Improvements, func(i, j int) bool {
+		return comparison.Improvements[i].Name < comparison.Improvements[j].Name
+	})
+	sort.Slice(comparison.NewPackages, func(i, j int) bool {
+		return comparison.NewPackages[i].Name < comparison.NewPackages[j].Name
+	})
+	sort.Slice(comparison.Removed, func(i, j int) bool {
+		return comparison.Removed[i].Name < comparison.Removed[j].Name
+	})
+}

devkit/coverage_test.go

@@ -0,0 +1,108 @@
+package devkit
+
+import (
+	"os"
+	"path/filepath"
+	"testing"
+	"time"
+
+	"github.com/stretchr/testify/require"
+)
+
+func TestParseCoverProfile_Good(t *testing.T) {
+	snapshot, err := ParseCoverProfile(`mode: set
+github.com/acme/project/foo/foo.go:1.1,3.1 2 1
+github.com/acme/project/foo/bar.go:1.1,4.1 3 0
+github.com/acme/project/baz/baz.go:1.1,2.1 4 4
+`)
+	require.NoError(t, err)
+	require.Len(t, snapshot.Packages, 2)
+	require.Equal(t, "github.com/acme/project/baz", snapshot.Packages[0].Name)
+	require.Equal(t, "github.com/acme/project/foo", snapshot.Packages[1].Name)
+	require.InDelta(t, 100.0, snapshot.Packages[0].Coverage, 0.0001)
+	require.InDelta(t, 40.0, snapshot.Packages[1].Coverage, 0.0001)
+	require.InDelta(t, 66.6667, snapshot.Total.Coverage, 0.0001)
+}
+
+func TestParseCoverProfile_Bad(t *testing.T) {
+	_, err := ParseCoverProfile("mode: set\nbroken line")
+	require.Error(t, err)
+}
+
+func TestParseCoverOutput_Good(t *testing.T) {
+	snapshot, err := ParseCoverOutput(`ok  	github.com/acme/project/foo	0.123s	coverage: 75.0% of statements
+ok  	github.com/acme/project/bar	0.456s	coverage: 50.0% of statements
+`)
+	require.NoError(t, err)
+	require.Len(t, snapshot.Packages, 2)
+	require.Equal(t, "github.com/acme/project/bar", snapshot.Packages[0].Name)
+	require.Equal(t, "github.com/acme/project/foo", snapshot.Packages[1].Name)
+	require.InDelta(t, 62.5, snapshot.Total.Coverage, 0.0001)
+}
+
+func TestCompareCoverage_Good(t *testing.T) {
+	previous := CoverageSnapshot{
+		Packages: []CoveragePackage{
+			{Name: "pkg/a", Coverage: 90.0},
+			{Name: "pkg/b", Coverage: 80.0},
+		},
+		Total: CoveragePackage{Name: "total", Coverage: 85.0},
+	}
+	current := CoverageSnapshot{
+		Packages: []CoveragePackage{
+			{Name: "pkg/a", Coverage: 87.5},
+			{Name: "pkg/b", Coverage: 82.0},
+			{Name: "pkg/c", Coverage: 100.0},
+		},
+		Total: CoveragePackage{Name: "total", Coverage: 89.0},
+	}
+
+	comparison := CompareCoverage(previous, current)
+	require.Len(t, comparison.Regressions, 1)
+	require.Len(t, comparison.Improvements, 1)
+	require.Len(t, comparison.NewPackages, 1)
+	require.Empty(t, comparison.Removed)
+	require.Equal(t, "pkg/a", comparison.Regressions[0].Name)
+	require.Equal(t, "pkg/b", comparison.Improvements[0].Name)
+	require.Equal(t, "pkg/c", comparison.NewPackages[0].Name)
+	require.InDelta(t, 4.0, comparison.TotalDelta, 0.0001)
+}
+
+func TestCoverageStore_Good(t *testing.T) {
+	dir := t.TempDir()
+	store := NewCoverageStore(filepath.Join(dir, "coverage.json"))
+
+	first := CoverageSnapshot{
+		CapturedAt: time.Date(2026, 4, 1, 10, 0, 0, 0, time.UTC),
+		Packages:   []CoveragePackage{{Name: "pkg/a", Coverage: 80.0}},
+		Total:      CoveragePackage{Name: "total", Coverage: 80.0},
+	}
+	second := CoverageSnapshot{
+		CapturedAt: time.Date(2026, 4, 1, 11, 0, 0, 0, time.UTC),
+		Packages:   []CoveragePackage{{Name: "pkg/a", Coverage: 82.5}},
+		Total:      CoveragePackage{Name: "total", Coverage: 82.5},
+	}
+
+	require.NoError(t, store.Append(first))
+	require.NoError(t, store.Append(second))
+
+	snapshots, err := store.Load()
+	require.NoError(t, err)
+	require.Len(t, snapshots, 2)
+	require.Equal(t, first.CapturedAt, snapshots[0].CapturedAt)
+	require.Equal(t, second.CapturedAt, snapshots[1].CapturedAt)
+
+	latest, err := store.Latest()
+	require.NoError(t, err)
+	require.Equal(t, second.CapturedAt, latest.CapturedAt)
+}
+
+func TestCoverageStore_Bad(t *testing.T) {
+	dir := t.TempDir()
+	path := filepath.Join(dir, "coverage.json")
+	require.NoError(t, os.WriteFile(path, []byte("{"), 0o600))
+
+	store := NewCoverageStore(path)
+	_, err := store.Load()
+	require.Error(t, err)
+}

devkit/scan_secrets.go

@@ -0,0 +1,109 @@
+package devkit
+
+import (
+	"context"
+	"encoding/csv"
+	"os/exec"
+	"strconv"
+	"strings"
+)
+
+var scanSecretsRunner = runGitleaksDetect
+
+// ScanSecrets runs gitleaks against the supplied directory and parses the CSV report.
+func ScanSecrets(dir string) ([]Finding, error) {
+	output, err := scanSecretsRunner(dir)
+	findings, parseErr := parseGitleaksCSV(output)
+	if parseErr != nil {
+		return nil, parseErr
+	}
+	if err != nil && len(findings) == 0 {
+		return nil, err
+	}
+	return findings, nil
+}
+
+func runGitleaksDetect(dir string) ([]byte, error) {
+	bin, err := exec.LookPath("gitleaks")
+	if err != nil {
+		return nil, err
+	}
+
+	cmd := exec.CommandContext(context.Background(), bin,
+		"detect",
+		"--no-banner",
+		"--no-color",
+		"--no-git",
+		"--source", dir,
+		"--report-format", "csv",
+		"--report-path", "-",
+	)
+
+	return cmd.Output()
+}
+
+func parseGitleaksCSV(data []byte) ([]Finding, error) {
+	if len(data) == 0 {
+		return nil, nil
+	}
+
+	reader := csv.NewReader(strings.NewReader(string(data)))
+	reader.FieldsPerRecord = -1
+
+	rows, err := reader.ReadAll()
+	if err != nil {
+		return nil, err
+	}
+	if len(rows) == 0 {
+		return nil, nil
+	}
+
+	header := make(map[string]int, len(rows[0]))
+	for idx, name := range rows[0] {
+		header[normalizeCSVHeader(name)] = idx
+	}
+
+	var findings []Finding
+	for _, row := range rows[1:] {
+		finding := Finding{
+			Path:    csvField(row, header, "file", "path"),
+			Line:    csvIntField(row, header, "startline", "line"),
+			Column:  csvIntField(row, header, "startcolumn", "column"),
+			Rule:    csvField(row, header, "ruleid", "rule", "name"),
+			Snippet: csvField(row, header, "match", "secret", "description", "message"),
+		}
+
+		if finding.Snippet == "" {
+			finding.Snippet = csvField(row, header, "filename")
+		}
+		findings = append(findings, finding)
+	}
+
+	return findings, nil
+}
+
+func normalizeCSVHeader(name string) string {
+	return strings.ToLower(strings.TrimSpace(strings.ReplaceAll(strings.ReplaceAll(name, "_", ""), " ", "")))
+}
+
+func csvField(row []string, header map[string]int, names ...string) string {
+	for _, name := range names {
+		if idx, ok := header[name]; ok && idx < len(row) {
+			return strings.TrimSpace(row[idx])
+		}
+	}
+	return ""
+}
+
+func csvIntField(row []string, header map[string]int, names ...string) int {
+	value := csvField(row, header, names...)
+	if value == "" {
+		return 0
+	}
+
+	n, err := strconv.Atoi(value)
+	if err != nil {
+		return 0
+	}
+	return n
+}

devkit/scan_secrets_test.go

@@ -0,0 +1,64 @@
+package devkit
+
+import (
+	"errors"
+	"testing"
+
+	"github.com/stretchr/testify/require"
+)
+
+func TestScanSecrets_Good(t *testing.T) {
+	originalRunner := scanSecretsRunner
+	t.Cleanup(func() {
+		scanSecretsRunner = originalRunner
+	})
+
+	scanSecretsRunner = func(dir string) ([]byte, error) {
+		require.Equal(t, "/tmp/project", dir)
+		return []byte(`RuleID,File,StartLine,StartColumn,Description,Match
+github-token,config.yml,12,4,GitHub token detected,ghp_exampletoken1234567890
+aws-access-key-id,creds.txt,7,1,AWS access key detected,AKIA1234567890ABCDEF
+`), nil
+	}
+
+	findings, err := ScanSecrets("/tmp/project")
+	require.NoError(t, err)
+	require.Len(t, findings, 2)
+
+	require.Equal(t, "github-token", findings[0].Rule)
+	require.Equal(t, "config.yml", findings[0].Path)
+	require.Equal(t, 12, findings[0].Line)
+	require.Equal(t, 4, findings[0].Column)
+	require.Equal(t, "ghp_exampletoken1234567890", findings[0].Snippet)
+
+	require.Equal(t, "aws-access-key-id", findings[1].Rule)
+	require.Equal(t, "creds.txt", findings[1].Path)
+	require.Equal(t, 7, findings[1].Line)
+	require.Equal(t, 1, findings[1].Column)
+	require.Equal(t, "AKIA1234567890ABCDEF", findings[1].Snippet)
+}
+
+func TestScanSecrets_ReportsFindingsOnExitError(t *testing.T) {
+	originalRunner := scanSecretsRunner
+	t.Cleanup(func() {
+		scanSecretsRunner = originalRunner
+	})
+
+	scanSecretsRunner = func(dir string) ([]byte, error) {
+		return []byte(`rule_id,file,start_line,start_column,description,match
+token,test.txt,3,2,Token detected,secret-value
+`), errors.New("exit status 1")
+	}
+
+	findings, err := ScanSecrets("/tmp/project")
+	require.NoError(t, err)
+	require.Len(t, findings, 1)
+	require.Equal(t, "token", findings[0].Rule)
+	require.Equal(t, 3, findings[0].Line)
+	require.Equal(t, 2, findings[0].Column)
+}
+
+func TestParseGitleaksCSV_Bad(t *testing.T) {
+	_, err := parseGitleaksCSV([]byte("rule_id,file,start_line\nunterminated,\"broken"))
+	require.Error(t, err)
+}

devkit/secret.go

@@ -0,0 +1,154 @@
+package devkit
+
+import (
+	"bufio"
+	"bytes"
+	"io/fs"
+	"os"
+	"path/filepath"
+	"regexp"
+	"strings"
+)
+
+// Finding describes a secret-like match discovered while scanning source files.
+type Finding struct {
+	Path    string `json:"path"`
+	Line    int    `json:"line"`
+	Column  int    `json:"column"`
+	Rule    string `json:"rule"`
+	Snippet string `json:"snippet"`
+}
+
+var secretRules = []struct {
+	name  string
+	match *regexp.Regexp
+}{
+	{
+		name:  "aws-access-key-id",
+		match: regexp.MustCompile(`\bAKIA[0-9A-Z]{16}\b`),
+	},
+	{
+		name:  "github-token",
+		match: regexp.MustCompile(`\bgh[pousr]_[A-Za-z0-9_]{20,}\b`),
+	},
+	{
+		name:  "generic-secret-assignment",
+		match: regexp.MustCompile(`(?i)\b(?:api[_-]?key|client[_-]?secret|secret|token|password)\b\s*[:=]\s*["']?([A-Za-z0-9._\-+/]{8,})["']?`),
+	},
+}
+
+var skipDirs = map[string]struct{}{
+	".git":         {},
+	"vendor":       {},
+	"node_modules": {},
+}
+
+var textExts = map[string]struct{}{
+	".go":     {},
+	".md":     {},
+	".txt":    {},
+	".json":   {},
+	".yaml":   {},
+	".yml":    {},
+	".toml":   {},
+	".env":    {},
+	".ini":    {},
+	".cfg":    {},
+	".conf":   {},
+	".sh":     {},
+	".tf":     {},
+	".tfvars": {},
+}
+
+// ScanDir recursively scans a directory for secret-like patterns.
+func ScanDir(root string) ([]Finding, error) {
+	var findings []Finding
+
+	if err := filepath.WalkDir(root, func(path string, d fs.DirEntry, err error) error {
+		if err != nil {
+			return err
+		}
+
+		name := d.Name()
+		if d.IsDir() {
+			if _, ok := skipDirs[name]; ok || strings.HasPrefix(name, ".") && path != root {
+				return filepath.SkipDir
+			}
+			return nil
+		}
+
+		if !isTextCandidate(name) {
+			return nil
+		}
+
+		fileFindings, err := scanFile(path)
+		if err != nil {
+			return err
+		}
+		findings = append(findings, fileFindings...)
+		return nil
+	}); err != nil {
+		return nil, err
+	}
+
+	return findings, nil
+}
+
+func scanFile(path string) ([]Finding, error) {
+	data, err := fileRead(path)
+	if err != nil {
+		return nil, err
+	}
+	if len(data) == 0 || bytes.IndexByte(data, 0) >= 0 {
+		return nil, nil
+	}
+
+	var findings []Finding
+	scanner := bufio.NewScanner(bytes.NewReader(data))
+	lineNo := 0
+	for scanner.Scan() {
+		lineNo++
+		line := scanner.Text()
+		matchedSpecific := false
+		for _, rule := range secretRules {
+			if rule.name == "generic-secret-assignment" && matchedSpecific {
+				continue
+			}
+			if loc := rule.match.FindStringIndex(line); loc != nil {
+				findings = append(findings, Finding{
+					Path:    path,
+					Line:    lineNo,
+					Column:  loc[0] + 1,
+					Rule:    rule.name,
+					Snippet: strings.TrimSpace(line),
+				})
+				if rule.name != "generic-secret-assignment" {
+					matchedSpecific = true
+				}
+			}
+		}
+	}
+	if err := scanner.Err(); err != nil {
+		return nil, err
+	}
+
+	return findings, nil
+}
+
+func isTextCandidate(name string) bool {
+	if ext := strings.ToLower(filepath.Ext(name)); ext != "" {
+		_, ok := textExts[ext]
+		return ok
+	}
+	// Allow extension-less files such as Makefile, LICENSE, and .env.
+	switch name {
+	case "Makefile", "Dockerfile", "LICENSE", "README", "CLAUDE.md":
+		return true
+	}
+	return strings.HasPrefix(name, ".")
+}
+
+// fileRead is factored out for tests.
+var fileRead = func(path string) ([]byte, error) {
+	return os.ReadFile(path)
+}

devkit/secret_test.go

@@ -0,0 +1,57 @@
+package devkit
+
+import (
+	"os"
+	"path/filepath"
+	"testing"
+
+	"github.com/stretchr/testify/require"
+)
+
+func TestScanDir_Good(t *testing.T) {
+	root := t.TempDir()
+
+	require.NoError(t, os.WriteFile(filepath.Join(root, "config.yml"), []byte(`
+api_key: "ghp_abcdefghijklmnopqrstuvwxyz1234"
+`), 0o600))
+
+	require.NoError(t, os.Mkdir(filepath.Join(root, "nested"), 0o755))
+	require.NoError(t, os.WriteFile(filepath.Join(root, "nested", "creds.txt"), []byte("access_key = AKIA1234567890ABCDEF\n"), 0o600))
+
+	findings, err := ScanDir(root)
+	require.NoError(t, err)
+	require.Len(t, findings, 2)
+
+	require.Equal(t, "github-token", findings[0].Rule)
+	require.Equal(t, 2, findings[0].Line)
+	require.Equal(t, "config.yml", filepath.Base(findings[0].Path))
+
+	require.Equal(t, "aws-access-key-id", findings[1].Rule)
+	require.Equal(t, 1, findings[1].Line)
+	require.Equal(t, "creds.txt", filepath.Base(findings[1].Path))
+}
+
+func TestScanDir_SkipsBinaryAndIgnoredDirs(t *testing.T) {
+	root := t.TempDir()
+
+	require.NoError(t, os.Mkdir(filepath.Join(root, ".git"), 0o755))
+	require.NoError(t, os.WriteFile(filepath.Join(root, ".git", "config"), []byte("token=ghp_abcdefghijklmnopqrstuvwxyz1234"), 0o600))
+	require.NoError(t, os.WriteFile(filepath.Join(root, "blob.bin"), []byte{0, 1, 2, 3, 4}, 0o600))
+
+	findings, err := ScanDir(root)
+	require.NoError(t, err)
+	require.Empty(t, findings)
+}
+
+func TestScanDir_ReportsGenericAssignments(t *testing.T) {
+	root := t.TempDir()
+
+	require.NoError(t, os.WriteFile(filepath.Join(root, "secrets.env"), []byte("client_secret: abcdefghijklmnop\n"), 0o600))
+
+	findings, err := ScanDir(root)
+	require.NoError(t, err)
+	require.Len(t, findings, 1)
+	require.Equal(t, "generic-secret-assignment", findings[0].Rule)
+	require.Equal(t, 1, findings[0].Line)
+	require.Equal(t, 1, findings[0].Column)
+}

go.mod

@@ -1,17 +1,17 @@
-module forge.lthn.ai/core/go-devops
+module dappco.re/go/core/devops
 
 go 1.26.0
 
 require (
 	code.gitea.io/sdk/gitea v0.23.2
-	forge.lthn.ai/core/agent v0.3.3
-	forge.lthn.ai/core/cli v0.3.6
-	forge.lthn.ai/core/go v0.3.2
-	forge.lthn.ai/core/go-container v0.1.6
-	forge.lthn.ai/core/go-i18n v0.1.7
-	forge.lthn.ai/core/go-io v0.1.6
-	forge.lthn.ai/core/go-log v0.0.4
-	forge.lthn.ai/core/go-scm v0.3.5
+	dappco.re/go/core v0.4.7
+	dappco.re/go/agent v0.3.3
+	dappco.re/go/core/i18n v0.1.7
+	dappco.re/go/core/io v0.1.7
+	dappco.re/go/core/log v0.0.4
+	dappco.re/go/core/scm v0.3.6
+	dappco.re/go/core/cli v0.3.7
+	dappco.re/go/core/container v0.1.7
 	github.com/kluctl/go-embed-python v0.0.0-3.13.1-20241219-1
 	github.com/stretchr/testify v1.11.1
 	golang.org/x/term v0.41.0
@@ -21,9 +21,9 @@ require (
 
 require (
 	codeberg.org/mvdkleijn/forgejo-sdk/forgejo/v2 v2.2.0 // indirect
-	forge.lthn.ai/core/config v0.1.7 // indirect
-	forge.lthn.ai/core/go-inference v0.1.6 // indirect
-	forge.lthn.ai/core/go-store v0.1.9 // indirect
+	dappco.re/go/core/config v0.1.8 // indirect
+	dappco.re/go/core/inference v0.1.6 // indirect
+	dappco.re/go/core/store v0.1.9 // indirect
 	github.com/42wim/httpsig v1.2.3 // indirect
 	github.com/aymanbagabas/go-osc52/v2 v2.0.1 // indirect
 	github.com/cespare/xxhash/v2 v2.3.0 // indirect

go.sum

@@ -2,26 +2,64 @@ code.gitea.io/sdk/gitea v0.23.2 h1:iJB1FDmLegwfwjX8gotBDHdPSbk/ZR8V9VmEJaVsJYg=
 code.gitea.io/sdk/gitea v0.23.2/go.mod h1:yyF5+GhljqvA30sRDreoyHILruNiy4ASufugzYg0VHM=
 codeberg.org/mvdkleijn/forgejo-sdk/forgejo/v2 v2.2.0 h1:HTCWpzyWQOHDWt3LzI6/d2jvUDsw/vgGRWm/8BTvcqI=
 codeberg.org/mvdkleijn/forgejo-sdk/forgejo/v2 v2.2.0/go.mod h1:ZglEEDj+qkxYUb+SQIeqGtFxQrbaMYqIOgahNKb7uxs=
+dappco.re/go/agent v0.3.3 h1:hVF+ExuJ/WHuQjEdje6bSUPcUpy6jUscVl9fiuV8l74=
+dappco.re/go/agent v0.3.3/go.mod h1:UnrGApmKd/GzHEFcgy/tYuSfeJwxRx8UsxPhTjU5Ntw=
+dappco.re/go/agent v0.9.0 h1:ZfQTyUWa7YXznGLQZG9r7njwWThfLfsdIkOXJWboqZc=
+dappco.re/go/agent v0.9.0/go.mod h1:UnrGApmKd/GzHEFcgy/tYuSfeJwxRx8UsxPhTjU5Ntw=
+dappco.re/go/agent v0.10.0-alpha.1 h1:hZEm4lAqjP6wgsxelYETdMUhGTHdIBpH8hJTMO58GPA=
+dappco.re/go/agent v0.10.0-alpha.1/go.mod h1:jiShGsIfHS7b7rJXMdb30K+wKL8Kx8w/VUrLNDYRbCo=
+dappco.re/go/core v0.4.7 h1:KmIA/2lo6rl1NMtLrKqCWfMlUqpDZYH3q0/d10dTtGA=
+dappco.re/go/core v0.4.7/go.mod h1:f2/tBZ3+3IqDrg2F5F598llv0nmb/4gJVCFzM5geE4A=
+dappco.re/go/core v0.8.0-alpha.1 h1:gj7+Scv+L63Z7wMxbJYHhaRFkHJo2u4MMPuUSv/Dhtk=
+dappco.re/go/core v0.8.0-alpha.1/go.mod h1:f2/tBZ3+3IqDrg2F5F598llv0nmb/4gJVCFzM5geE4A=
+dappco.re/go/core/i18n v0.1.7 h1:JhJeptA/I42c7GhmtJDPDlvhO8Y3izQ82wpaXCy/XZ0=
+dappco.re/go/core/i18n v0.1.7/go.mod h1:0VDjwtY99NSj2iqwrI09h5GUsJeM9s48MLkr+/Dn4G8=
+dappco.re/go/core/i18n v0.2.1 h1:BeEThqNmQxFoGHY95jSlawq8+RmJBEz4fZ7D7eRQSJo=
+dappco.re/go/core/i18n v0.2.1/go.mod h1:9eSVJXr3OpIGWQvDynfhqcp27xnLMwlYLgsByU+p7ok=
+dappco.re/go/core/inference v0.2.0/go.mod h1:YLYk/FxWACGehXpHCTa/t7hFl9uvAoq83QYSBakNNlc=
+dappco.re/go/core/io v0.1.7 h1:tYyOnNFQcF//mqDLTNjBu4PV/CBizW7hm2ZnwdQQi40=
+dappco.re/go/core/io v0.1.7/go.mod h1:8lRLFk4Dnp5cR/Cyzh9WclD5566TbpdRgwcH7UZLWn4=
+dappco.re/go/core/io v0.3.0-alpha.1 h1:xTWrlk72qG0+aIyP5+Telp2nmFF0GG0EBFyVrOiBtec=
+dappco.re/go/core/io v0.3.0-alpha.1/go.mod h1:1/DWfw8U9ARKQobFJ7KhsNw2lvJGnQr/vi4Pmqxps6s=
+dappco.re/go/core/log v0.0.4 h1:qy54NYLh9nA4Kvo6XBsuAdyDD5jRc9PVnJLz9R0LiBw=
+dappco.re/go/core/log v0.0.4/go.mod h1:r14MXKOD3LF/sI8XUJQhRk/SZHBE7jAFVuCfgkXoZPw=
+dappco.re/go/core/log v0.1.0 h1:pa71Vq2TD2aoEUQWFKwNcaJ3GBY8HbaNGqtE688Unyc=
+dappco.re/go/core/log v0.1.0/go.mod h1:Nkqb8gsXhZAO8VLpx7B8i1iAmohhzqA20b9Zr8VUcJs=
+dappco.re/go/core/scm v0.3.6 h1:QUHaaPggP0+zfg7y4Q+BChQaVjx6PW+LKkOzcWYPpZ0=
+dappco.re/go/core/scm v0.3.6/go.mod h1:IWFIYDfRH0mtRdqY5zV06l/RkmkPpBM6FcbKWhg1Qa8=
+dappco.re/go/core/scm v0.5.0-alpha.1 h1:/LDH7lhVkogqJMxs3w6qmx87RuoHf3nGBNb5El2YQCg=
+dappco.re/go/core/scm v0.5.0-alpha.1/go.mod h1:qj/tAPMefuQ9HR5Sb+6qZTuaFNbvTOAhedsXHcal1qU=
+dappco.re/go/core/store v0.2.0/go.mod h1:QQGJiruayjna3nywbf0N2gcO502q/oEkPoSpBpSKbLM=
 forge.lthn.ai/core/agent v0.3.3 h1:lGpoD5OgvdJ5z+qofw8fBWkDB186QM7I2jjXEbtzSdA=
 forge.lthn.ai/core/agent v0.3.3/go.mod h1:UnrGApmKd/GzHEFcgy/tYuSfeJwxRx8UsxPhTjU5Ntw=
-forge.lthn.ai/core/cli v0.3.6 h1:qYAn+6iMd2py7Wu2CYgXCRQvin1/QG72lH8skR7kqsE=
-forge.lthn.ai/core/cli v0.3.6/go.mod h1:+a0m7dFYo2IQ8pFsT6ZlHNdDinqtMXFe7/E1fN8SdaA=
-forge.lthn.ai/core/config v0.1.7 h1:yYLJIH0ERapMbWzEt/PJIh6jMZdOJLBMb6jt6LQJerw=
-forge.lthn.ai/core/config v0.1.7/go.mod h1:iuhJU/4kQTVJyCTte/GfSoYz0DRwrb7aRQXMOPRxDOI=
-forge.lthn.ai/core/go v0.3.2 h1:VB9pW6ggqBhe438cjfE2iSI5Lg+62MmRbaOFglZM+nQ=
-forge.lthn.ai/core/go v0.3.2/go.mod h1:f7/zb3Labn4ARfwTq5Bi2AFHY+uxyPHozO+hLb54eFo=
-forge.lthn.ai/core/go-container v0.1.6 h1:jA8V7IZH68G70//g5pXyQz12YW6fWeYYkW4Uik4+BIA=
-forge.lthn.ai/core/go-container v0.1.6/go.mod h1:OimNEV4xK8ahiG/UihPtMPYfB0iSD51jbL9AHeRTrHI=
+forge.lthn.ai/core/agent v0.9.0 h1:O43ncyGmEKapB2kjxEzGODqOOMMT5IyZsotXieqmZGo=
+forge.lthn.ai/core/agent v0.9.0/go.mod h1:UnrGApmKd/GzHEFcgy/tYuSfeJwxRx8UsxPhTjU5Ntw=
+forge.lthn.ai/core/cli v0.3.7 h1:1GrbaGg0wDGHr6+klSbbGyN/9sSbHvFbdySJznymhwg=
+forge.lthn.ai/core/cli v0.3.7/go.mod h1:DBUppJkA9P45ZFGgI2B8VXw1rAZxamHoI/KG7fRvTNs=
+forge.lthn.ai/core/config v0.1.8 h1:xP2hys7T94QGVF/OTh84/Zr5Dm/dL/0vzjht8zi+LOg=
+forge.lthn.ai/core/config v0.1.8/go.mod h1:8epZrkwoCt+5ayrqdinOUU/+w6UoxOyv9ZrdgVOgYfQ=
+forge.lthn.ai/core/config v0.2.0-alpha.1 h1:lhxmnESx+iplLV7aqORbdOodQPSGoBk86oIxPyCXjmc=
+forge.lthn.ai/core/config v0.2.0-alpha.1/go.mod h1:AIm7VlO/h4s1LmGSn0HZb+RqAbhmZFJppVGivcsJmGE=
+forge.lthn.ai/core/go v0.3.3 h1:kYYZ2nRYy0/Be3cyuLJspRjLqTMxpckVyhb/7Sw2gd0=
+forge.lthn.ai/core/go v0.3.3/go.mod h1:Cp4ac25pghvO2iqOu59t1GyngTKVOzKB5/VPdhRi9CQ=
+forge.lthn.ai/core/go-container v0.1.7 h1:+/6NIu7OWyK2LSi2obnFF5fVpWhKiWduMiEkmnbZS6U=
+forge.lthn.ai/core/go-container v0.1.7/go.mod h1:k0z4yhfZC05bYB5ANdpDFC3AcefnOWJvosXSBSydjs4=
 forge.lthn.ai/core/go-i18n v0.1.7 h1:aHkAoc3W8fw3RPNvw/UszQbjyFWXHszzbZgty3SwyAA=
 forge.lthn.ai/core/go-i18n v0.1.7/go.mod h1:0VDjwtY99NSj2iqwrI09h5GUsJeM9s48MLkr+/Dn4G8=
 forge.lthn.ai/core/go-inference v0.1.6 h1:ce42zC0zO8PuISUyAukAN1NACEdWp5wF1mRgnh5+58E=
 forge.lthn.ai/core/go-inference v0.1.6/go.mod h1:jfWz+IJX55wAH98+ic6FEqqGB6/P31CHlg7VY7pxREw=
-forge.lthn.ai/core/go-io v0.1.6 h1:RByYeP829HFqR2yLg5iBM5dGHKzPFYc+udl/Y1DZIRs=
-forge.lthn.ai/core/go-io v0.1.6/go.mod h1:3MSuQZuzhCi6aefECQ/LxhM8ooVLam1KgEvgeEjYZVc=
+forge.lthn.ai/core/go-inference v0.1.7 h1:9Dy6v03jX5ZRH3n5iTzlYyGtucuBIgSe+S7GWvBzx9Q=
+forge.lthn.ai/core/go-inference v0.1.7/go.mod h1:jfWz+IJX55wAH98+ic6FEqqGB6/P31CHlg7VY7pxREw=
+forge.lthn.ai/core/go-io v0.1.7 h1:Tdb6sqh+zz1lsGJaNX9RFWM6MJ/RhSAyxfulLXrJsbk=
+forge.lthn.ai/core/go-io v0.1.7/go.mod h1:8lRLFk4Dnp5cR/Cyzh9WclD5566TbpdRgwcH7UZLWn4=
 forge.lthn.ai/core/go-log v0.0.4 h1:KTuCEPgFmuM8KJfnyQ8vPOU1Jg654W74h8IJvfQMfv0=
 forge.lthn.ai/core/go-log v0.0.4/go.mod h1:r14MXKOD3LF/sI8XUJQhRk/SZHBE7jAFVuCfgkXoZPw=
-forge.lthn.ai/core/go-scm v0.3.5 h1:3x6o/7RBvx37xmd/qJIptS2+2hlp6O7DGZDNPEHmaeE=
-forge.lthn.ai/core/go-scm v0.3.5/go.mod h1:IIqKnzcEw0wLnRo2D1bx6ZOQ+xaaILcNJ8J2j/eeBso=
+forge.lthn.ai/core/go-scm v0.2.0 h1:TvDyCzw0HWzXjmqe6uPc46nPaRzc7MPGswmwZt0CmXo=
+forge.lthn.ai/core/go-scm v0.2.0/go.mod h1:Q/PV2FbqDlWnAOsXAd1pgSiHOlRCPW4HcPmOt8Z9H+E=
+forge.lthn.ai/core/go-scm v0.3.6 h1:LFNx8Fs82mrpxro/MPUM6tMiD4DqPmdu83UknXztQjc=
+forge.lthn.ai/core/go-scm v0.3.6/go.mod h1:IWFIYDfRH0mtRdqY5zV06l/RkmkPpBM6FcbKWhg1Qa8=
+forge.lthn.ai/core/go-store v0.1.6 h1:7T+K5cciXOaWRxge0WnGkt0PcK3epliWBa1G2FLEuac=
+forge.lthn.ai/core/go-store v0.1.6/go.mod h1:/2vqaAn+HgGU14N29B+vIfhjIsBzy7RC+AluI6BIUKI=
 forge.lthn.ai/core/go-store v0.1.9 h1:DGO2sUo2i/csWbhw7zxU7oyGF2FJT72/8w47GhZ1joM=
 forge.lthn.ai/core/go-store v0.1.9/go.mod h1:VNnHh94TMD3+L+sSgvxn0GHtDKhJR8FD6JiuIuRtjuk=
 github.com/42wim/httpsig v1.2.3 h1:xb0YyWhkYj57SPtfSttIobJUPJZB9as1nsfo7KWVcEs=

locales/embed.go

@@ -1,7 +1,15 @@
 // Package locales embeds translation files for the go-devops module.
 package locales
 
-import "embed"
+import (
+	"embed"
+
+	"dappco.re/go/core/i18n"
+)
 
 //go:embed *.json
 var FS embed.FS
+
+func init() {
+	i18n.RegisterLocales(FS, ".")
+}

locales/en.json

@@ -8,7 +8,11 @@
       "short": "Multi-repo development workflows",
       "long": "Development workflow commands for managing multiple repositories.\n\nIncludes git operations, forge integration, CI status, and dev environment management.",
       "api": {
-        "short": "API synchronisation tools"
+        "short": "API synchronisation tools",
+        "test_gen": {
+          "short": "Generate public API test stubs",
+          "long": "Scan internal service packages and generate compile-time tests for their public API wrappers."
+        }
       },
       "health": {
         "short": "Quick health check across all repos",
@@ -147,7 +151,7 @@
         "flag": {
           "command": "Shell command to run in each repo",
           "script": "Script file to run in each repo",
-          "repos": "Comma-separated list of repo names to target",
+          "repos": "Comma-separated list of repo names, paths, or glob patterns to target",
           "commit": "Commit changes after running",
           "message": "Commit message (required with --commit)",
           "push": "Push after committing",
@@ -169,6 +173,8 @@
         "long": "Copy a file or directory to matching repos, optionally committing and pushing the changes.\n\nDesigned for safe file distribution by AI agents.",
         "source": "Source",
         "targets": "Targets",
+        "warning": "This will copy files into each target repo.",
+        "confirm": "Sync these repos?",
         "dry_run_mode": "[dry-run] No changes will be made",
         "no_changes": "no changes",
         "summary": "Summary",
@@ -177,7 +183,8 @@
           "message": "Commit message (omit to leave uncommitted)",
           "push": "Push after committing",
           "co_author": "Co-author for commits",
-          "dry_run": "Preview without making changes"
+          "dry_run": "Preview without making changes",
+          "yes": "Skip confirmation prompt"
         },
         "error": {
           "source_not_found": "Source not found: {{.Path}}",
@@ -203,6 +210,7 @@
         "skipped_count": "{{.Count}} skipped",
         "synced_count": "{{.Count}} synced",
         "would_sync_count": "{{.Count}} would sync",
+        "templates": "Templates",
         "header": {
           "repo": "Repo"
         },
@@ -396,6 +404,14 @@
         "select_packages": "Select packages to clone",
         "confirm_clone": "Clone {{.Count}} package(s) to {{.Target}}?"
       },
+      "repo": {
+        "short": "Generate .core config for a repo",
+        "long": "Detect the current project type and generate .core/build.yaml, release.yaml, and test.yaml for the repository.",
+        "setting_up": "Setting up repo",
+        "detected_type": "Detected project type",
+        "would_create": "Would create",
+        "created": "Created"
+      },
       "github": {
         "short": "Configure GitHub repo settings",
         "long": "Apply standardised GitHub settings (labels, webhooks, branch protection, security) to repos.",
@@ -425,12 +441,6 @@
         "to_create": "To create",
         "to_update": "To update",
         "to_delete": "To delete"
-      },
-      "repo": {
-        "setting_up": "Setting up repo",
-        "detected_type": "Detected project type",
-        "would_create": "Would create",
-        "created": "Created"
       }
     }
   },

snapshot/snapshot.go

@@ -5,9 +5,9 @@ import (
 	"encoding/json"
 	"time"
 
-	log "forge.lthn.ai/core/go-log"
+	log "dappco.re/go/core/log"
 
-	"forge.lthn.ai/core/go-scm/manifest"
+	"dappco.re/go/core/scm/manifest"
 )
 
 // Snapshot is the frozen release manifest written as core.json.

snapshot/snapshot_test.go

@@ -5,7 +5,7 @@ import (
 	"testing"
 	"time"
 
-	"forge.lthn.ai/core/go-scm/manifest"
+	"dappco.re/go/core/scm/manifest"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
 )