@factorialco/fcode-cli 3.2.0 → 3.3.0

package/README.md

@@ -20,7 +20,7 @@ $ npm install -g @factorialco/fcode-cli
 $ fcode COMMAND
 running command...
 $ fcode (--version)
-@factorialco/fcode-cli/3.2.0 linux-x64 node-v22.22.3
+@factorialco/fcode-cli/3.3.0 linux-x64 node-v22.22.3
 $ fcode --help [COMMAND]
 USAGE
   $ fcode COMMAND

package/dist/commands/i18n/status.js

@@ -7,6 +7,7 @@ const cli_1 = require("../../utils/cli");
 class I18nStatus extends i18n_command_1.default {
     async resourcesTableLog(resources) {
         const hasInherited = resources.some((resource) => resource.resolvingTeamSlug);
+        const hasDeleted = resources.some((resource) => resource.deletion);
         cli_1.cli.table(resources, {
             locale: {
                 // The identifier, not the slug: an inherited file is tracked as `en.inherited`, and the
@@ -24,6 +25,14 @@ class I18nStatus extends i18n_command_1.default {
                     header: 'inherited',
                 },
             }),
+            ...(hasDeleted && {
+                deleted: {
+                    get(resource) {
+                        return (0, colorize_resource_1.colorizeByStatus)(resource.deletion ? `🪦 kept by ${resource.deletion.retainingVersionTags.join(', ')}` : '', resource.status);
+                    },
+                    header: 'deleted',
+                },
+            }),
             status: {
                 get({ status }) {
                     return (0, colorize_resource_1.colorizeByStatus)(status, status);

package/dist/commands/modules/pull.js

@@ -4,13 +4,14 @@ const color_1 = require("@oclif/color");
 const modules_command_1 = require("../../core/commands/modules-command");
 const types_1 = require("../../core/types");
 const cli_1 = require("../../utils/cli");
+const version_pull_reporter_1 = require("../../services/version-pull-reporter");
 class ModulesPull extends modules_command_1.default {
     async pullVersioned() {
         const scriptLibraries = (await this._resourceRepository.findAll()).filter((scriptLibrary) => scriptLibrary.id);
         const scriptLibraryRepository = this._resourceRepository;
-        const allPromises = [];
+        const pulls = [];
         for (const scriptLibrary of scriptLibraries) {
-            allPromises.push(this._versionedResourceQuery(scriptLibrary.id).then(async (remoteVersions) => {
+            pulls.push((0, version_pull_reporter_1.trackVersionPull)(scriptLibrary.slug, this._versionedResourceQuery(scriptLibrary.id).then(async (remoteVersions) => {
                 const remoteVersionTags = new Set(remoteVersions.map((v) => v.tag));
                 // Remove local versions that were deleted in remote
                 for (const localTag of scriptLibraryRepository.getLocalVersionTags(scriptLibrary)) {
@@ -26,10 +27,10 @@ class ModulesPull extends modules_command_1.default {
                         await scriptLibraryRepository.saveVersion(scriptLibrary, versionedScriptLibrary);
                     }
                 }
-            }));
+            })));
             await new Promise((resolve) => setTimeout(resolve, 10));
         }
-        await Promise.allSettled(allPromises);
+        await (0, version_pull_reporter_1.reportFailedVersionPulls)(pulls, 'module');
     }
     async run() {
         await super.pullResources();

package/dist/commands/modules/push.js

@@ -6,7 +6,7 @@ const types_1 = require("../../core/types");
 const cli_1 = require("../../utils/cli");
 class ModulesPush extends modules_command_1.default {
     async pushVersioned() {
-        const scriptLibraries = (await this._resourceRepository.findAll()).filter((process) => process.id);
+        const scriptLibraries = (await this._resourceRepository.findAll()).filter((scriptLibrary) => scriptLibrary.id && !scriptLibrary.deletion);
         const scriptLibraryRepository = this._resourceRepository;
         const allPromises = [];
         for (const scriptLibrary of scriptLibraries) {

package/dist/commands/modules/status.js

@@ -7,6 +7,7 @@ const cli_1 = require("../../utils/cli");
 class ModulesStatus extends modules_command_1.default {
     async resourcesTableLog(resources) {
         const hasInherited = resources.some((resource) => resource.resolvingTeamSlug);
+        const hasDeleted = resources.some((resource) => resource.deletion);
         cli_1.cli.table(resources, {
             name: {
                 get({ slug, status }) {
@@ -22,6 +23,14 @@ class ModulesStatus extends modules_command_1.default {
                     header: 'inherited',
                 },
             }),
+            ...(hasDeleted && {
+                deleted: {
+                    get(resource) {
+                        return (0, colorize_resource_1.colorizeByStatus)(resource.deletion ? `🪦 kept by ${resource.deletion.retainingVersionTags.join(', ')}` : '', resource.status);
+                    },
+                    header: 'deleted',
+                },
+            }),
             status: {
                 get({ status }) {
                     return (0, colorize_resource_1.colorizeByStatus)(status, status);

package/dist/commands/processes/pull.js

@@ -5,13 +5,14 @@ const processes_command_1 = require("../../core/commands/processes-command");
 const types_1 = require("../../core/types");
 const cli_1 = require("../../utils/cli");
 const settings_1 = require("../../config/settings");
+const version_pull_reporter_1 = require("../../services/version-pull-reporter");
 class ProcessesPull extends processes_command_1.default {
     async pullVersioned() {
         const processes = await this.getRemoteResources();
         const processRepository = this._resourceRepository;
-        const allPromises = [];
+        const pulls = [];
         for (const process of processes) {
-            allPromises.push(this._versionedResourceQuery(process.id).then(async (remoteVersions) => {
+            pulls.push((0, version_pull_reporter_1.trackVersionPull)(process.slug, this._versionedResourceQuery(process.id).then(async (remoteVersions) => {
                 const remoteVersionTags = new Set(remoteVersions.map((v) => v.tag));
                 // Remove local versions that were deleted in remote
                 for (const localTag of processRepository.getLocalVersionTags(process)) {
@@ -27,10 +28,10 @@ class ProcessesPull extends processes_command_1.default {
                         await processRepository.saveVersion(process, versionedProcess);
                     }
                 }
-            }));
+            })));
             await new Promise((resolve) => setTimeout(resolve, 10));
         }
-        await Promise.allSettled(allPromises);
+        await (0, version_pull_reporter_1.reportFailedVersionPulls)(pulls, 'process');
     }
     async run() {
         await super.pullResources();

package/dist/commands/processes/push.js

@@ -7,7 +7,7 @@ const cli_1 = require("../../utils/cli");
 const settings_1 = require("../../config/settings");
 class ProcessesPush extends processes_command_1.default {
     async pushVersioned() {
-        const processes = (await this._resourceRepository.findAll()).filter((process) => process.id);
+        const processes = (await this._resourceRepository.findAll()).filter((process) => process.id && !process.deletion);
         const processRepository = this._resourceRepository;
         const allPromises = [];
         for (const process of processes) {

package/dist/commands/processes/status.js

@@ -7,6 +7,7 @@ const cli_1 = require("../../utils/cli");
 class ProcessesStatus extends processes_command_1.default {
     async resourcesTableLog(resources) {
         const hasInherited = resources.some((resource) => resource.resolvingTeamSlug);
+        const hasDeleted = resources.some((resource) => resource.deletion);
         cli_1.cli.table(resources, {
             slug: {
                 get(resource) {
@@ -40,6 +41,14 @@ class ProcessesStatus extends processes_command_1.default {
                     header: 'inherited',
                 },
             }),
+            ...(hasDeleted && {
+                deleted: {
+                    get(resource) {
+                        return (0, colorize_resource_1.colorizeByStatus)(resource.deletion ? `🪦 kept by ${resource.deletion.retainingVersionTags.join(', ')}` : '', resource.status);
+                    },
+                    header: 'deleted',
+                },
+            }),
             status: {
                 get({ status }) {
                     return (0, colorize_resource_1.colorizeByStatus)(status, status);

package/dist/commands/runtime-env.js

@@ -21,10 +21,10 @@ class RuntimeEnv extends core_1.Command {
         console.log('DEPENDENCIES_PATH=' + dependenciesPath);
         console.log('LIBRARY_PATH=' + libraryPath);
         if (language === 'PYTHON') {
-            console.log('PYTHONPATH=' + [dependenciesPath, libraryPath, process.cwd()].join(':'));
+            console.log('PYTHONPATH=' + [dependenciesPath, libraryPath, process.cwd()].join(path.delimiter));
         }
         else {
-            console.log('NODE_PATH=' + [dependenciesPath, libraryPath, process.cwd()].join(':'));
+            console.log('NODE_PATH=' + [dependenciesPath, libraryPath, process.cwd()].join(path.delimiter));
         }
     }
 }

package/dist/core/commands/resource-command.d.ts

@@ -38,7 +38,10 @@ export default abstract class ResourceCommand<R extends Resource> extends ApiCli
      * whole set to place a change in context; `diffable` is only what a status says has changed.
      */
     protected diffSections(diffable: Array<ResourcePair<R>>, allPairs: Array<ResourcePair<R>>): Array<DiffSection>;
-    /** Names the resource a patch belongs to, flagging an inherited one as the parent's to fix. */
+    /**
+     * Names the resource a patch belongs to, flagging an inherited one as the parent's to fix and a
+     * deleted one as kept only for its versions.
+     */
     protected diffLabel(pair: ResourcePair<R>): string;
     /**
      * Prints a unified diff of everything that differs between the workspace and the cloud, and

package/dist/core/commands/resource-command.js

@@ -107,11 +107,18 @@ class ResourceCommand extends api_client_command_1.default {
             files: this._diffFilesFor(pair),
         }));
     }
-    /** Names the resource a patch belongs to, flagging an inherited one as the parent's to fix. */
+    /**
+     * Names the resource a patch belongs to, flagging an inherited one as the parent's to fix and a
+     * deleted one as kept only for its versions.
+     */
     diffLabel(pair) {
         const label = `${pair.status} ${this._resourceRepository._repositoryName}/${pair.slug}`;
         const inheritedTeam = (0, resource_differ_1.inheritedFrom)(pair);
-        return inheritedTeam ? `${label}  🔗 inherited from '${inheritedTeam}' (read-only — run pull to update)` : label;
+        if (inheritedTeam) {
+            return `${label}  🔗 inherited from '${inheritedTeam}' (read-only — run pull to update)`;
+        }
+        const deletion = (pair.remote ?? pair.local)?.deletion;
+        return deletion ? `${label}  🪦 deleted, kept by ${deletion.retainingVersionTags.join(', ')} (read-only — run pull to update)` : label;
     }
     /**
      * Prints a unified diff of everything that differs between the workspace and the cloud, and

package/dist/core/dependencies/javascript-env-dependencies.js

@@ -1,9 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-const node_child_process_1 = require("node:child_process");
 const fs = require("node:fs");
 const path = require("node:path");
 const env_dependencies_command_1 = require("./env-dependencies-command");
+const child_process_1 = require("../../utils/child-process");
 class JavaScriptEnvDependencies extends env_dependencies_command_1.default {
     get programmingLanguage() {
         return 'JAVASCRIPT';
@@ -33,7 +33,7 @@ class JavaScriptEnvDependencies extends env_dependencies_command_1.default {
             // Backward compatibility
             const pnpmPath = await this.ensurePnpm();
             return new Promise((resolve, reject) => {
-                const proc = (0, node_child_process_1.spawn)(pnpmPath, ['install', '--no-dev'], {
+                const proc = (0, child_process_1.spawnCommand)(pnpmPath, ['install', '--no-dev'], {
                     cwd: installationPath,
                     stdio: 'inherit',
                 });
@@ -54,10 +54,10 @@ class JavaScriptEnvDependencies extends env_dependencies_command_1.default {
         }
     }
     async ensurePnpm() {
-        const pnpmPath = path.join(this.envPath, 'node_modules', '.bin', 'pnpm');
+        const pnpmPath = (0, child_process_1.binShimPath)(path.join(this.envPath, 'node_modules'), 'pnpm');
         if (!fs.existsSync(pnpmPath)) {
             return new Promise((resolve, reject) => {
-                const proc = (0, node_child_process_1.spawn)('npm', ['install', '--prefix', this.envPath, 'pnpm'], {
+                const proc = (0, child_process_1.spawnCommand)('npm', ['install', '--prefix', this.envPath, 'pnpm'], {
                     cwd: this.envPath,
                     stdio: 'inherit',
                 });

package/dist/core/dependencies/python-env-dependencies.js

@@ -2,9 +2,9 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 const node_child_process_1 = require("node:child_process");
 const fs = require("node:fs");
-const path = require("node:path");
 const env_dependencies_command_1 = require("./env-dependencies-command");
 const cli_1 = require("../../utils/cli");
+const child_process_1 = require("../../utils/child-process");
 class PythonEnvDependencies extends env_dependencies_command_1.default {
     get programmingLanguage() {
         return 'PYTHON';
@@ -12,7 +12,8 @@ class PythonEnvDependencies extends env_dependencies_command_1.default {
     async createEnv() {
         try {
             await new Promise((resolve, reject) => {
-                (0, node_child_process_1.exec)(`python3 -m venv ${this.envPath}`, (error) => {
+                const python = process.platform === 'win32' ? 'python' : 'python3';
+                (0, node_child_process_1.exec)(`${python} -m venv ${JSON.stringify(this.envPath)}`, (error) => {
                     if (error) {
                         reject(error);
                     }
@@ -68,8 +69,8 @@ import json
 `;
     }
     async ensureUv() {
-        const uvPath = path.join(this.envPath, 'bin', 'uv');
-        const pipPath = path.join(this.envPath, 'bin', 'pip');
+        const uvPath = (0, child_process_1.venvExecutablePath)(this.envPath, 'uv');
+        const pipPath = (0, child_process_1.venvExecutablePath)(this.envPath, 'pip');
         if (!fs.existsSync(uvPath)) {
             return new Promise((resolve, reject) => {
                 const proc = (0, node_child_process_1.spawn)(pipPath, ['install', '--force-reinstall', 'uv'], {

package/dist/core/executors/execution-task.js

@@ -127,7 +127,7 @@ class ExecutionTask {
         const exportVars = {
             ...createFilesResult,
             FCODE_DEPENDENCIES_PATH: this._dependenciesPath,
-            FCODE_EXECUTION_PATH: [createFilesResult.FCODE_LIBRARY_PATH, this._dependenciesPath].filter((p) => p).join(':'),
+            FCODE_EXECUTION_PATH: [createFilesResult.FCODE_LIBRARY_PATH, this._dependenciesPath].filter((p) => p).join(path.delimiter),
         };
         fs.writeFileSync(path.join(this._tempDir, 'METADATA'), Object.entries(exportVars)
             .map(([key, value]) => `${key}=${value}`)

package/dist/core/executors/javascript-execution-task.js

@@ -6,6 +6,7 @@ const fs = require("node:fs");
 const path = require("node:path");
 const execution_task_1 = require("./execution-task");
 const source_code_sanitizer_1 = require("./source-code-sanitizer");
+const child_process_1 = require("../../utils/child-process");
 /**
  * Task which handles native executions using child_process.
  */
@@ -18,11 +19,11 @@ class JavaScriptExecutionTask extends execution_task_1.default {
         const fcodeLibPath = path.join(__dirname, '..', '..', 'runtime', 'libs', 'node');
         const nodeModulesPath = path.join(this._dependenciesPath, 'node_modules');
         const forked = (0, node_child_process_1.fork)(path.resolve(this._execFilePath), {
-            env: {
+            env: (0, child_process_1.childEnv)({
                 FORCE_COLOR: 'true',
-                NODE_PATH: [nodeModulesPath, nodePath, fcodeLibPath].filter((p) => p).join(':'),
+                NODE_PATH: [nodeModulesPath, nodePath, fcodeLibPath].filter((p) => p).join(path.delimiter),
                 PATH: process.env.PATH,
-            },
+            }),
             silent: false,
         });
         return new Promise((resolve, reject) => {
@@ -45,7 +46,7 @@ class JavaScriptExecutionTask extends execution_task_1.default {
         if (this._options.hookFilePath) {
             const fn = this._options.hookFunction ?? 'main';
             return `
-const _hooksModule = require('${this._options.hookFilePath}')
+const _hooksModule = require(${JSON.stringify(this._options.hookFilePath)})
 const main = typeof _hooksModule['${fn}'] === 'function'
   ? _hooksModule['${fn}']
   : async () => undefined`;
@@ -56,7 +57,7 @@ const main = typeof _hooksModule['${fn}'] === 'function'
         }
         processPath.push('index.js');
         const fullPath = path.join(...processPath);
-        return `const { main }= require('${fullPath}')`;
+        return `const { main }= require(${JSON.stringify(fullPath)})`;
     }
     async _createExecutionFiles(tempDir) {
         if (!this._options.silent) {
@@ -64,7 +65,7 @@ const main = typeof _hooksModule['${fn}'] === 'function'
                 ? process.stdout.write(JSON.stringify({ timestamp: new Date().toISOString(), level: 'DEBUG', message: `Creating execution files for '${this._process.slug}' in ${tempDir}` }) + '\n')
                 : console.debug(`Creating execution files for '${this._process.slug}' in ${tempDir}`);
         }
-        const execFilePath = `${tempDir}/${this._process.slug}.js`;
+        const execFilePath = path.join(tempDir, `${this._process.slug}.js`);
         const metadata = this.getMetadata();
         const execution = metadata.execution;
         execution.id = '00000000-0000-0000-0000-000000000000';
@@ -117,7 +118,7 @@ const main = typeof _hooksModule['${fn}'] === 'function'
           const version = typeof tagOrOptions === 'string'
             ? tagOrOptions
             : (tagOrOptions && typeof tagOrOptions === 'object' ? tagOrOptions.version : undefined);
-          let modulePath = require('path').join('${process.cwd()}', 'modules', moduleName);
+          let modulePath = require('path').join(${JSON.stringify(process.cwd())}, 'modules', moduleName);
           if(version) {
             modulePath = require('path').join(modulePath, 'versions', version)
           }
@@ -151,7 +152,7 @@ const main = typeof _hooksModule['${fn}'] === 'function'
         datastore: {
           async save(datastore) {
             return new Promise((resolve, reject) => {
-              require('fs').writeFile(require('path').join('${process.cwd()}', 'datastore.json'), JSON.stringify(datastore, null, 2), (err) => {
+              require('fs').writeFile(require('path').join(${JSON.stringify(process.cwd())}, 'datastore.json'), JSON.stringify(datastore, null, 2), (err) => {
                 if (err) {
                   reject(err)
                 }
@@ -161,7 +162,7 @@ const main = typeof _hooksModule['${fn}'] === 'function'
           },
           getAll() {
             try {
-              return require(require('path').join('${process.cwd()}', 'datastore.json'));
+              return require(require('path').join(${JSON.stringify(process.cwd())}, 'datastore.json'));
             } catch (e) {
               return {}
             }
@@ -172,7 +173,10 @@ const main = typeof _hooksModule['${fn}'] === 'function'
             }
             throw new Error('Invalid argument type')
           },
-          async set(key, value) {
+          async set(key, value, encrypted) {
+            if (encrypted !== undefined && typeof encrypted !== 'boolean') {
+              throw new Error('Invalid encrypted flag. Encrypted must be a boolean.')
+            }
             if ((typeof key === 'string' || typeof key === 'number') && (typeof value === 'string' || typeof value === 'number')) {
               const datastore = this.getAll()
               datastore[key] = value
@@ -235,7 +239,7 @@ const main = typeof _hooksModule['${fn}'] === 'function'
               }
 
               try {
-                const storageDir = path.join('${process.cwd()}', 'storage')
+                const storageDir = path.join(${JSON.stringify(process.cwd())}, 'storage')
                 if (!fs.existsSync(storageDir)) {
                   fs.mkdirSync(storageDir)
                 }
@@ -338,7 +342,7 @@ const main = typeof _hooksModule['${fn}'] === 'function'
               throw new Error('Storage list failed: prefix must be a string')
             }
 
-            const storageDir = path.join('${process.cwd()}', 'storage')
+            const storageDir = path.join(${JSON.stringify(process.cwd())}, 'storage')
 
             if (!fs.existsSync(storageDir)) {
               return []
@@ -410,7 +414,7 @@ const main = typeof _hooksModule['${fn}'] === 'function'
                 return reject(new Error('Storage download failed: filename cannot be empty'))
               }
 
-              const filePath = path.join('${process.cwd()}', 'storage', filename)
+              const filePath = path.join(${JSON.stringify(process.cwd())}, 'storage', filename)
 
               if (!fs.existsSync(filePath)) {
                 return reject(new Error(\`Storage download failed: file not found - \${filename}\`))
@@ -448,7 +452,7 @@ const main = typeof _hooksModule['${fn}'] === 'function'
                 return reject(new Error('Storage delete failed: filename cannot be empty'))
               }
 
-              const filePath = path.join('${process.cwd()}', 'storage', filename)
+              const filePath = path.join(${JSON.stringify(process.cwd())}, 'storage', filename)
 
               if (!fs.existsSync(filePath)) {
                 return reject(new Error(\`Storage delete failed: file not found - \${filename}\`))
@@ -463,7 +467,7 @@ const main = typeof _hooksModule['${fn}'] === 'function'
                 fs.unlinkSync(filePath)
 
                 let dir = path.dirname(filePath)
-                const storageDir = path.join('${process.cwd()}', 'storage')
+                const storageDir = path.join(${JSON.stringify(process.cwd())}, 'storage')
 
                 while (dir !== storageDir && dir !== path.dirname(dir)) {
                   try {
@@ -501,7 +505,7 @@ const main = typeof _hooksModule['${fn}'] === 'function'
               throw new Error('Storage createSignedUrl failed: expiresInSeconds must be an integer between 1 and 604800')
             }
 
-            const filePath = path.join('${process.cwd()}', 'storage', filename)
+            const filePath = path.join(${JSON.stringify(process.cwd())}, 'storage', filename)
 
             if (!fs.existsSync(filePath)) {
               throw new Error(\`Storage createSignedUrl failed: file not found - \${filename}\`)
@@ -532,7 +536,7 @@ const main = typeof _hooksModule['${fn}'] === 'function'
         },
         variables: (() => {
           const fs = require('fs');
-          const localEnvPath = require('path').join('${process.cwd()}', 'variables.local.env');
+          const localEnvPath = require('path').join(${JSON.stringify(process.cwd())}, 'variables.local.env');
           const baseVars = ${JSON.stringify(metadata.variables, null, 2)};
           const readLocal = () => { try { return fs.readFileSync(localEnvPath, 'utf8') } catch { return '' } };
           const parseEnv = (text) => {

package/dist/core/executors/python-execution-task.js

@@ -7,15 +7,16 @@ const errors_1 = require("../errors");
 const execution_task_1 = require("./execution-task");
 const workspace_1 = require("../../config/workspace");
 const source_code_sanitizer_1 = require("./source-code-sanitizer");
+const child_process_1 = require("../../utils/child-process");
 class PythonExecutionTask extends execution_task_1.default {
     async run() {
         if (!this._execFilePath) {
             this.prepare();
         }
         const venvPath = (0, workspace_1.baseDependenciesPath)(this._programmingLanguage);
-        const forked = (0, node_child_process_1.spawn)(`${venvPath}/bin/python3`, ['-u', path.resolve(this._execFilePath)], {
+        const forked = (0, node_child_process_1.spawn)((0, child_process_1.venvPythonPath)(venvPath), ['-u', path.resolve(this._execFilePath)], {
             stdio: 'inherit',
-            env: {},
+            env: (0, child_process_1.childEnv)({}),
         });
         return new Promise((resolve, reject) => {
             forked.on('exit', (code) => {
@@ -76,7 +77,7 @@ _builtins.print = _json_print
             return `import fcode as _imported_fcode_module
 ${jsonLogsSetup}
 import importlib.util as _importlib_util
-_spec = _importlib_util.spec_from_file_location("hooks", "${this._options.hookFilePath}")
+_spec = _importlib_util.spec_from_file_location("hooks", ${JSON.stringify(this._options.hookFilePath)})
 _hooks_module = _importlib_util.module_from_spec(_spec)
 _spec.loader.exec_module(_hooks_module)
 _hook_fn = getattr(_hooks_module, '${fn}', None)
@@ -143,8 +144,8 @@ if (hasattr(process, 'main')):
                 ? process.stdout.write(JSON.stringify({ timestamp: new Date().toISOString(), level: 'DEBUG', message: `Creating execution files for '${this._process.slug}' in ${tempDir}` }) + '\n')
                 : console.debug(`Creating execution files for '${this._process.slug}' in ${tempDir}`);
         }
-        const execFilePath = `${tempDir}/${this._process.slug}.py`;
-        const libraryFilePath = `${tempDir}/initialize_params.py`;
+        const execFilePath = path.join(tempDir, `${this._process.slug}.py`);
+        const libraryFilePath = path.join(tempDir, 'initialize_params.py');
         fs.writeFileSync(libraryFilePath, JSON.stringify(this.getMetadata()));
         fs.writeFileSync(execFilePath, `
 import sys
@@ -152,13 +153,13 @@ import os
 import json
 import traceback
 
-sys.path.append('${path.join(this._dependenciesPath)}')
-sys.path.append('${path.join(__dirname, '..', '..', 'runtime', 'libs', 'python')}')
+sys.path.append(${JSON.stringify(this._dependenciesPath)})
+sys.path.append(${JSON.stringify(path.join(__dirname, '..', '..', 'runtime', 'libs', 'python'))})
 
 os.environ['FCODE_LOG_LEVEL'] = '${this._options.logLevel}'
-os.environ['FCODE_RUNTIME_METADATA_PATH'] = '${libraryFilePath}'
-os.environ['FCODE_RETURN_FILE'] = '${this.returnValueFilePath}'
-os.environ['FCODE_ERROR_FILE'] = '${this.errorValueFilePath}'
+os.environ['FCODE_RUNTIME_METADATA_PATH'] = ${JSON.stringify(libraryFilePath)}
+os.environ['FCODE_RETURN_FILE'] = ${JSON.stringify(this.returnValueFilePath)}
+os.environ['FCODE_ERROR_FILE'] = ${JSON.stringify(this.errorValueFilePath)}
 ${this._options.jsonLogs ? `os.environ['FCODE_JSON_LOGS'] = 'true'` : ''}
 ${Object.entries(this.getVariablesObject()).map(([key, value]) => `if '${key}' not in os.environ: os.environ['${key}'] = ${JSON.stringify(value)}`).join('\n')}
 

package/dist/core/resource-pusher.js

@@ -15,14 +15,16 @@ class ResourcePusher {
     }
     async push(remoteResources, localResources, force) {
         cli_1.default.log(`\n🌩️  Pushing ${this._repository._repositoryName}...`);
-        for (const resource of localResources.filter((resource) => resource.resolvingTeamSlug)) {
+        // Neither an inherited resource nor a deleted one the cloud keeps for its versions is pushed:
+        // the first is the parent's, the second only exists through what was already published.
+        for (const resource of localResources.filter((resource) => (0, types_1.isReadOnly)(resource))) {
             if (await resource_checker_1.default.localResourceHasBeenModified(undefined, resource)) {
-                cli_1.default.log(color_1.default.red(`🚨 '${resource.slug}' is inherited from team '${resource.resolvingTeamSlug}' and is read-only. ` +
+                cli_1.default.log(color_1.default.red(`🚨 '${resource.slug}' is ${(0, types_1.readOnlyReason)(resource)} and is read-only. ` +
                     `Run 'fcode ${this._repository._repositoryName}:pull' to restore it before pushing.`));
             }
         }
-        localResources = localResources.filter((resource) => !resource.resolvingTeamSlug);
-        remoteResources = remoteResources.filter((resource) => !resource.resolvingTeamSlug);
+        localResources = localResources.filter((resource) => !(0, types_1.isReadOnly)(resource));
+        remoteResources = remoteResources.filter((resource) => !(0, types_1.isReadOnly)(resource));
         if (this._repository._repositoryName === 'variables') {
             const localVariables = localResources;
             const remoteVariables = remoteResources;
@@ -115,11 +117,12 @@ class ResourcePusher {
     }
     async removeResource(resource) {
         try {
+            let removed;
             if (this._repository._repositoryName === 'processes') {
-                await this._fcodeGraphQLClient.removeProcess(resource.id);
+                removed = await this._fcodeGraphQLClient.removeProcess(resource.id);
             }
             if (this._repository._repositoryName === 'modules') {
-                await this._fcodeGraphQLClient.removeScriptLibrary(resource.id);
+                removed = await this._fcodeGraphQLClient.removeScriptLibrary(resource.id);
             }
             if (this._repository._repositoryName === 'variables') {
                 await this._fcodeGraphQLClient.removeVariable(resource.id);
@@ -127,7 +130,10 @@ class ResourcePusher {
             if (this._repository._repositoryName === 'i18n') {
                 // By identifier, not slug: an inherited locale is tracked under a qualified slug, and only
                 // this workspace's own locales — where the two coincide — ever reach a remote delete.
-                await this._fcodeGraphQLClient.removeLocale(resource.locale);
+                removed = await this._fcodeGraphQLClient.removeLocale(resource.locale);
+            }
+            if (removed?.deletedAt) {
+                cli_1.default.log(color_1.default.yellow(`📌 '${resource.slug}' is kept as deleted: workspace version(s) ${removed.retainingVersionTags.join(', ')} still contain it.`));
             }
             this._repository.removeMetadata(resource.slug);
         }

package/dist/core/types.d.ts

@@ -72,14 +72,27 @@ export interface WorkspaceConfig {
 export type ResourceRepositoryOptions = {
     name: string;
 };
+/**
+ * Why a deleted resource is still in the cloud: a workspace version contains one of its published
+ * snapshots. The row is read-only there and goes for good once the last of those versions does.
+ */
+export type Deletion = {
+    deletedAt: string;
+    retainingVersionTags: string[];
+};
 export declare abstract class Resource {
     abstract readonly contentHash: string;
     id: string | undefined;
     slug: string;
     errorPushing: boolean | undefined;
     resolvingTeamSlug?: string;
+    deletion?: Deletion;
     sameAs(other: Resource): boolean;
 }
+/** Whether the workspace may edit the resource: neither a parent's nor a deleted one is its to change. */
+export declare const isReadOnly: (resource: Resource) => boolean;
+/** The sentence `push` and `diff` use to say why a resource is not the workspace's to change. */
+export declare const readOnlyReason: (resource: Resource) => string | undefined;
 export declare enum OnConflictResolution {
     KEEP_LOCAL = 0,
     KEEP_REMOTE = 1
@@ -185,7 +198,7 @@ export declare class Process extends Resource {
         dependencies: {
             scopedToProcess: boolean;
         };
-    }, metadata: ProcessMetadataFields, resolvingTeamSlug?: string);
+    }, metadata: ProcessMetadataFields, resolvingTeamSlug?: string, deletion?: Deletion);
     get contentHash(): string;
 }
 export declare class VersionedProcess extends Resource {
@@ -207,7 +220,7 @@ export declare class ScriptLibrary extends Resource {
     name: string;
     programmingLanguage: ProgrammingLanguage;
     sourceCode: string;
-    constructor(id: string, name: string, sourceCode: string, programmingLanguage: ProgrammingLanguage, resolvingTeamSlug?: string);
+    constructor(id: string, name: string, sourceCode: string, programmingLanguage: ProgrammingLanguage, resolvingTeamSlug?: string, deletion?: Deletion);
     get contentHash(): string;
 }
 export declare class Locale extends Resource {
@@ -217,7 +230,7 @@ export declare class Locale extends Resource {
     slug: string;
     locale: string;
     content: string;
-    constructor(id: string | undefined, locale: string, content: string, resolvingTeamSlug?: string);
+    constructor(id: string | undefined, locale: string, content: string, resolvingTeamSlug?: string, deletion?: Deletion);
     /**
      * The name a locale is tracked and stored under. Unlike every other resource, the identifier is
      * not unique: a workspace sees its own `en` and each parent workspace's `en`, and all of them are