Add Linux/macOS CLI readiness gates

.github/workflows/ci.yml

@@ -44,9 +44,30 @@ jobs:
       - name: GitHub Action Bridge Smoke
         run: target/debug/deepseek github fixture-smoke --json
 
+      - name: Shell Supervisor Fixture Smoke
+        run: |
+          if command -v timeout >/dev/null 2>&1; then
+            timeout 20s target/debug/deepseek agents shell-fixture-smoke --json
+          else
+            target/debug/deepseek agents shell-fixture-smoke --json
+          fi
+
+      - name: Local Runtime Service Smoke
+        run: |
+          smoke_workdir="/tmp/deepseek-service-smoke-${GITHUB_RUN_ID:-local}"
+          mkdir -p "$smoke_workdir"
+          if command -v timeout >/dev/null 2>&1; then
+            timeout 25s target/debug/deepseek agents service-smoke --workdir "$smoke_workdir" --bin target/debug/deepseek --json
+          else
+            target/debug/deepseek agents service-smoke --workdir "$smoke_workdir" --bin target/debug/deepseek --json
+          fi
+
       - name: TUI Entrypoint Smoke
         run: target/debug/deepseek tui --entrypoint-smoke --smoke-bin target/debug/deepseek
 
+      - name: Multi-file External Fixture Scaffold Smoke
+        run: scripts/create-multifile-external-fixture.sh "$RUNNER_TEMP/deepseek-external-fixture"
+
       - name: Secret Scan
         run: node scripts/check-secrets.js
 
@@ -106,6 +127,30 @@ jobs:
       - name: GitHub Action Bridge Smoke
         run: ${{ matrix.binary }} github fixture-smoke --json
 
+      - name: Shell Supervisor Fixture Smoke
+        if: runner.os != 'Windows'
+        run: |
+          if command -v timeout >/dev/null 2>&1; then
+            timeout 20s ${{ matrix.binary }} agents shell-fixture-smoke --json
+          else
+            ${{ matrix.binary }} agents shell-fixture-smoke --json
+          fi
+
+      - name: Local Runtime Service Smoke
+        if: runner.os != 'Windows'
+        run: |
+          smoke_workdir="/tmp/deepseek-service-smoke-${GITHUB_RUN_ID:-local}"
+          mkdir -p "$smoke_workdir"
+          if command -v timeout >/dev/null 2>&1; then
+            timeout 25s ${{ matrix.binary }} agents service-smoke --workdir "$smoke_workdir" --bin ${{ matrix.binary }} --json
+          else
+            ${{ matrix.binary }} agents service-smoke --workdir "$smoke_workdir" --bin ${{ matrix.binary }} --json
+          fi
+
+      - name: Multi-file External Fixture Scaffold Smoke
+        if: runner.os != 'Windows'
+        run: scripts/create-multifile-external-fixture.sh "$RUNNER_TEMP/deepseek-external-fixture"
+
       - name: Windows Shell Supervisor ConPTY Smoke
         if: runner.os == 'Windows'
         shell: pwsh

.github/workflows/release.yml

@@ -74,6 +74,30 @@ jobs:
       - name: Verify Release Binary GitHub Action Bridge
         run: ${{ matrix.binary }} github fixture-smoke --json
 
+      - name: Verify Release Binary Shell Supervisor Fixture
+        if: runner.os != 'Windows'
+        run: |
+          if command -v timeout >/dev/null 2>&1; then
+            timeout 20s ${{ matrix.binary }} agents shell-fixture-smoke --json
+          else
+            ${{ matrix.binary }} agents shell-fixture-smoke --json
+          fi
+
+      - name: Verify Release Binary Local Runtime Service Smoke
+        if: runner.os != 'Windows'
+        run: |
+          smoke_workdir="/tmp/deepseek-service-smoke-${GITHUB_RUN_ID:-local}"
+          mkdir -p "$smoke_workdir"
+          if command -v timeout >/dev/null 2>&1; then
+            timeout 25s ${{ matrix.binary }} agents service-smoke --workdir "$smoke_workdir" --bin ${{ matrix.binary }} --json
+          else
+            ${{ matrix.binary }} agents service-smoke --workdir "$smoke_workdir" --bin ${{ matrix.binary }} --json
+          fi
+
+      - name: Verify Multi-file External Fixture Scaffold
+        if: runner.os != 'Windows'
+        run: scripts/create-multifile-external-fixture.sh "$RUNNER_TEMP/deepseek-external-fixture"
+
       - name: Verify Release Binary TUI Snapshot
         if: runner.os != 'Windows'
         env:

README.ja-JP.md

@@ -10,8 +10,8 @@ DeepSeekCode は DeepSeek-first のターミナル向けコーディングエー
 > 状態: dogfood とリポジトリ内の開発作業には利用できます。`v0.1.1` では
 > GitHub Release のバイナリと検証済み GHCR イメージを公開済みです。bare
 > `deepseek` TUI entrypoint は Linux、macOS、Windows CI で smoke 済みです。
-> npm と Homebrew の公開には registry/tap の資格情報がまだ必要で、より厚い
-> hosted IDE/GitHub evidence は継続中です。
+> hosted GitHub write workflow evidence は記録済みです。hosted IDE evidence と
+> npm/Homebrew の公開には外部の資格情報や実行環境がまだ必要です。
 
 <p align="center">
   <img src="./docs/demo/deepseek-code-tui-demo.svg" alt="DeepSeekCode animated TUI demo recording" width="100%">
@@ -120,15 +120,19 @@ deepseek tui --runtime-url http://127.0.0.1:13000
 ## 現在の差分
 
 DeepSeekCode は自身の開発に使える段階ですが、Claude Code CLI / Codex CLI
-ほどの製品成熟度にはまだ届いていません。大きな残差は次の通りです。
-
-- compile-check 済み backend、現行 Linux PTY fd handoff、bounded interactive
-  attach、CI-smoked default TUI entrypoint を超える Windows shell-supervisor
-  ConPTY/TCP daemon runtime proof。
-- hosted GitHub/VS Code workflow evidence と、よりリッチな multi-file external fixture サンプル。
-- npm registry 公開と Homebrew tap。どちらも資格情報が未設定です。
+ほどの製品成熟度にはまだ届いていません。Linux/macOS のローカル coding-agent
+CLI に絞ると、残差は主に evidence depth と配布面の polish です。
+
+- macOS shell/runtime evidence を entrypoint smoke 以上に厚くすること。CI/release
+  matrix は `agents shell-fixture-smoke` と `agents service-smoke` を実行します。
+- よりリッチな multi-file external fixture サンプル。disposable Python invoice
+  fixture の scaffold script を追加しています。
+- Homebrew 公開。tap 資格情報が未設定です。
 - コミット済み model-backed SVG を超える、任意の polish 済み GIF/MP4 キャプチャ。
 
+Windows ConPTY/service proof、hosted IDE evidence、npm publishing はより広い
+product hardening ですが、Linux/macOS ローカル CLI milestone の blocker ではありません。
+
 現在の状態、次の作業、最終目標は
 [docs/current-status.md](./docs/current-status.md) にまとめています。
 
@@ -188,6 +192,7 @@ deepseek update publish-status --dist dist-assets --npm-dist npm-dist --strict
 deepseek update publish-status --json
 deepseek agents service-doctor --kind all --workdir "$PWD" --bin "$(command -v deepseek)" --json
 deepseek agents service-smoke --workdir "$PWD" --bin "$(command -v deepseek)" --json
+deepseek agents shell-fixture-smoke --json
 deepseek tui --entrypoint-smoke --smoke-bin "$(command -v deepseek)"
 ```
 
@@ -204,6 +209,7 @@ repository を使います。まず dry-run で preflight し、その後 isolat
 実行して dogfood report に記録します。
 
 ```bash
+scripts/create-multifile-external-fixture.sh /tmp/deepseek-external-fixtures/python-invoice-multifile
 deepseek dogfood external-fixture --workdir /tmp/disposable-repo --dry-run \
   'replace `a - b` with `a + b` in src/lib.rs and validate with cargo test'
 deepseek dogfood external-fixture --workdir /tmp/disposable-repo --benchmark-gate \

README.md

@@ -9,9 +9,9 @@ iterating from the same terminal.
 
 > Status: usable for dogfooding and repository work. `v0.1.1` has GitHub
 > Release binaries and a verified GHCR image; the bare `deepseek` TUI entrypoint
-> is CI-smoked on Linux, macOS, and Windows. npm and Homebrew publishing still
-> need registry/tap credentials, and hosted IDE/GitHub evidence remains in
-> progress.
+> is CI-smoked on Linux, macOS, and Windows. Hosted GitHub write workflow
+> evidence is recorded; hosted IDE evidence and npm/Homebrew publishing still
+> need external credentials or machines.
 
 <p align="center">
   <img src="./docs/demo/deepseek-code-tui-demo.svg" alt="DeepSeekCode animated TUI demo recording" width="100%">
@@ -119,16 +119,21 @@ git.
 ## Current Gap
 
 DeepSeekCode is close enough to use as its own coding CLI, but it is not yet at
-Claude Code CLI / Codex CLI polish. The largest remaining gaps are:
-
-- Windows shell-supervisor ConPTY/TCP daemon runtime proof beyond the new
-  compile-checked backend, current Linux PTY fd handoff, bounded interactive
-  attach, and CI-smoked default TUI entrypoint;
-- hosted GitHub/VS Code workflow evidence and richer multi-file external
-  fixture samples;
-- npm registry publishing and a Homebrew tap, both blocked on credentials;
+Claude Code CLI / Codex CLI polish. For a Linux/macOS local coding-agent CLI,
+the remaining gaps are mostly evidence depth and distribution polish:
+
+- macOS shell/runtime CI and release-binary evidence beyond the entrypoint
+  smoke, now covered by `agents shell-fixture-smoke` and `agents service-smoke`
+  workflow gates;
+- richer multi-file external fixture samples, with a scaffold script for a
+  disposable Python invoice fixture;
+- Homebrew publishing, still blocked on tap credentials;
 - optional polished GIF/MP4 capture beyond the committed model-backed SVG.
 
+Windows ConPTY/service proof, hosted IDE evidence, and npm publishing remain
+broader product-hardening work, but they are not blockers for the Linux/macOS
+local CLI milestone.
+
 See [docs/current-status.md](./docs/current-status.md) for the current Chinese
 status, roadmap, and final target.
 
@@ -191,6 +196,7 @@ deepseek update publish-status --json
 deepseek agents service-doctor --kind all --workdir "$PWD" --bin "$(command -v deepseek)" --json
 mkdir -p /tmp/dsc-smk
 deepseek agents service-smoke --workdir /tmp/dsc-smk --bin "$(command -v deepseek)" --json
+deepseek agents shell-fixture-smoke --json
 deepseek tui --entrypoint-smoke --smoke-bin "$(command -v deepseek)"
 ```
 
@@ -207,6 +213,7 @@ outside this checkout. The command dry-runs preflight first, then runs against
 an isolated copy and records the result in the dogfood report:
 
 ```bash
+scripts/create-multifile-external-fixture.sh /tmp/deepseek-external-fixtures/python-invoice-multifile
 deepseek dogfood external-fixture --workdir /tmp/disposable-repo --dry-run \
   'replace `a - b` with `a + b` in src/lib.rs and validate with cargo test'
 deepseek dogfood external-fixture --workdir /tmp/disposable-repo --benchmark-gate \

README.zh-CN.md

@@ -8,8 +8,8 @@ TUI/runtime workbench。它面向真实写代码循环：阅读仓库、修改
 
 > 当前状态：已经可以用于 dogfood 和仓库内编码任务。`v0.1.1` 已有 GitHub
 > Release 二进制包和实测可用的 GHCR 镜像；裸 `deepseek` TUI 入口已经在
-> Linux、macOS、Windows CI 里做真实 smoke。npm 与 Homebrew 发布还需要
-> registry/tap 凭据，hosted IDE/GitHub 证据仍在推进中。
+> Linux、macOS、Windows CI 里做真实 smoke。hosted GitHub 写入 workflow
+> 证据已经记录；hosted IDE 证据和 npm/Homebrew 发布仍需要外部凭据或机器。
 
 <p align="center">
   <img src="./docs/demo/deepseek-code-tui-demo.svg" alt="DeepSeekCode animated TUI demo recording" width="100%">
@@ -115,15 +115,19 @@ deepseek tui --runtime-url http://127.0.0.1:13000
 ## 当前差距
 
 DeepSeekCode 已经可以直接拿来写自己的代码，但还没有达到 Claude Code CLI /
-Codex CLI 的产品成熟度。最大差距集中在：
-
-- 新增 compile-checked backend、当前 Linux PTY fd handoff、bounded interactive
-  attach 和 CI 已验证默认 TUI 入口之外，Windows shell-supervisor ConPTY/TCP
-  daemon 运行证明；
-- hosted GitHub/VS Code workflow 证据，以及更丰富的 multi-file external fixture 样本；
-- npm registry 发布和 Homebrew tap，这两项还缺少对应凭据；
+Codex CLI 的产品成熟度。如果只看 Linux/macOS 本地 coding-agent CLI，剩余差距主要是
+证据厚度和分发打磨：
+
+- macOS shell/runtime 证据需要超过入口 smoke；CI/release matrix 现在会跑
+  `agents shell-fixture-smoke` 和 `agents service-smoke`；
+- 更丰富的 multi-file external fixture 样本；仓库已提供 disposable Python invoice
+  fixture 脚手架；
+- Homebrew 发布仍缺 tap 凭据；
 - 已提交 model-backed SVG 之外，可选的更精致 GIF/MP4 录屏素材。
 
+Windows ConPTY/service proof、hosted IDE 证据和 npm 发布属于更大的产品硬化目标，
+不再阻塞 Linux/macOS 本地 CLI milestone。
+
 当前状态、下一步路线和最终目标见 [docs/current-status.md](./docs/current-status.md)。
 
 ## Demo 素材
@@ -181,6 +185,7 @@ deepseek update publish-status --dist dist-assets --npm-dist npm-dist --strict
 deepseek update publish-status --json
 deepseek agents service-doctor --kind all --workdir "$PWD" --bin "$(command -v deepseek)" --json
 deepseek agents service-smoke --workdir "$PWD" --bin "$(command -v deepseek)" --json
+deepseek agents shell-fixture-smoke --json
 deepseek tui --entrypoint-smoke --smoke-bin "$(command -v deepseek)"
 ```
 
@@ -196,6 +201,7 @@ deepseek pr live-status owner/repo#42 --json
 命令会先 dry-run 检查，然后在 isolated copy 中执行，并把结果写入 dogfood report：
 
 ```bash
+scripts/create-multifile-external-fixture.sh /tmp/deepseek-external-fixtures/python-invoice-multifile
 deepseek dogfood external-fixture --workdir /tmp/disposable-repo --dry-run \
   'replace `a - b` with `a + b` in src/lib.rs and validate with cargo test'
 deepseek dogfood external-fixture --workdir /tmp/disposable-repo --benchmark-gate \