@deleted-ai/deleted 0.1.347 → 0.1.351

package/README.md

@@ -16,10 +16,43 @@ npx @deleted-ai/deleted init my-box
 ```
 
 `--starter` runs a pre-signed bundle from `share/starter/` (`chat-tools` or
-`chat-echo`). Sources for the same assembly ship in
-`share/samples/chat-tools/` next to pre-built `prebuilt/*.wasm`; rebuilding them
-with `deleted pack build` (Rust + `wasm-tools` 1.235.x) reproduces the shipped
-binaries byte for byte.
+`chat-echo`).
+
+## Type `deleted` instead of `npx @deleted-ai/deleted`
+
+`npx` runs the CLI without installing it, but leaves nothing on your `PATH`.
+Install once to get the short command used throughout the docs:
+
+```bash
+npm install -g @deleted-ai/deleted
+deleted --version
+```
+
+Either form works everywhere below. The CLI prints next-step commands in
+whichever form you used, so you can always paste what it shows you.
+
+## Your own harness, still without Rust
+
+`deleted sample` copies a shipped sample into a directory with its pre-built
+guests already staged, so you can write and sign your own lock immediately:
+
+```bash
+deleted sample          # list what ships
+deleted sample echo
+cd echo
+deleted lock create chat-echo.recipe.yaml -o bundle
+deleted lock sign --dev-operator bundle
+deleted run --dev-operator bundle --entry /boxes/chat-cli -- "hello"
+# → completed: echo:hello
+```
+
+`deleted sample deepseek` is the same flow against a real model: export your own
+`DEEPSEEK_API_KEY`, point the recipe's `credential_id` at it, and sign. Signing
+is the operator approving that recipe's egress pin.
+
+Each sample also ships its guest sources. Rebuilding them with `deleted pack
+build` (Rust + `wasm-tools` 1.235.x) reproduces the staged binaries byte for
+byte — `deleted doctor` lists what that needs.
 
 On install (or first run), the package extracts the bundled release binary for
 your host — it ships one tarball per support-floor target and picks the match (or downloads from GitHub Releases when authenticated). No kernel source

package/bin/deleted.js

@@ -1,6 +1,7 @@
 #!/usr/bin/env node
 import { spawnSync } from 'node:child_process';
 import path from 'node:path';
+import fs from 'node:fs';
 import { ensureInstalled } from '../lib/install.js';
 import { nativeBinaryPath } from '../lib/paths.js';
 
@@ -12,10 +13,34 @@ try {
   process.exit(1);
 }
 
+// Next-step hints the binary prints must be commands this user can actually
+// run. A global install puts `deleted` on PATH; `npx` and a local dependency
+// install do not, so ask PATH rather than guessing from how we were launched.
+function shortCommandAvailable() {
+  const entries = (process.env.PATH ?? '')
+    .split(path.delimiter)
+    .filter(Boolean)
+    // npx and npm scripts prepend node_modules/.bin for the child process only.
+    // That shim is not on the user's own PATH, so it must not count here.
+    .filter((dir) => !dir.split(path.sep).includes('node_modules'));
+  return entries.some((dir) => {
+    try {
+      fs.accessSync(path.join(dir, 'deleted'), fs.constants.X_OK);
+      return true;
+    } catch {
+      return false;
+    }
+  });
+}
+
 const binary = nativeBinaryPath(cacheDir);
 const result = spawnSync(binary, process.argv.slice(2), {
   stdio: 'inherit',
-  env: process.env,
+  env: {
+    ...process.env,
+    // A selector, not display text: the binary owns the wording it prints.
+    DELETED_LAUNCHER: shortCommandAvailable() ? 'path' : 'npx',
+  },
 });
 
 if (result.error) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deleted-ai/deleted",
-  "version": "0.1.347",
+  "version": "0.1.351",
   "description": "Deleted AI CLI wrapper — installs the native binary for this Linux host (arm64 or x64)",
   "license": "UNLICENSED",
   "type": "module",

package/release-manifest.json

@@ -1,15 +1,15 @@
 {
   "_comment": "Placeholder in git; scripts/publish-deleted-npm.sh stamps version, gitSha, and a tarballSha256 per target at publish. Install fails closed while a target's tarballSha256 is the zero sentinel.",
-  "version": "0.1.347",
-  "gitSha": "6dd6600",
+  "version": "0.1.351",
+  "gitSha": "2410222",
   "repo": "cdlconsultants/deleted-ai",
   "releaseTagPrefix": "npm-v",
   "targets": {
     "linux-arm64": {
-      "tarballSha256": "82de96f010da1d84447d4e32a95d7ecd61f5d30d97ad3850a7090def5a111e28"
+      "tarballSha256": "0daf8e39ab3e1e6d4ee7557972d01bb18cd91e6c5efd6bc77f8cb0f13755197f"
     },
     "linux-x64": {
-      "tarballSha256": "b8aa1dfb260ef3ed3cd958f1969f90739eca9c0bbd5a911c834c6aa82006bf6c"
+      "tarballSha256": "18c32067939b134019a4ffb0edd8903885b2546244023c3b99c03ce66b9935a0"
     }
   }
 }