@factorialco/fcode-cli 3.2.0 → 3.3.0

package/dist/core/types.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ServiceAccount = exports.Dependency = exports.DependenciesFlags = exports.TeamNameArg = exports.ShowInheritedFlag = exports.ResourceSlugArg = exports.ForceFlag = exports.ScriptLibraryNotFound = exports.ProcessNotFound = exports.WorkspaceSettings = exports.ProgrammingLanguageManifest = exports.Variable = exports.VersionedProgrammingLanguageManifest = exports.VersionedScriptLibrary = exports.Locale = exports.ScriptLibrary = exports.VersionedProcess = exports.Process = exports.DEFAULT_WEBHOOK_AUTH_HEADER = exports.programmingLanguageDisplayName = exports.PROGRAMMING_LANGUAGES = exports.ResourceStatus = exports.OnConflictResolution = exports.Resource = void 0;
+exports.ServiceAccount = exports.Dependency = exports.DependenciesFlags = exports.TeamNameArg = exports.ShowInheritedFlag = exports.ResourceSlugArg = exports.ForceFlag = exports.ScriptLibraryNotFound = exports.ProcessNotFound = exports.WorkspaceSettings = exports.ProgrammingLanguageManifest = exports.Variable = exports.VersionedProgrammingLanguageManifest = exports.VersionedScriptLibrary = exports.Locale = exports.ScriptLibrary = exports.VersionedProcess = exports.Process = exports.DEFAULT_WEBHOOK_AUTH_HEADER = exports.programmingLanguageDisplayName = exports.PROGRAMMING_LANGUAGES = exports.ResourceStatus = exports.OnConflictResolution = exports.readOnlyReason = exports.isReadOnly = exports.Resource = void 0;
 const core_1 = require("@oclif/core");
 const crypto = require("node:crypto");
 const canonical_hash_1 = require("../utils/canonical-hash");
@@ -10,6 +10,27 @@ class Resource {
     }
 }
 exports.Resource = Resource;
+/** Whether the workspace may edit the resource: neither a parent's nor a deleted one is its to change. */
+const isReadOnly = (resource) => Boolean(resource.resolvingTeamSlug || resource.deletion);
+exports.isReadOnly = isReadOnly;
+/** The sentence `push` and `diff` use to say why a resource is not the workspace's to change. */
+const readOnlyReason = (resource) => {
+    if (resource.resolvingTeamSlug) {
+        return `inherited from team '${resource.resolvingTeamSlug}'`;
+    }
+    if (resource.deletion) {
+        return `deleted in the cloud and kept by workspace version(s) ${resource.deletion.retainingVersionTags.join(', ')}`;
+    }
+    return undefined;
+};
+exports.readOnlyReason = readOnlyReason;
+/**
+ * The deletion as it enters a content hash. A deleted resource must read as changed the moment the
+ * cloud deletes it — or brings it back — so a pull marks its files read-only (or writable again)
+ * even though their content did not move; a live resource contributes nothing, so no stored hash
+ * changes for it.
+ */
+const deletionHashPart = (deletion) => deletion ? JSON.stringify({ deletedAt: deletion.deletedAt, retainingVersionTags: [...deletion.retainingVersionTags].sort() }) : '';
 var OnConflictResolution;
 (function (OnConflictResolution) {
     OnConflictResolution[OnConflictResolution["KEEP_LOCAL"] = 0] = "KEEP_LOCAL";
@@ -41,10 +62,11 @@ exports.programmingLanguageDisplayName = programmingLanguageDisplayName;
 // The header assumed when none is configured; its value carries a Bearer scheme.
 exports.DEFAULT_WEBHOOK_AUTH_HEADER = 'Authorization';
 class Process extends Resource {
-    constructor(id, slug, script, readme, manifest, settings, metadata, resolvingTeamSlug) {
+    constructor(id, slug, script, readme, manifest, settings, metadata, resolvingTeamSlug, deletion) {
         super();
         this.id = id;
         this.slug = slug;
+        this.deletion = deletion;
         this.name = metadata.name;
         this.description = metadata.description;
         this.tags = metadata.tags;
@@ -72,6 +94,7 @@ class Process extends Resource {
             ...(this.uiTrigger && { uiTrigger: this.uiTrigger }),
             manifestDependencies: this.manifest.dependencies,
             dependenciesScopedToProcess: this.settings.dependencies.scopedToProcess,
+            ...(this.deletion && { deletion: deletionHashPart(this.deletion) }),
         });
     }
 }
@@ -94,7 +117,7 @@ class VersionedProcess extends Resource {
 }
 exports.VersionedProcess = VersionedProcess;
 class ScriptLibrary extends Resource {
-    constructor(id, name, sourceCode, programmingLanguage, resolvingTeamSlug) {
+    constructor(id, name, sourceCode, programmingLanguage, resolvingTeamSlug, deletion) {
         super();
         this.id = id;
         this.slug = name;
@@ -102,20 +125,22 @@ class ScriptLibrary extends Resource {
         this.sourceCode = sourceCode;
         this.programmingLanguage = programmingLanguage;
         this.resolvingTeamSlug = resolvingTeamSlug;
+        this.deletion = deletion;
     }
     get contentHash() {
-        return crypto.createHash('md5').update(this.sourceCode).digest('hex');
+        return crypto.createHash('md5').update(this.sourceCode).update(deletionHashPart(this.deletion)).digest('hex');
     }
 }
 exports.ScriptLibrary = ScriptLibrary;
 class Locale extends Resource {
-    constructor(id, locale, content, resolvingTeamSlug) {
+    constructor(id, locale, content, resolvingTeamSlug, deletion) {
         super();
         this.id = id;
         this.slug = Locale.slugFor(locale, resolvingTeamSlug);
         this.locale = locale;
         this.content = content;
         this.resolvingTeamSlug = resolvingTeamSlug;
+        this.deletion = deletion;
     }
     /**
      * The name a locale is tracked and stored under. Unlike every other resource, the identifier is
@@ -133,7 +158,7 @@ class Locale extends Resource {
     // Hashed over the raw YAML: the file is the source of truth and round-trips comments and
     // ordering, so any edit — even one that parses to the same translations — is a change to push.
     get contentHash() {
-        return crypto.createHash('md5').update(this.content).digest('hex');
+        return crypto.createHash('md5').update(this.content).update(deletionHashPart(this.deletion)).digest('hex');
     }
 }
 exports.Locale = Locale;

package/dist/repositories/locale.js

@@ -32,7 +32,7 @@ class LocaleRepository extends resource_1.default {
         }
         try {
             const content = fs.readFileSync(this.getResourcePath(localeMetadata)).toString();
-            return new types_1.Locale(localeMetadata.id, localeMetadata.locale ?? slug, content, localeMetadata.resolvingTeamSlug);
+            return new types_1.Locale(localeMetadata.id, localeMetadata.locale ?? slug, content, localeMetadata.resolvingTeamSlug, localeMetadata.deletion);
         }
         catch (error) {
             throw new errors_1.LocalLocaleNotFound(error, slug);
@@ -78,12 +78,14 @@ class LocaleRepository extends resource_1.default {
             locale: locale.locale,
             slug: locale.slug,
             ...(locale.resolvingTeamSlug && { resolvingTeamSlug: locale.resolvingTeamSlug }),
+            ...(locale.deletion && { deletion: locale.deletion }),
         };
     }
     async saveFiles(locale) {
         // Inherited locales are written read-only, like inherited modules: they belong to a parent
-        // workspace, and editing one here would push an override rather than change the parent.
-        (0, file_utils_1.outputFileSyncIfChanged)(this.getResourcePath(locale), locale.content || '', { readOnly: Boolean(locale.resolvingTeamSlug) });
+        // workspace, and editing one here would push an override rather than change the parent. A
+        // deleted locale is read-only too: only its versions are still resolved.
+        (0, file_utils_1.outputFileSyncIfChanged)(this.getResourcePath(locale), locale.content || '', { readOnly: (0, types_1.isReadOnly)(locale) });
     }
     async metadataFromFiles(slug) {
         return {

package/dist/repositories/process.js

@@ -147,7 +147,7 @@ class ProcessRepository extends resource_1.default {
             const manifest = isDependenciesFilePresent
                 ? { dependencies: (0, dependencies_1.dependenciesFromFile)(processMetadata.script.programmingLanguage, fs.readFileSync(dependenciesFile).toString()) }
                 : null;
-            return new types_1.Process(processMetadata.id, processMetadata.slug, { parametersSchema, programmingLanguage: processMetadata.script.programmingLanguage, sourceCode }, readme, manifest, { dependencies: { scopedToProcess: isDependenciesFilePresent } }, metadata, processMetadata.resolvingTeamSlug);
+            return new types_1.Process(processMetadata.id, processMetadata.slug, { parametersSchema, programmingLanguage: processMetadata.script.programmingLanguage, sourceCode }, readme, manifest, { dependencies: { scopedToProcess: isDependenciesFilePresent } }, metadata, processMetadata.resolvingTeamSlug, processMetadata.deletion);
         }
         catch {
             throw new Error(`Process ${processSlug} not found!`);
@@ -229,6 +229,7 @@ class ProcessRepository extends resource_1.default {
                 programmingLanguage: process.script.programmingLanguage,
             },
             ...(process.resolvingTeamSlug && { resolvingTeamSlug: process.resolvingTeamSlug }),
+            ...(process.deletion && { deletion: process.deletion }),
         };
     }
     async metadataFromFiles(slug) {
@@ -243,7 +244,8 @@ class ProcessRepository extends resource_1.default {
         };
     }
     async saveFiles(process) {
-        const readOnly = Boolean(process.resolvingTeamSlug);
+        // A deleted process is kept exactly as its versions left it, like an inherited one: read-only.
+        const readOnly = (0, types_1.isReadOnly)(process);
         (0, file_utils_1.outputFileSyncIfChanged)(this.buildResourcePath(process, this.getSourceCodeFileName(process.script.programmingLanguage)), process.script.sourceCode || '', {
             readOnly,
         });

package/dist/repositories/script-library.js

@@ -25,7 +25,7 @@ class ScriptLibraryRepository extends resource_1.default {
         const sourceCodeFile = fs.readFileSync(this.getResourcePath(scriptLibraryMetadata));
         try {
             const sourceCode = sourceCodeFile.toString();
-            return new types_1.ScriptLibrary(scriptLibraryMetadata.id, scriptLibraryMetadata.name, sourceCode, scriptLibraryMetadata.programmingLanguage, scriptLibraryMetadata.resolvingTeamSlug);
+            return new types_1.ScriptLibrary(scriptLibraryMetadata.id, scriptLibraryMetadata.name, sourceCode, scriptLibraryMetadata.programmingLanguage, scriptLibraryMetadata.resolvingTeamSlug, scriptLibraryMetadata.deletion);
         }
         catch (error) {
             throw new errors_1.LocalScriptLibraryNotFound(error, slug);
@@ -83,10 +83,11 @@ class ScriptLibraryRepository extends resource_1.default {
             slug: scriptLibrary.slug,
             programmingLanguage: scriptLibrary.programmingLanguage,
             ...(scriptLibrary.resolvingTeamSlug && { resolvingTeamSlug: scriptLibrary.resolvingTeamSlug }),
+            ...(scriptLibrary.deletion && { deletion: scriptLibrary.deletion }),
         };
     }
     async saveFiles(scriptLibrary) {
-        (0, file_utils_1.outputFileSyncIfChanged)(this.getResourcePath(scriptLibrary), scriptLibrary.sourceCode || '', { readOnly: Boolean(scriptLibrary.resolvingTeamSlug) });
+        (0, file_utils_1.outputFileSyncIfChanged)(this.getResourcePath(scriptLibrary), scriptLibrary.sourceCode || '', { readOnly: (0, types_1.isReadOnly)(scriptLibrary) });
     }
     versionsDirectory(scriptLibrary) {
         return path.join(this._repositoryName, this.resourceDirectoryName(scriptLibrary), 'versions');

package/dist/runtime/libs/python/fcode/datastore.py

@@ -21,7 +21,9 @@ class Datastore:
             return self.getAll().get(key, None)
         raise TypeError("Invalid argument type")
 
-    def set(self, key, value):
+    def set(self, key, value, encrypted=False):
+        if not isinstance(encrypted, bool):
+            raise TypeError("Invalid encrypted flag. Encrypted must be a boolean.")
         if isinstance(key, (str, int)) and isinstance(value, (str, int)):
             datastore = self.getAll()
             datastore[key] = value

package/dist/services/fcode-graphql-client.d.ts

@@ -1,5 +1,14 @@
 import { GraphQLClient } from 'graphql-request';
 import { Locale, Process, ProgrammingLanguage, ProgrammingLanguageManifest, RawTeamSettings, ScriptLibrary, TeamUpdateInput, TeamVersion, TeamVersionAlias, Variable, VersionedProcess, VersionedProgrammingLanguageManifest, VersionedScriptLibrary, ServiceAccount } from '../core/types';
+/**
+ * What a delete mutation answers. `deletedAt` is set when the entity was kept as deleted because a
+ * workspace version still contains it; `retainingVersionTags` names those versions.
+ */
+export interface RemovedResource {
+    id: string;
+    deletedAt: string | null;
+    retainingVersionTags: string[];
+}
 export type FcodeGraphQLClientOptions = {
     url: string;
     accessToken: string;
@@ -16,10 +25,17 @@ declare class FcodeGraphQLClient {
     cleanError(error: any): any;
     private cloudUnavailableMessage;
     private isNetworkError;
-    allProcesses(): Promise<Array<Process>>;
+    /**
+     * Every process of the workspace, the deleted ones a workspace version still contains included:
+     * they are pulled read-only with their versions, so the local copy keeps what the versions run.
+     * An api that predates deleted-marked processes rejects the query over the unknown field, and
+     * the fallback lists the live ones as it always did.
+     */
+    allProcesses(includeDeleted?: boolean): Promise<Array<Process>>;
     allVersionedProcesses(processId: string): Promise<Array<VersionedProcess>>;
     createVersionedProcesses(versionedProcess: VersionedProcess): Promise<void>;
-    allScriptLibraries(): Promise<Array<ScriptLibrary>>;
+    /** Same deleted-inclusive listing, and the same fallback, as {@link allProcesses}. */
+    allScriptLibraries(includeDeleted?: boolean): Promise<Array<ScriptLibrary>>;
     allVersionedScriptLibraries(scriptLibraryId: string): Promise<Array<VersionedScriptLibrary>>;
     createVersionedScriptLibrary(versionedScriptLibrary: VersionedScriptLibrary): Promise<void>;
     allVariables(): Promise<Array<Variable>>;
@@ -29,26 +45,29 @@ declare class FcodeGraphQLClient {
      * kept twice here — an override is layered over the parent's file key by key, so the parent's
      * keys are still what the ones it does not mention resolve to.
      */
-    allLocales(): Promise<Array<Locale>>;
+    allLocales(includeDeleted?: boolean): Promise<Array<Locale>>;
+    private fetchLocales;
     pushLocale(locale: Locale): Promise<Locale>;
     updateLocale(locale: Locale): Promise<Locale>;
-    removeLocale(locale: string | undefined): Promise<void>;
+    removeLocale(locale: string | undefined): Promise<RemovedResource>;
     private toProcessInput;
     pushProcess(process: Process): Promise<Process>;
-    removeProcess(id: String | undefined): Promise<Process>;
+    removeProcess(id: String | undefined): Promise<RemovedResource>;
     pushScriptLibrary(scriptLibrary: ScriptLibrary): Promise<ScriptLibrary>;
-    removeScriptLibrary(id: String | undefined): Promise<Process>;
+    removeScriptLibrary(id: String | undefined): Promise<RemovedResource>;
     pushVariable(variable: Variable): Promise<Variable>;
     updateVariable(variable: Variable): Promise<Variable>;
     removeVariable(id: String | undefined): Promise<Process>;
     programmingLanguageManifest(programmingLanguage: ProgrammingLanguage): Promise<ProgrammingLanguageManifest>;
     private inheritedTeam;
+    private deletionOf;
+    private isUndefinedDeletionFieldError;
     /**
      * The public mode and the default header name are left out, so a public webhook — or one
      * using the default header — keeps the metadata.json it already had on disk.
      */
     private mapWebhook;
-    mapProcess({ id, slug, name, description, tags, script, readme, manifest, settings, triggers, resolvingTeamSlug }: any): Process;
+    mapProcess({ id, slug, name, description, tags, script, readme, manifest, settings, triggers, resolvingTeamSlug, deletedAt, retainingVersionTags }: any): Process;
     /**
      * GraphQL nests the webhook configuration under `settings`, while settings.json and the REST API
      * keep it flat. Mapping it explicitly is what keeps that mismatch from silently reading as

package/dist/services/fcode-graphql-client.js

@@ -33,6 +33,13 @@ const TEAM_VERSION_ALIAS_FIELDS = `
   createdAt
   updatedAt
 `;
+// What a list query adds to know a deleted resource a workspace version still contains. Asked
+// for together with `includeDeleted`, and dropped as one when the api predates them.
+const DELETION_FIELDS = `
+  deletedAt
+  retainingVersionTags
+`;
+const DELETION_QUERY_FIELDS = ['includeDeleted', 'deletedAt', 'retainingVersionTags'];
 // Shared process selection so pull queries and push mutations return the same
 // fields, keeping mapProcess (and therefore contentHash) consistent.
 const PROCESS_FIELDS = `
@@ -154,24 +161,35 @@ class FcodeGraphQLClient {
         const message = typeof error?.message === 'string' ? error.message : '';
         return NETWORK_ERROR_CODES.some((code) => message.includes(code)) || message.includes('fetch failed');
     }
-    allProcesses() {
+    /**
+     * Every process of the workspace, the deleted ones a workspace version still contains included:
+     * they are pulled read-only with their versions, so the local copy keeps what the versions run.
+     * An api that predates deleted-marked processes rejects the query over the unknown field, and
+     * the fallback lists the live ones as it always did.
+     */
+    allProcesses(includeDeleted = true) {
         return this.client
             .request((0, graphql_request_1.gql) `
-          query processes($first: Int!, $after: String) {
-            processes(first: $first, after: $after) {
+          query processes($filter: ProcessesFilter, $first: Int!, $after: String) {
+            processes(filter: $filter, first: $first, after: $after) {
               edges {
                 node {
                   ${PROCESS_FIELDS}
+                  ${includeDeleted ? DELETION_FIELDS : ''}
                 }
               }
             }
           }
         `, {
+            filter: includeDeleted ? { includeDeleted: true } : null,
             after: null,
             first: 200,
         })
             .then(({ processes: { edges } }) => edges.map(({ node: process }) => this.mapProcess(process)))
             .catch((error) => {
+            if (includeDeleted && this.isUndefinedDeletionFieldError(error)) {
+                return this.allProcesses(false);
+            }
             return Promise.reject(this.cleanError(error));
         });
     }
@@ -217,11 +235,12 @@ class FcodeGraphQLClient {
             return Promise.reject(this.cleanError(error));
         });
     }
-    allScriptLibraries() {
+    /** Same deleted-inclusive listing, and the same fallback, as {@link allProcesses}. */
+    allScriptLibraries(includeDeleted = true) {
         return this.client
             .request((0, graphql_request_1.gql) `
-          query scriptLibraries($first: Int!, $after: String) {
-            scriptLibraries(first: $first, after: $after) {
+          query scriptLibraries($filter: ScriptLibrariesFilter, $first: Int!, $after: String) {
+            scriptLibraries(filter: $filter, first: $first, after: $after) {
               edges {
                 node {
                   id
@@ -229,16 +248,21 @@ class FcodeGraphQLClient {
                   sourceCode
                   programmingLanguage
                   resolvingTeamSlug
+                  ${includeDeleted ? DELETION_FIELDS : ''}
                 }
               }
             }
           }
         `, {
+            filter: includeDeleted ? { includeDeleted: true } : null,
             after: null,
             first: 200,
         })
-            .then(({ scriptLibraries: { edges } }) => edges.map(({ node: { id, name, programmingLanguage, sourceCode, resolvingTeamSlug } }) => new types_1.ScriptLibrary(id, name, sourceCode || '', programmingLanguage, this.inheritedTeam(resolvingTeamSlug))))
+            .then(({ scriptLibraries: { edges } }) => edges.map(({ node: { id, name, programmingLanguage, sourceCode, resolvingTeamSlug, deletedAt, retainingVersionTags } }) => new types_1.ScriptLibrary(id, name, sourceCode || '', programmingLanguage, this.inheritedTeam(resolvingTeamSlug), this.deletionOf(deletedAt, retainingVersionTags))))
             .catch((error) => {
+            if (includeDeleted && this.isUndefinedDeletionFieldError(error)) {
+                return this.allScriptLibraries(false);
+            }
             return Promise.reject(this.cleanError(error));
         });
     }
@@ -325,40 +349,16 @@ class FcodeGraphQLClient {
      * kept twice here — an override is layered over the parent's file key by key, so the parent's
      * keys are still what the ones it does not mention resolve to.
      */
-    async allLocales() {
-        const pageSize = 200;
-        const locales = [];
-        let after = null;
+    async allLocales(includeDeleted = true) {
+        let locales;
         try {
-            do {
-                const { locales: { edges, pageInfo }, } = await this.client.request((0, graphql_request_1.gql) `
-            query locales($first: Int!, $after: String) {
-              locales(first: $first, after: $after) {
-                edges {
-                  node {
-                    id
-                    locale
-                    content
-                    resolvingTeamSlug
-                  }
-                }
-                pageInfo {
-                  hasNextPage
-                  endCursor
-                }
-              }
-            }
-          `, {
-                    after,
-                    first: pageSize,
-                });
-                for (const { node: { id, locale, content, resolvingTeamSlug }, } of edges) {
-                    locales.push(new types_1.Locale(id, locale, content, this.inheritedTeam(resolvingTeamSlug)));
-                }
-                after = pageInfo?.hasNextPage ? pageInfo.endCursor : null;
-            } while (after);
+            locales = await this.fetchLocales(includeDeleted);
         }
         catch (error) {
+            // Same fallback as allProcesses: an api that predates deleted-marked locales lists the live ones.
+            if (includeDeleted && this.isUndefinedDeletionFieldError(error)) {
+                return this.allLocales(false);
+            }
             return Promise.reject(this.cleanError(error));
         }
         // The cloud team's parent order is the inheritance precedence the merge must replicate; the
@@ -368,6 +368,41 @@ class FcodeGraphQLClient {
         (0, locale_merger_1.assertLocaleFilesCanCoexist)(merged);
         return merged;
     }
+    async fetchLocales(includeDeleted) {
+        const pageSize = 200;
+        const locales = [];
+        let after = null;
+        do {
+            const { locales: { edges, pageInfo }, } = await this.client.request((0, graphql_request_1.gql) `
+          query locales($filter: LocalesFilter, $first: Int!, $after: String) {
+            locales(filter: $filter, first: $first, after: $after) {
+              edges {
+                node {
+                  id
+                  locale
+                  content
+                  resolvingTeamSlug
+                  ${includeDeleted ? DELETION_FIELDS : ''}
+                }
+              }
+              pageInfo {
+                hasNextPage
+                endCursor
+              }
+            }
+          }
+        `, {
+                filter: includeDeleted ? { includeDeleted: true } : null,
+                after,
+                first: pageSize,
+            });
+            for (const { node: { id, locale, content, resolvingTeamSlug, deletedAt, retainingVersionTags }, } of edges) {
+                locales.push(new types_1.Locale(id, locale, content, this.inheritedTeam(resolvingTeamSlug), this.deletionOf(deletedAt, retainingVersionTags)));
+            }
+            after = pageInfo?.hasNextPage ? pageInfo.endCursor : null;
+        } while (after);
+        return locales;
+    }
     pushLocale(locale) {
         return this.client
             .request((0, graphql_request_1.gql) `
@@ -417,12 +452,14 @@ class FcodeGraphQLClient {
           mutation deleteLocale($locale: String!) {
             deleteLocale(locale: $locale) {
               id
+              deletedAt
+              retainingVersionTags
             }
           }
         `, {
             locale,
         })
-            .then(() => undefined)
+            .then((data) => data.deleteLocale)
             .catch((error) => {
             return Promise.reject(this.cleanError(error));
         });
@@ -531,11 +568,14 @@ class FcodeGraphQLClient {
           mutation deleteProcess($id: ID!) {
             deleteProcess(id: $id) {
               id
+              deletedAt
+              retainingVersionTags
             }
           }
         `, {
             id,
         })
+            .then((data) => data.deleteProcess)
             .catch((error) => {
             return Promise.reject(this.cleanError(error));
         });
@@ -590,11 +630,14 @@ class FcodeGraphQLClient {
           mutation deleteScriptLibrary($id: ID!) {
             deleteScriptLibrary(id: $id) {
               id
+              deletedAt
+              retainingVersionTags
             }
           }
         `, {
             id,
         })
+            .then((data) => data.deleteScriptLibrary)
             .catch((error) => {
             return Promise.reject(this.cleanError(error));
         });
@@ -725,6 +768,12 @@ class FcodeGraphQLClient {
     inheritedTeam(resolvingTeamSlug) {
         return resolvingTeamSlug && resolvingTeamSlug !== this.teamSlug ? resolvingTeamSlug : undefined;
     }
+    deletionOf(deletedAt, retainingVersionTags) {
+        return deletedAt ? { deletedAt, retainingVersionTags: retainingVersionTags ?? [] } : undefined;
+    }
+    isUndefinedDeletionFieldError(error) {
+        return DELETION_QUERY_FIELDS.some((field) => this.isUndefinedFieldError(error, field));
+    }
     /**
      * The public mode and the default header name are left out, so a public webhook — or one
      * using the default header — keeps the metadata.json it already had on disk.
@@ -747,7 +796,7 @@ class FcodeGraphQLClient {
         }
         return webhook;
     }
-    mapProcess({ id, slug, name, description, tags, script, readme, manifest, settings, triggers, resolvingTeamSlug }) {
+    mapProcess({ id, slug, name, description, tags, script, readme, manifest, settings, triggers, resolvingTeamSlug, deletedAt, retainingVersionTags }) {
         const dependencies = _.map(manifest?.dependencies, (dependency) => {
             return { name: dependency.name, specifier: dependency.gitUrl ?? dependency.semVer };
         });
@@ -783,7 +832,7 @@ class FcodeGraphQLClient {
                 metadata.uiTrigger.awaitResult = true;
             }
         }
-        return new types_1.Process(id, slug, script, readme, { dependencies }, settings, metadata, this.inheritedTeam(resolvingTeamSlug));
+        return new types_1.Process(id, slug, script, readme, { dependencies }, settings, metadata, this.inheritedTeam(resolvingTeamSlug), this.deletionOf(deletedAt, retainingVersionTags));
     }
     /**
      * GraphQL nests the webhook configuration under `settings`, while settings.json and the REST API

package/dist/services/skills-installer.js

@@ -3,9 +3,9 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.installSkillsAt = installSkillsAt;
 exports.skillsInstalledAt = skillsInstalledAt;
 exports.linkSkillsInto = linkSkillsInto;
-const node_child_process_1 = require("node:child_process");
 const fs = require("fs-extra");
 const path = require("node:path");
+const child_process_1 = require("../utils/child-process");
 const cli_1 = require("../utils/cli");
 // Skill sources installed on clone. `release-sdk` in factorial-api-sdks is a
 // maintainer-only skill, so we pick `factorial-api-sdks` explicitly there.
@@ -24,7 +24,7 @@ async function installSkills(repo, skills, cwd) {
     // the skills CLI defaults: project scope (no -g), symlinked (no --copy).
     const skillsArgs = ['--yes', 'skills', 'add', repo, '-s', skills, '-y'];
     await new Promise((resolve) => {
-        const child = (0, node_child_process_1.spawn)('npx', skillsArgs, { cwd, stdio: 'inherit' });
+        const child = (0, child_process_1.spawnCommand)('npx', skillsArgs, { cwd, stdio: 'inherit' });
         child.on('error', () => {
             // npx not available (or failed to launch) — don't fail the clone, just tell the user how to do it.
             cli_1.default.log("\n⚠️  Couldn't run npx automatically (is Node.js / npx installed?).");

package/dist/services/version-pull-reporter.d.ts

@@ -0,0 +1,20 @@
+/** One resource's version pull, named so a failure can say which resource it belongs to. */
+export interface VersionPull {
+    slug: string;
+    failure: Promise<string | undefined>;
+}
+/**
+ * Starts tracking one resource's version pull.
+ *
+ * The outcome is captured here rather than where it is reported, because the pulls are started in
+ * a loop that waits between them: a rejection would otherwise sit unhandled until the loop ends.
+ */
+export declare function trackVersionPull(slug: string, done: Promise<void>): VersionPull;
+/**
+ * Awaits every version pull and reports the ones that failed.
+ *
+ * The pulls run in parallel and must not take each other down — one resource the cloud refuses is
+ * not a reason to abandon the rest — but a swallowed rejection leaves `versions/` silently empty,
+ * which reads exactly like a resource that has no versions. This is what tells the two apart.
+ */
+export declare function reportFailedVersionPulls(pulls: Array<VersionPull>, resourceName: string): Promise<void>;

package/dist/services/version-pull-reporter.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.trackVersionPull = trackVersionPull;
+exports.reportFailedVersionPulls = reportFailedVersionPulls;
+const color_1 = require("@oclif/color");
+const cli_1 = require("../utils/cli");
+/**
+ * Starts tracking one resource's version pull.
+ *
+ * The outcome is captured here rather than where it is reported, because the pulls are started in
+ * a loop that waits between them: a rejection would otherwise sit unhandled until the loop ends.
+ */
+function trackVersionPull(slug, done) {
+    return {
+        slug,
+        failure: done.then(() => undefined, (reason) => (reason instanceof Error ? reason.message : String(reason))),
+    };
+}
+/**
+ * Awaits every version pull and reports the ones that failed.
+ *
+ * The pulls run in parallel and must not take each other down — one resource the cloud refuses is
+ * not a reason to abandon the rest — but a swallowed rejection leaves `versions/` silently empty,
+ * which reads exactly like a resource that has no versions. This is what tells the two apart.
+ */
+async function reportFailedVersionPulls(pulls, resourceName) {
+    for (const { slug, failure } of pulls) {
+        const reason = await failure;
+        if (reason !== undefined) {
+            cli_1.default.log(color_1.default.yellow(`⚠️  could not pull the versions of ${resourceName} '${slug}': ${reason}`));
+        }
+    }
+}

package/dist/utils/child-process.d.ts

@@ -0,0 +1,26 @@
+import { type ChildProcess, type SpawnOptions } from 'node:child_process';
+export type Platform = NodeJS.Platform;
+export interface CommandLine {
+    command: string;
+    args: string[];
+    shell: boolean;
+}
+/**
+ * How to invoke a package-manager executable (`npm`, `npx`, a `node_modules/.bin` shim) on `platform`.
+ *
+ * On Windows those are `.cmd` batch files, which Node refuses to spawn without a shell, so the
+ * command line goes through `cmd.exe` with every part quoted for it.
+ */
+export declare function commandLineFor(command: string, args: string[], platform?: Platform): CommandLine;
+export declare function spawnCommand(command: string, args: string[], options?: SpawnOptions): ChildProcess;
+/** The `node_modules/.bin` shim `name` resolves to on `platform`. */
+export declare function binShimPath(nodeModulesPath: string, name: string, platform?: Platform): string;
+/** The executable `name` a Python virtual environment at `envPath` exposes on `platform`. */
+export declare function venvExecutablePath(envPath: string, name: string, platform?: Platform): string;
+/** The Python interpreter of the virtual environment at `envPath`; Windows venvs ship no `python3` alias. */
+export declare function venvPythonPath(envPath: string, platform?: Platform): string;
+/**
+ * An environment for a process run locally: the entries given plus, on Windows, the system
+ * variables Node and Python cannot start without (`SYSTEMROOT`, `TEMP`, ...).
+ */
+export declare function childEnv(entries: Record<string, string | undefined>, platform?: Platform, hostEnv?: NodeJS.ProcessEnv): Record<string, string>;