pubm 0.1.7 → 0.2.0

package/README.md

@@ -58,6 +58,11 @@ npm i -g pubm
 pubm patch --preview
 ```
 
+> **Publishing to jsr?** Install the jsr CLI as a devDependency in your project:
+> ```bash
+> pnpm add -D jsr  # or npm i -D jsr / yarn add -D jsr
+> ```
+
 ---
 
 ## 🔑 Core CLI Options

package/bin/cli.js

@@ -5249,50 +5249,6 @@ function link2(text, url) {
   return `\x1B]8;;${url}\x07${text}\x1B]8;;\x07`;
 }
 
-// src/utils/rollback.ts
-var rollbacks = [];
-function addRollback(rollback2, context) {
-  rollbacks.push({ fn: rollback2, ctx: context });
-}
-var called = false;
-async function rollback() {
-  if (called) return void 0;
-  called = true;
-  if (rollbacks.length <= 0) return void 0;
-  console.log("Rollback...");
-  const results = await Promise.allSettled(
-    rollbacks.map(({ fn, ctx }) => fn(ctx))
-  );
-  const failures = results.filter(
-    (r) => r.status === "rejected"
-  );
-  if (failures.length > 0) {
-    for (const failure of failures) {
-      console.error(
-        `Rollback operation failed: ${failure.reason instanceof Error ? failure.reason.message : failure.reason}`
-      );
-    }
-    console.log(
-      "Rollback completed with errors. Some operations may require manual recovery."
-    );
-  } else {
-    console.log("Rollback completed");
-  }
-}
-
-// src/utils/listr.ts
-function createListr(...args) {
-  const listr = new Listr(...args);
-  listr.isRoot = () => false;
-  listr.externalSignalHandler = rollback;
-  return listr;
-}
-
-// src/utils/package.ts
-import { readFile as readFile2, stat as stat3, writeFile as writeFile2 } from "node:fs/promises";
-import path8 from "node:path";
-import process11 from "node:process";
-
 // src/ecosystem/rust.ts
 import { readFile, stat as stat2, writeFile } from "node:fs/promises";
 import path7 from "node:path";
@@ -5339,6 +5295,17 @@ var RustEcosystem = class extends Ecosystem {
     pkg.version = newVersion;
     await writeFile(filePath, stringify(cargo));
   }
+  async dependencies() {
+    const cargo = await this.readCargoToml();
+    const deps = [];
+    for (const section of ["dependencies", "build-dependencies"]) {
+      const sectionData = cargo[section];
+      if (sectionData) {
+        deps.push(...Object.keys(sectionData));
+      }
+    }
+    return deps;
+  }
   manifestFiles() {
     return ["Cargo.toml"];
   }
@@ -5353,7 +5320,96 @@ var RustEcosystem = class extends Ecosystem {
   }
 };
 
+// src/utils/crate-graph.ts
+async function sortCratesByDependencyOrder(cratePaths) {
+  if (cratePaths.length <= 1) return cratePaths;
+  const crateInfos = await Promise.all(
+    cratePaths.map(async (cratePath) => {
+      const eco = new RustEcosystem(cratePath);
+      const name = await eco.packageName();
+      const deps = await eco.dependencies();
+      return { cratePath, name, deps };
+    })
+  );
+  const nameSet = new Set(crateInfos.map((c) => c.name));
+  const nameToPath = new Map(crateInfos.map((c) => [c.name, c.cratePath]));
+  const internalDeps = /* @__PURE__ */ new Map();
+  const inDegree = /* @__PURE__ */ new Map();
+  for (const name of nameSet) {
+    inDegree.set(name, 0);
+  }
+  for (const crate of crateInfos) {
+    const filtered = crate.deps.filter((d2) => nameSet.has(d2));
+    internalDeps.set(crate.name, filtered);
+    for (const _dep of filtered) {
+      inDegree.set(crate.name, (inDegree.get(crate.name) ?? 0) + 1);
+    }
+  }
+  const queue = [];
+  for (const [name, degree] of inDegree) {
+    if (degree === 0) queue.push(name);
+  }
+  const sorted = [];
+  while (queue.length > 0) {
+    const current = queue.shift();
+    sorted.push(current);
+    for (const [name, deps] of internalDeps) {
+      if (deps.includes(current)) {
+        const newDegree = (inDegree.get(name) ?? 0) - 1;
+        inDegree.set(name, newDegree);
+        if (newDegree === 0) queue.push(name);
+      }
+    }
+  }
+  if (sorted.length !== nameSet.size) {
+    throw new Error("Circular dependency detected among configured crates");
+  }
+  return sorted.map((name) => nameToPath.get(name));
+}
+
+// src/utils/rollback.ts
+var rollbacks = [];
+function addRollback(rollback2, context) {
+  rollbacks.push({ fn: rollback2, ctx: context });
+}
+var called = false;
+async function rollback() {
+  if (called) return void 0;
+  called = true;
+  if (rollbacks.length <= 0) return void 0;
+  console.log("Rollback...");
+  const results = await Promise.allSettled(
+    rollbacks.map(({ fn, ctx }) => fn(ctx))
+  );
+  const failures = results.filter(
+    (r) => r.status === "rejected"
+  );
+  if (failures.length > 0) {
+    for (const failure of failures) {
+      console.error(
+        `Rollback operation failed: ${failure.reason instanceof Error ? failure.reason.message : failure.reason}`
+      );
+    }
+    console.log(
+      "Rollback completed with errors. Some operations may require manual recovery."
+    );
+  } else {
+    console.log("Rollback completed");
+  }
+}
+
+// src/utils/listr.ts
+function createListr(...args) {
+  const listr = new Listr(...args);
+  listr.isRoot = () => false;
+  listr.externalSignalHandler = rollback;
+  return listr;
+}
+
 // src/utils/package.ts
+import { readFile as readFile2, stat as stat3, writeFile as writeFile2 } from "node:fs/promises";
+import path8 from "node:path";
+import process11 from "node:process";
 var cachedPackageJson = {};
 var cachedJsrJson = {};
 function patchCachedJsrJson(contents, { cwd = process11.cwd() } = {}) {
@@ -5588,7 +5644,7 @@ function collectRegistries(ctx) {
 
 // src/registry/crates.ts
 import path9 from "node:path";
-import { exec as exec3 } from "tinyexec";
+import { exec as exec3, NonZeroExitError } from "tinyexec";
 
 // src/registry/registry.ts
 var Registry = class {
@@ -5670,9 +5726,10 @@ var CratesRegistry = class extends Registry {
       await exec3("cargo", args, { throwOnError: true });
       return true;
     } catch (error) {
-      throw new CratesError("Failed to run `cargo publish`", {
-        cause: error
-      });
+      const stderr = error instanceof NonZeroExitError ? error.output?.stderr : void 0;
+      const message = stderr ? `Failed to run \`cargo publish\`:
+${stderr}` : "Failed to run `cargo publish`";
+      throw new CratesError(message, { cause: error });
     }
   }
   async isPublished() {
@@ -5767,7 +5824,7 @@ import { ListrEnquirerPromptAdapter } from "@listr2/prompt-adapter-enquirer";
 import npmCli from "@npmcli/promise-spawn";
 
 // src/registry/jsr.ts
-import { exec as exec4, NonZeroExitError } from "tinyexec";
+import { exec as exec4, NonZeroExitError as NonZeroExitError2 } from "tinyexec";
 
 // src/utils/db.ts
 import { createCipheriv, createDecipheriv, createHash } from "node:crypto";
@@ -5946,7 +6003,7 @@ var JsrRegisry = class extends Registry {
       this.packageCreationUrls = void 0;
       return true;
     } catch (error) {
-      const stderr = error instanceof NonZeroExitError ? error.output?.stderr : void 0;
+      const stderr = error instanceof NonZeroExitError2 ? error.output?.stderr : void 0;
       if (stderr?.includes("don't exist")) {
         const urls = [...stderr.matchAll(/https:\/\/jsr\.io\/new\S+/g)].map(
           (m) => m[0]
@@ -6206,7 +6263,7 @@ async function jsrRegistry() {
 }
 
 // src/registry/npm.ts
-import { exec as exec5, NonZeroExitError as NonZeroExitError2 } from "tinyexec";
+import { exec as exec5, NonZeroExitError as NonZeroExitError3 } from "tinyexec";
 var NpmError = class extends AbstractError {
   constructor() {
     super(...arguments);
@@ -6263,7 +6320,7 @@ var NpmRegistry = class extends Registry {
       await this.npm(["whoami"]);
       return true;
     } catch (error) {
-      if (error instanceof NonZeroExitError2) {
+      if (error instanceof NonZeroExitError3) {
         return false;
       }
       throw new NpmError("Failed to run `npm whoami`", { cause: error });
@@ -6341,7 +6398,7 @@ var NpmRegistry = class extends Registry {
       await this.npm(["publish", "--provenance", "--access", "public"]);
       return true;
     } catch (error) {
-      if (error instanceof NonZeroExitError2 && error.output?.stderr.includes("EOTP")) {
+      if (error instanceof NonZeroExitError3 && error.output?.stderr.includes("EOTP")) {
         return false;
       }
       throw this.classifyPublishError(error);
@@ -6353,7 +6410,7 @@ var NpmRegistry = class extends Registry {
       await this.npm(args);
       return true;
     } catch (error) {
-      if (error instanceof NonZeroExitError2 && error.output?.stderr.includes("EOTP")) {
+      if (error instanceof NonZeroExitError3 && error.output?.stderr.includes("EOTP")) {
         return false;
       }
       throw this.classifyPublishError(error);
@@ -6369,7 +6426,7 @@ var NpmRegistry = class extends Registry {
     };
   }
   classifyPublishError(error) {
-    if (error instanceof NonZeroExitError2) {
+    if (error instanceof NonZeroExitError3) {
       const stderr = error.output?.stderr ?? "";
       if (stderr.includes("EOTP")) {
         return new NpmError("OTP required for publishing", { cause: error });
@@ -7108,13 +7165,24 @@ function registryTask(registry) {
       return npmPublishTasks;
   }
 }
-function collectPublishTasks(ctx) {
+async function collectPublishTasks(ctx) {
   if (ctx.packages?.length) {
-    return ctx.packages.flatMap(
-      (pkg) => pkg.registries.map(
-        (reg) => reg === "crates" ? createCratesPublishTask(pkg.path) : registryTask(reg)
-      )
+    const nonCratesTasks = ctx.packages.flatMap(
+      (pkg) => pkg.registries.filter((reg) => reg !== "crates").map((reg) => registryTask(reg))
     );
+    const cratesPaths = ctx.packages.filter((pkg) => pkg.registries.includes("crates")).map((pkg) => pkg.path);
+    if (cratesPaths.length === 0) {
+      return nonCratesTasks;
+    }
+    const sortedPaths = await sortCratesByDependencyOrder(cratesPaths);
+    const sequentialCratesTask = {
+      title: "Publishing to crates.io (sequential)",
+      task: (_ctx, task) => task.newListr(
+        sortedPaths.map((p) => createCratesPublishTask(p)),
+        { concurrent: false }
+      )
+    };
+    return [...nonCratesTasks, sequentialCratesTask];
   }
   return collectRegistries(ctx).map(registryTask);
 }
@@ -7136,7 +7204,7 @@ async function run(options) {
     await createListr(
       options.publishOnly ? {
         title: "Publishing",
-        task: (ctx2, parentTask) => parentTask.newListr(collectPublishTasks(ctx2), {
+        task: async (ctx2, parentTask) => parentTask.newListr(await collectPublishTasks(ctx2), {
           concurrent: true
         })
       } : [
@@ -7225,7 +7293,7 @@ async function run(options) {
         {
           skip: (ctx2) => options.skipPublish || !!ctx2.preview,
           title: "Publishing",
-          task: (ctx2, parentTask) => parentTask.newListr(collectPublishTasks(ctx2), {
+          task: async (ctx2, parentTask) => parentTask.newListr(await collectPublishTasks(ctx2), {
             concurrent: true
           })
         },

package/dist/index.cjs

@@ -4814,50 +4814,6 @@ function link2(text, url) {
   return `\x1B]8;;${url}\x07${text}\x1B]8;;\x07`;
 }
 
-// src/utils/rollback.ts
-var rollbacks = [];
-function addRollback(rollback2, context) {
-  rollbacks.push({ fn: rollback2, ctx: context });
-}
-var called = false;
-async function rollback() {
-  if (called) return void 0;
-  called = true;
-  if (rollbacks.length <= 0) return void 0;
-  console.log("Rollback...");
-  const results = await Promise.allSettled(
-    rollbacks.map(({ fn, ctx }) => fn(ctx))
-  );
-  const failures = results.filter(
-    (r) => r.status === "rejected"
-  );
-  if (failures.length > 0) {
-    for (const failure of failures) {
-      console.error(
-        `Rollback operation failed: ${failure.reason instanceof Error ? failure.reason.message : failure.reason}`
-      );
-    }
-    console.log(
-      "Rollback completed with errors. Some operations may require manual recovery."
-    );
-  } else {
-    console.log("Rollback completed");
-  }
-}
-
-// src/utils/listr.ts
-function createListr(...args) {
-  const listr = new Listr(...args);
-  listr.isRoot = () => false;
-  listr.externalSignalHandler = rollback;
-  return listr;
-}
-
-// src/utils/package.ts
-var import_promises3 = require("fs/promises");
-var import_node_path3 = __toESM(require("path"), 1);
-var import_node_process5 = __toESM(require("process"), 1);
-
 // src/ecosystem/rust.ts
 var import_promises2 = require("fs/promises");
 var import_node_path2 = __toESM(require("path"), 1);
@@ -4904,6 +4860,17 @@ var RustEcosystem = class extends Ecosystem {
     pkg.version = newVersion;
     await (0, import_promises2.writeFile)(filePath, (0, import_smol_toml.stringify)(cargo));
   }
+  async dependencies() {
+    const cargo = await this.readCargoToml();
+    const deps = [];
+    for (const section of ["dependencies", "build-dependencies"]) {
+      const sectionData = cargo[section];
+      if (sectionData) {
+        deps.push(...Object.keys(sectionData));
+      }
+    }
+    return deps;
+  }
   manifestFiles() {
     return ["Cargo.toml"];
   }
@@ -4918,7 +4885,96 @@ var RustEcosystem = class extends Ecosystem {
   }
 };
 
+// src/utils/crate-graph.ts
+async function sortCratesByDependencyOrder(cratePaths) {
+  if (cratePaths.length <= 1) return cratePaths;
+  const crateInfos = await Promise.all(
+    cratePaths.map(async (cratePath) => {
+      const eco = new RustEcosystem(cratePath);
+      const name = await eco.packageName();
+      const deps = await eco.dependencies();
+      return { cratePath, name, deps };
+    })
+  );
+  const nameSet = new Set(crateInfos.map((c) => c.name));
+  const nameToPath = new Map(crateInfos.map((c) => [c.name, c.cratePath]));
+  const internalDeps = /* @__PURE__ */ new Map();
+  const inDegree = /* @__PURE__ */ new Map();
+  for (const name of nameSet) {
+    inDegree.set(name, 0);
+  }
+  for (const crate of crateInfos) {
+    const filtered = crate.deps.filter((d2) => nameSet.has(d2));
+    internalDeps.set(crate.name, filtered);
+    for (const _dep of filtered) {
+      inDegree.set(crate.name, (inDegree.get(crate.name) ?? 0) + 1);
+    }
+  }
+  const queue = [];
+  for (const [name, degree] of inDegree) {
+    if (degree === 0) queue.push(name);
+  }
+  const sorted = [];
+  while (queue.length > 0) {
+    const current = queue.shift();
+    sorted.push(current);
+    for (const [name, deps] of internalDeps) {
+      if (deps.includes(current)) {
+        const newDegree = (inDegree.get(name) ?? 0) - 1;
+        inDegree.set(name, newDegree);
+        if (newDegree === 0) queue.push(name);
+      }
+    }
+  }
+  if (sorted.length !== nameSet.size) {
+    throw new Error("Circular dependency detected among configured crates");
+  }
+  return sorted.map((name) => nameToPath.get(name));
+}
+
+// src/utils/rollback.ts
+var rollbacks = [];
+function addRollback(rollback2, context) {
+  rollbacks.push({ fn: rollback2, ctx: context });
+}
+var called = false;
+async function rollback() {
+  if (called) return void 0;
+  called = true;
+  if (rollbacks.length <= 0) return void 0;
+  console.log("Rollback...");
+  const results = await Promise.allSettled(
+    rollbacks.map(({ fn, ctx }) => fn(ctx))
+  );
+  const failures = results.filter(
+    (r) => r.status === "rejected"
+  );
+  if (failures.length > 0) {
+    for (const failure of failures) {
+      console.error(
+        `Rollback operation failed: ${failure.reason instanceof Error ? failure.reason.message : failure.reason}`
+      );
+    }
+    console.log(
+      "Rollback completed with errors. Some operations may require manual recovery."
+    );
+  } else {
+    console.log("Rollback completed");
+  }
+}
+
+// src/utils/listr.ts
+function createListr(...args) {
+  const listr = new Listr(...args);
+  listr.isRoot = () => false;
+  listr.externalSignalHandler = rollback;
+  return listr;
+}
+
 // src/utils/package.ts
+var import_promises3 = require("fs/promises");
+var import_node_path3 = __toESM(require("path"), 1);
+var import_node_process5 = __toESM(require("process"), 1);
 var cachedPackageJson = {};
 var cachedJsrJson = {};
 function patchCachedJsrJson(contents, { cwd = import_node_process5.default.cwd() } = {}) {
@@ -5235,9 +5291,10 @@ var CratesRegistry = class extends Registry {
       await (0, import_tinyexec2.exec)("cargo", args, { throwOnError: true });
       return true;
     } catch (error) {
-      throw new CratesError("Failed to run `cargo publish`", {
-        cause: error
-      });
+      const stderr = error instanceof import_tinyexec2.NonZeroExitError ? error.output?.stderr : void 0;
+      const message = stderr ? `Failed to run \`cargo publish\`:
+${stderr}` : "Failed to run `cargo publish`";
+      throw new CratesError(message, { cause: error });
     }
   }
   async isPublished() {
@@ -6676,13 +6733,24 @@ function registryTask(registry) {
       return npmPublishTasks;
   }
 }
-function collectPublishTasks(ctx) {
+async function collectPublishTasks(ctx) {
   if (ctx.packages?.length) {
-    return ctx.packages.flatMap(
-      (pkg) => pkg.registries.map(
-        (reg) => reg === "crates" ? createCratesPublishTask(pkg.path) : registryTask(reg)
-      )
+    const nonCratesTasks = ctx.packages.flatMap(
+      (pkg) => pkg.registries.filter((reg) => reg !== "crates").map((reg) => registryTask(reg))
     );
+    const cratesPaths = ctx.packages.filter((pkg) => pkg.registries.includes("crates")).map((pkg) => pkg.path);
+    if (cratesPaths.length === 0) {
+      return nonCratesTasks;
+    }
+    const sortedPaths = await sortCratesByDependencyOrder(cratesPaths);
+    const sequentialCratesTask = {
+      title: "Publishing to crates.io (sequential)",
+      task: (_ctx, task) => task.newListr(
+        sortedPaths.map((p) => createCratesPublishTask(p)),
+        { concurrent: false }
+      )
+    };
+    return [...nonCratesTasks, sequentialCratesTask];
   }
   return collectRegistries(ctx).map(registryTask);
 }
@@ -6704,7 +6772,7 @@ async function run(options) {
     await createListr(
       options.publishOnly ? {
         title: "Publishing",
-        task: (ctx2, parentTask) => parentTask.newListr(collectPublishTasks(ctx2), {
+        task: async (ctx2, parentTask) => parentTask.newListr(await collectPublishTasks(ctx2), {
           concurrent: true
         })
       } : [
@@ -6793,7 +6861,7 @@ async function run(options) {
         {
           skip: (ctx2) => options.skipPublish || !!ctx2.preview,
           title: "Publishing",
-          task: (ctx2, parentTask) => parentTask.newListr(collectPublishTasks(ctx2), {
+          task: async (ctx2, parentTask) => parentTask.newListr(await collectPublishTasks(ctx2), {
             concurrent: true
           })
         },

package/dist/index.js

@@ -4781,50 +4781,6 @@ function link2(text, url) {
   return `\x1B]8;;${url}\x07${text}\x1B]8;;\x07`;
 }
 
-// src/utils/rollback.ts
-var rollbacks = [];
-function addRollback(rollback2, context) {
-  rollbacks.push({ fn: rollback2, ctx: context });
-}
-var called = false;
-async function rollback() {
-  if (called) return void 0;
-  called = true;
-  if (rollbacks.length <= 0) return void 0;
-  console.log("Rollback...");
-  const results = await Promise.allSettled(
-    rollbacks.map(({ fn, ctx }) => fn(ctx))
-  );
-  const failures = results.filter(
-    (r) => r.status === "rejected"
-  );
-  if (failures.length > 0) {
-    for (const failure of failures) {
-      console.error(
-        `Rollback operation failed: ${failure.reason instanceof Error ? failure.reason.message : failure.reason}`
-      );
-    }
-    console.log(
-      "Rollback completed with errors. Some operations may require manual recovery."
-    );
-  } else {
-    console.log("Rollback completed");
-  }
-}
-
-// src/utils/listr.ts
-function createListr(...args) {
-  const listr = new Listr(...args);
-  listr.isRoot = () => false;
-  listr.externalSignalHandler = rollback;
-  return listr;
-}
-
-// src/utils/package.ts
-import { readFile as readFile2, stat as stat3, writeFile as writeFile2 } from "node:fs/promises";
-import path3 from "node:path";
-import process7 from "node:process";
-
 // src/ecosystem/rust.ts
 import { readFile, stat as stat2, writeFile } from "node:fs/promises";
 import path2 from "node:path";
@@ -4871,6 +4827,17 @@ var RustEcosystem = class extends Ecosystem {
     pkg.version = newVersion;
     await writeFile(filePath, stringify(cargo));
   }
+  async dependencies() {
+    const cargo = await this.readCargoToml();
+    const deps = [];
+    for (const section of ["dependencies", "build-dependencies"]) {
+      const sectionData = cargo[section];
+      if (sectionData) {
+        deps.push(...Object.keys(sectionData));
+      }
+    }
+    return deps;
+  }
   manifestFiles() {
     return ["Cargo.toml"];
   }
@@ -4885,7 +4852,96 @@ var RustEcosystem = class extends Ecosystem {
   }
 };
 
+// src/utils/crate-graph.ts
+async function sortCratesByDependencyOrder(cratePaths) {
+  if (cratePaths.length <= 1) return cratePaths;
+  const crateInfos = await Promise.all(
+    cratePaths.map(async (cratePath) => {
+      const eco = new RustEcosystem(cratePath);
+      const name = await eco.packageName();
+      const deps = await eco.dependencies();
+      return { cratePath, name, deps };
+    })
+  );
+  const nameSet = new Set(crateInfos.map((c) => c.name));
+  const nameToPath = new Map(crateInfos.map((c) => [c.name, c.cratePath]));
+  const internalDeps = /* @__PURE__ */ new Map();
+  const inDegree = /* @__PURE__ */ new Map();
+  for (const name of nameSet) {
+    inDegree.set(name, 0);
+  }
+  for (const crate of crateInfos) {
+    const filtered = crate.deps.filter((d2) => nameSet.has(d2));
+    internalDeps.set(crate.name, filtered);
+    for (const _dep of filtered) {
+      inDegree.set(crate.name, (inDegree.get(crate.name) ?? 0) + 1);
+    }
+  }
+  const queue = [];
+  for (const [name, degree] of inDegree) {
+    if (degree === 0) queue.push(name);
+  }
+  const sorted = [];
+  while (queue.length > 0) {
+    const current = queue.shift();
+    sorted.push(current);
+    for (const [name, deps] of internalDeps) {
+      if (deps.includes(current)) {
+        const newDegree = (inDegree.get(name) ?? 0) - 1;
+        inDegree.set(name, newDegree);
+        if (newDegree === 0) queue.push(name);
+      }
+    }
+  }
+  if (sorted.length !== nameSet.size) {
+    throw new Error("Circular dependency detected among configured crates");
+  }
+  return sorted.map((name) => nameToPath.get(name));
+}
+
+// src/utils/rollback.ts
+var rollbacks = [];
+function addRollback(rollback2, context) {
+  rollbacks.push({ fn: rollback2, ctx: context });
+}
+var called = false;
+async function rollback() {
+  if (called) return void 0;
+  called = true;
+  if (rollbacks.length <= 0) return void 0;
+  console.log("Rollback...");
+  const results = await Promise.allSettled(
+    rollbacks.map(({ fn, ctx }) => fn(ctx))
+  );
+  const failures = results.filter(
+    (r) => r.status === "rejected"
+  );
+  if (failures.length > 0) {
+    for (const failure of failures) {
+      console.error(
+        `Rollback operation failed: ${failure.reason instanceof Error ? failure.reason.message : failure.reason}`
+      );
+    }
+    console.log(
+      "Rollback completed with errors. Some operations may require manual recovery."
+    );
+  } else {
+    console.log("Rollback completed");
+  }
+}
+
+// src/utils/listr.ts
+function createListr(...args) {
+  const listr = new Listr(...args);
+  listr.isRoot = () => false;
+  listr.externalSignalHandler = rollback;
+  return listr;
+}
+
 // src/utils/package.ts
+import { readFile as readFile2, stat as stat3, writeFile as writeFile2 } from "node:fs/promises";
+import path3 from "node:path";
+import process7 from "node:process";
 var cachedPackageJson = {};
 var cachedJsrJson = {};
 function patchCachedJsrJson(contents, { cwd = process7.cwd() } = {}) {
@@ -5120,7 +5176,7 @@ function collectRegistries(ctx) {
 
 // src/registry/crates.ts
 import path4 from "node:path";
-import { exec as exec3 } from "tinyexec";
+import { exec as exec3, NonZeroExitError } from "tinyexec";
 
 // src/registry/registry.ts
 var Registry = class {
@@ -5202,9 +5258,10 @@ var CratesRegistry = class extends Registry {
       await exec3("cargo", args, { throwOnError: true });
       return true;
     } catch (error) {
-      throw new CratesError("Failed to run `cargo publish`", {
-        cause: error
-      });
+      const stderr = error instanceof NonZeroExitError ? error.output?.stderr : void 0;
+      const message = stderr ? `Failed to run \`cargo publish\`:
+${stderr}` : "Failed to run `cargo publish`";
+      throw new CratesError(message, { cause: error });
     }
   }
   async isPublished() {
@@ -5299,7 +5356,7 @@ import { ListrEnquirerPromptAdapter } from "@listr2/prompt-adapter-enquirer";
 import npmCli from "@npmcli/promise-spawn";
 
 // src/registry/jsr.ts
-import { exec as exec4, NonZeroExitError } from "tinyexec";
+import { exec as exec4, NonZeroExitError as NonZeroExitError2 } from "tinyexec";
 
 // src/utils/db.ts
 import { createCipheriv, createDecipheriv, createHash } from "node:crypto";
@@ -5478,7 +5535,7 @@ var JsrRegisry = class extends Registry {
       this.packageCreationUrls = void 0;
       return true;
     } catch (error) {
-      const stderr = error instanceof NonZeroExitError ? error.output?.stderr : void 0;
+      const stderr = error instanceof NonZeroExitError2 ? error.output?.stderr : void 0;
       if (stderr?.includes("don't exist")) {
         const urls = [...stderr.matchAll(/https:\/\/jsr\.io\/new\S+/g)].map(
           (m) => m[0]
@@ -5738,7 +5795,7 @@ async function jsrRegistry() {
 }
 
 // src/registry/npm.ts
-import { exec as exec5, NonZeroExitError as NonZeroExitError2 } from "tinyexec";
+import { exec as exec5, NonZeroExitError as NonZeroExitError3 } from "tinyexec";
 var NpmError = class extends AbstractError {
   constructor() {
     super(...arguments);
@@ -5795,7 +5852,7 @@ var NpmRegistry = class extends Registry {
       await this.npm(["whoami"]);
       return true;
     } catch (error) {
-      if (error instanceof NonZeroExitError2) {
+      if (error instanceof NonZeroExitError3) {
         return false;
       }
       throw new NpmError("Failed to run `npm whoami`", { cause: error });
@@ -5873,7 +5930,7 @@ var NpmRegistry = class extends Registry {
       await this.npm(["publish", "--provenance", "--access", "public"]);
       return true;
     } catch (error) {
-      if (error instanceof NonZeroExitError2 && error.output?.stderr.includes("EOTP")) {
+      if (error instanceof NonZeroExitError3 && error.output?.stderr.includes("EOTP")) {
         return false;
       }
       throw this.classifyPublishError(error);
@@ -5885,7 +5942,7 @@ var NpmRegistry = class extends Registry {
       await this.npm(args);
       return true;
     } catch (error) {
-      if (error instanceof NonZeroExitError2 && error.output?.stderr.includes("EOTP")) {
+      if (error instanceof NonZeroExitError3 && error.output?.stderr.includes("EOTP")) {
         return false;
       }
       throw this.classifyPublishError(error);
@@ -5901,7 +5958,7 @@ var NpmRegistry = class extends Registry {
     };
   }
   classifyPublishError(error) {
-    if (error instanceof NonZeroExitError2) {
+    if (error instanceof NonZeroExitError3) {
       const stderr = error.output?.stderr ?? "";
       if (stderr.includes("EOTP")) {
         return new NpmError("OTP required for publishing", { cause: error });
@@ -6640,13 +6697,24 @@ function registryTask(registry) {
       return npmPublishTasks;
   }
 }
-function collectPublishTasks(ctx) {
+async function collectPublishTasks(ctx) {
   if (ctx.packages?.length) {
-    return ctx.packages.flatMap(
-      (pkg) => pkg.registries.map(
-        (reg) => reg === "crates" ? createCratesPublishTask(pkg.path) : registryTask(reg)
-      )
+    const nonCratesTasks = ctx.packages.flatMap(
+      (pkg) => pkg.registries.filter((reg) => reg !== "crates").map((reg) => registryTask(reg))
     );
+    const cratesPaths = ctx.packages.filter((pkg) => pkg.registries.includes("crates")).map((pkg) => pkg.path);
+    if (cratesPaths.length === 0) {
+      return nonCratesTasks;
+    }
+    const sortedPaths = await sortCratesByDependencyOrder(cratesPaths);
+    const sequentialCratesTask = {
+      title: "Publishing to crates.io (sequential)",
+      task: (_ctx, task) => task.newListr(
+        sortedPaths.map((p) => createCratesPublishTask(p)),
+        { concurrent: false }
+      )
+    };
+    return [...nonCratesTasks, sequentialCratesTask];
   }
   return collectRegistries(ctx).map(registryTask);
 }
@@ -6668,7 +6736,7 @@ async function run(options) {
     await createListr(
       options.publishOnly ? {
         title: "Publishing",
-        task: (ctx2, parentTask) => parentTask.newListr(collectPublishTasks(ctx2), {
+        task: async (ctx2, parentTask) => parentTask.newListr(await collectPublishTasks(ctx2), {
           concurrent: true
         })
       } : [
@@ -6757,7 +6825,7 @@ async function run(options) {
         {
           skip: (ctx2) => options.skipPublish || !!ctx2.preview,
           title: "Publishing",
-          task: (ctx2, parentTask) => parentTask.newListr(collectPublishTasks(ctx2), {
+          task: async (ctx2, parentTask) => parentTask.newListr(await collectPublishTasks(ctx2), {
             concurrent: true
           })
         },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pubm",
-  "version": "0.1.7",
+  "version": "0.2.0",
   "engines": {
     "node": ">=18",
     "git": ">=2.11.0"