putitoutthere 0.2.67 → 0.2.69

package/dist/action.js

@@ -73,8 +73,9 @@ export async function main() {
 // `main()` was never called, the action exited 0 immediately, and
 // `_matrix.yml`'s pre-maturin write-version step bumped nothing
 // (PR #277, e2e Windows maturin failures). Issue #276.
-/* v8 ignore next 3 -- entry-point guard; only reachable when invoked as a binary */
+/* v8 ignore start -- entry-point guard; only reachable when invoked as a binary */
 if (process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href) {
     void main();
 }
+/* v8 ignore stop */
 //# sourceMappingURL=action.js.map

package/dist/action.js.map

@@ -1 +1 @@
-{"version":3,"file":"action.js","sourceRoot":"","sources":["../src/action.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAE/B,MAAM,CAAC,KAAK,UAAU,IAAI;IACxB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC;IAChD,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,EAAE,CAAC;IACnE,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC;IACrD,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,EAAE,CAAC;IACjE,MAAM,WAAW,GACf,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,MAAM,CAAC,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC;IAExE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,0DAA0D,CAC3D,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,kEAAkE;IAClE,kEAAkE;IAClE,8DAA8D;IAC9D,+DAA+D;IAC/D,eAAe;IACf,qEAAqE;IACrE,2DAA2D;IAC3D,iEAAiE;IACjE,8BAA8B;IAC9B,oEAAoE;IACpE,iDAAiD;IACjD,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC;IAChD,IAAI,OAAO,KAAK,eAAe,IAAI,OAAO,KAAK,qBAAqB,EAAE,CAAC;QACrE,IAAI,gBAAgB,EAAE,CAAC;YAAA,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;QAAA,CAAC;QAC9D,IAAI,YAAY,EAAE,CAAC;YAAA,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QAAA,CAAC;IAC3D,CAAC;SAAM,IAAI,OAAO,KAAK,gBAAgB,EAAE,CAAC;QACxC,IAAI,gBAAgB,EAAE,CAAC;YAAA,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;QAAA,CAAC;IAChE,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpB,IAAI,gBAAgB,EAAE,CAAC;YAAA,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;QAAA,CAAC;QAC7D,8DAA8D;QAC9D,mEAAmE;QACnE,2CAA2C;QAC3C,IAAI,eAAe,EAAE,CAAC;YAAA,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,eAAe,CAAC,CAAC;QAAA,CAAC;IAC1E,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,uEAAuE,IAAI,IAAI,CAChF,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;AAED,uEAAuE;AACvE,iEAAiE;AACjE,sEAAsE;AACtE,kEAAkE;AAClE,sEAAsE;AACtE,qEAAqE;AACrE,kEAAkE;AAClE,kEAAkE;AAClE,gEAAgE;AAChE,uDAAuD;AACvD,oFAAoF;AACpF,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/E,KAAK,IAAI,EAAE,CAAC;AACd,CAAC"}
+{"version":3,"file":"action.js","sourceRoot":"","sources":["../src/action.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAE/B,MAAM,CAAC,KAAK,UAAU,IAAI;IACxB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC;IAChD,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,EAAE,CAAC;IACnE,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC;IACrD,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,EAAE,CAAC;IACjE,MAAM,WAAW,GACf,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,MAAM,CAAC,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC;IAExE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,0DAA0D,CAC3D,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,kEAAkE;IAClE,kEAAkE;IAClE,8DAA8D;IAC9D,+DAA+D;IAC/D,eAAe;IACf,qEAAqE;IACrE,2DAA2D;IAC3D,iEAAiE;IACjE,8BAA8B;IAC9B,oEAAoE;IACpE,iDAAiD;IACjD,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC;IAChD,IAAI,OAAO,KAAK,eAAe,IAAI,OAAO,KAAK,qBAAqB,EAAE,CAAC;QACrE,IAAI,gBAAgB,EAAE,CAAC;YAAA,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;QAAA,CAAC;QAC9D,IAAI,YAAY,EAAE,CAAC;YAAA,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QAAA,CAAC;IAC3D,CAAC;SAAM,IAAI,OAAO,KAAK,gBAAgB,EAAE,CAAC;QACxC,IAAI,gBAAgB,EAAE,CAAC;YAAA,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;QAAA,CAAC;IAChE,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpB,IAAI,gBAAgB,EAAE,CAAC;YAAA,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;QAAA,CAAC;QAC7D,8DAA8D;QAC9D,mEAAmE;QACnE,2CAA2C;QAC3C,IAAI,eAAe,EAAE,CAAC;YAAA,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,eAAe,CAAC,CAAC;QAAA,CAAC;IAC1E,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,uEAAuE,IAAI,IAAI,CAChF,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;AAED,uEAAuE;AACvE,iEAAiE;AACjE,sEAAsE;AACtE,kEAAkE;AAClE,sEAAsE;AACtE,qEAAqE;AACrE,kEAAkE;AAClE,kEAAkE;AAClE,gEAAgE;AAChE,uDAAuD;AACvD,mFAAmF;AACnF,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/E,KAAK,IAAI,EAAE,CAAC;AACd,CAAC;AACD,oBAAoB"}

package/dist/advance-floating-major.d.ts

@@ -15,9 +15,8 @@
  * package the config declares, `parseTagVersion` reads the version back
  * out, and the shared `forceMoveTag` performs the move — so the floating
  * tag can never track a release the publish path wouldn't recognize.
- * Synchronous, per the engine convention.
  */
 export declare function advanceFloatingMajor(opts: {
     cwd: string;
-}): number;
+}): Promise<number>;
 //# sourceMappingURL=advance-floating-major.d.ts.map

package/dist/advance-floating-major.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"advance-floating-major.d.ts","sourceRoot":"","sources":["../src/advance-floating-major.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AASH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAiClE"}
+{"version":3,"file":"advance-floating-major.d.ts","sourceRoot":"","sources":["../src/advance-floating-major.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AASH,wBAAsB,oBAAoB,CAAC,IAAI,EAAE;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAiCjF"}

package/dist/advance-floating-major.js

@@ -15,21 +15,20 @@
  * package the config declares, `parseTagVersion` reads the version back
  * out, and the shared `forceMoveTag` performs the move — so the floating
  * tag can never track a release the publish path wouldn't recognize.
- * Synchronous, per the engine convention.
  */
 import { join } from 'node:path';
 import { loadConfig } from './config.js';
 import { forceMoveTag } from './force-move-tag.js';
 import { fetchTagsForce, lastTag, tagCommit, tagList } from './git.js';
 import { parseTagVersion } from './tag-template.js';
-export function advanceFloatingMajor(opts) {
+export async function advanceFloatingMajor(opts) {
     const gitOpts = { cwd: opts.cwd };
-    const config = loadConfig(join(opts.cwd, 'putitoutthere.toml'));
+    const config = await loadConfig(join(opts.cwd, 'putitoutthere.toml'));
     const pkg = config.packages[0];
     // Refresh remote tags (force, so a tag moved on the remote since checkout
     // doesn't reject the fetch — #199) before re-deriving "latest release".
-    fetchTagsForce(gitOpts);
-    const latest = lastTag(pkg.name, pkg.tag_format, gitOpts);
+    await fetchTagsForce(gitOpts);
+    const latest = await lastTag(pkg.name, pkg.tag_format, gitOpts);
     if (latest === null) {
         process.stdout.write('No putitoutthere-v* tags yet; nothing to track.\n');
         return 0;
@@ -38,15 +37,15 @@ export function advanceFloatingMajor(opts) {
     const version = parseTagVersion(pkg.tag_format, pkg.name, latest);
     const major = version.split('.')[0];
     const floating = `v${major}`;
-    const target = tagCommit(latest, gitOpts);
-    const existing = tagList(floating, gitOpts);
-    const current = existing.length > 0 ? tagCommit(floating, gitOpts) : null;
+    const target = await tagCommit(latest, gitOpts);
+    const existing = await tagList(floating, gitOpts);
+    const current = existing.length > 0 ? await tagCommit(floating, gitOpts) : null;
     if (current === target) {
         process.stdout.write(`Floating tag ${floating} already at ${latest}; no update.\n`);
         return 0;
     }
     process.stdout.write(`Moving floating tag ${floating} -> ${target} (latest release ${latest})\n`);
-    forceMoveTag(floating, target, gitOpts);
+    await forceMoveTag(floating, target, gitOpts);
     return 0;
 }
 //# sourceMappingURL=advance-floating-major.js.map

package/dist/advance-floating-major.js.map

@@ -1 +1 @@
-{"version":3,"file":"advance-floating-major.js","sourceRoot":"","sources":["../src/advance-floating-major.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AACvE,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD,MAAM,UAAU,oBAAoB,CAAC,IAAqB;IACxD,MAAM,OAAO,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;IAClC,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC,CAAC;IAChE,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC;IAEhC,0EAA0E;IAC1E,wEAAwE;IACxE,cAAc,CAAC,OAAO,CAAC,CAAC;IAExB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC1D,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;QAC1E,OAAO,CAAC,CAAC;IACX,CAAC;IAED,2EAA2E;IAC3E,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,CAAE,CAAC;IACnE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;IACrC,MAAM,QAAQ,GAAG,IAAI,KAAK,EAAE,CAAC;IAE7B,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1E,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,QAAQ,eAAe,MAAM,gBAAgB,CAAC,CAAC;QACpF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,uBAAuB,QAAQ,OAAO,MAAM,oBAAoB,MAAM,KAAK,CAC5E,CAAC;IACF,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,OAAO,CAAC,CAAC;AACX,CAAC"}
+{"version":3,"file":"advance-floating-major.js","sourceRoot":"","sources":["../src/advance-floating-major.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AACvE,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAAqB;IAC9D,MAAM,OAAO,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;IAClC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC,CAAC;IACtE,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC;IAEhC,0EAA0E;IAC1E,wEAAwE;IACxE,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC;IAE9B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAChE,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;QAC1E,OAAO,CAAC,CAAC;IACX,CAAC;IAED,2EAA2E;IAC3E,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,CAAE,CAAC;IACnE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;IACrC,MAAM,QAAQ,GAAG,IAAI,KAAK,EAAE,CAAC;IAE7B,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChF,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,QAAQ,eAAe,MAAM,gBAAgB,CAAC,CAAC;QACpF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,uBAAuB,QAAQ,OAAO,MAAM,oBAAoB,MAAM,KAAK,CAC5E,CAAC;IACF,MAAM,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9C,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/advance-v0.d.ts

@@ -9,11 +9,10 @@
  * The workflow's Fold step (`fold-bundle`) synthesizes that commit first;
  * this then points `v0` at it.
  *
- * Synchronous, per the engine convention. Reuses the shared `forceMoveTag`
- * so the local `git tag -f` + ref-scoped force-push match the
- * floating-major mover exactly.
+ * Reuses the shared `forceMoveTag` so the local `git tag -f` + ref-scoped
+ * force-push match the floating-major mover exactly.
  */
 export declare function advanceV0(opts: {
     cwd: string;
-}): number;
+}): Promise<number>;
 //# sourceMappingURL=advance-v0.d.ts.map

package/dist/advance-v0.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"advance-v0.d.ts","sourceRoot":"","sources":["../src/advance-v0.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAKH,wBAAgB,SAAS,CAAC,IAAI,EAAE;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAKvD"}
+{"version":3,"file":"advance-v0.d.ts","sourceRoot":"","sources":["../src/advance-v0.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAKH,wBAAsB,SAAS,CAAC,IAAI,EAAE;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAKtE"}

package/dist/advance-v0.js

@@ -9,16 +9,15 @@
  * The workflow's Fold step (`fold-bundle`) synthesizes that commit first;
  * this then points `v0` at it.
  *
- * Synchronous, per the engine convention. Reuses the shared `forceMoveTag`
- * so the local `git tag -f` + ref-scoped force-push match the
- * floating-major mover exactly.
+ * Reuses the shared `forceMoveTag` so the local `git tag -f` + ref-scoped
+ * force-push match the floating-major mover exactly.
  */
 import { forceMoveTag } from './force-move-tag.js';
 import { headCommit } from './git.js';
-export function advanceV0(opts) {
-    const target = headCommit({ cwd: opts.cwd });
+export async function advanceV0(opts) {
+    const target = await headCommit({ cwd: opts.cwd });
     process.stdout.write(`Moving v0 -> ${target}\n`);
-    forceMoveTag('v0', target, { cwd: opts.cwd });
+    await forceMoveTag('v0', target, { cwd: opts.cwd });
     return 0;
 }
 //# sourceMappingURL=advance-v0.js.map

package/dist/advance-v0.js.map

@@ -1 +1 @@
-{"version":3,"file":"advance-v0.js","sourceRoot":"","sources":["../src/advance-v0.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAEtC,MAAM,UAAU,SAAS,CAAC,IAAqB;IAC7C,MAAM,MAAM,GAAG,UAAU,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,MAAM,IAAI,CAAC,CAAC;IACjD,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9C,OAAO,CAAC,CAAC;AACX,CAAC"}
+{"version":3,"file":"advance-v0.js","sourceRoot":"","sources":["../src/advance-v0.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAEtC,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAqB;IACnD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACnD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,MAAM,IAAI,CAAC,CAAC;IACjD,MAAM,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACpD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/cascade.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cascade.d.ts","sourceRoot":"","sources":["../src/cascade.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAG3C;;;;;;GAMG;AACH,MAAM,MAAM,qBAAqB,GAAG,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;AAE7E,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,SAAS,OAAO,EAAE,EAC5B,qBAAqB,EAAE,qBAAqB,GAC3C,OAAO,EAAE,CAoCX;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,GAAG,IAAI,CAqCjE"}
+{"version":3,"file":"cascade.d.ts","sourceRoot":"","sources":["../src/cascade.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAG3C;;;;;;GAMG;AACH,MAAM,MAAM,qBAAqB,GAAG,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;AAE7E,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,SAAS,OAAO,EAAE,EAC5B,qBAAqB,EAAE,qBAAqB,GAC3C,OAAO,EAAE,CAoCX;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,GAAG,IAAI,CAsCjE"}

package/dist/cascade.js

@@ -91,10 +91,11 @@ export function assertNoCycles(packages) {
         // `byName.get` is only undefined here when `visit` was entered with
         // a name we iterated over packages for — that list IS the keys of
         // byName, so this branch is unreachable under normal use. Defensive.
-        /* v8 ignore next */
+        /* v8 ignore start -- byName always contains every visited name; unreachable */
         if (!node) {
             return;
         }
+        /* v8 ignore stop */
         /* v8 ignore next -- depends_on default is always [] from the Zod schema */
         for (const dep of node.depends_on ?? []) {
             if (!byName.has(dep)) {

package/dist/cascade.js.map

@@ -1 +1 @@
-{"version":3,"file":"cascade.js","sourceRoot":"","sources":["../src/cascade.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAWvC,MAAM,UAAU,cAAc,CAC5B,QAA4B,EAC5B,qBAA4C;IAE5C,cAAc,CAAC,QAAQ,CAAC,CAAC;IAEzB,MAAM,MAAM,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QAAA,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAAA,CAAC;IAElD,+DAA+D;IAC/D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK,EAAE,CAAC;YAAA,SAAS;QAAA,CAAC;QACvB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC;gBAC3B,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACrB,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAED,2DAA2D;IAC3D,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,OAAO,OAAO,EAAE,CAAC;QACf,OAAO,GAAG,KAAK,CAAC;QAChB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBAAA,SAAS;YAAA,CAAC;YACrC,2EAA2E;YAC3E,MAAM,IAAI,GAAG,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC;YAChC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACrB,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;QACH,CAAC;IACH,CAAC;IAED,wBAAwB;IACxB,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AACtD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,QAA4B;IACzD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QAAA,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAAA,CAAC;IAGlD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAiB,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QAAA,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAAA,CAAC;IAEvD,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,IAAc,EAAQ,EAAE;QACnD,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,CAAC,KAAK,OAAO,EAAE,CAAC;YAAA,OAAO;QAAA,CAAC;QAC5B,IAAI,CAAC,KAAK,MAAM,EAAE,CAAC;YACjB,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpE,MAAM,IAAI,KAAK,CAAC,yCAAyC,KAAK,EAAE,CAAC,CAAC;QACpE,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACxB,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9B,oEAAoE;QACpE,kEAAkE;QAClE,qEAAqE;QACrE,oBAAoB;QACpB,IAAI,CAAC,IAAI,EAAE,CAAC;YAAA,OAAO;QAAA,CAAC;QACpB,2EAA2E;QAC3E,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;YACxC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CACb,gCAAgC,IAAI,8BAA8B,GAAG,GAAG,CACzE,CAAC;YACJ,CAAC;YACD,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAC9B,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3B,CAAC,CAAC;IAEF,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACpB,CAAC;AACH,CAAC"}
+{"version":3,"file":"cascade.js","sourceRoot":"","sources":["../src/cascade.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAWvC,MAAM,UAAU,cAAc,CAC5B,QAA4B,EAC5B,qBAA4C;IAE5C,cAAc,CAAC,QAAQ,CAAC,CAAC;IAEzB,MAAM,MAAM,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QAAA,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAAA,CAAC;IAElD,+DAA+D;IAC/D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK,EAAE,CAAC;YAAA,SAAS;QAAA,CAAC;QACvB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC;gBAC3B,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACrB,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAED,2DAA2D;IAC3D,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,OAAO,OAAO,EAAE,CAAC;QACf,OAAO,GAAG,KAAK,CAAC;QAChB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBAAA,SAAS;YAAA,CAAC;YACrC,2EAA2E;YAC3E,MAAM,IAAI,GAAG,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC;YAChC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACrB,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;QACH,CAAC;IACH,CAAC;IAED,wBAAwB;IACxB,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AACtD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,QAA4B;IACzD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QAAA,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAAA,CAAC;IAGlD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAiB,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QAAA,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAAA,CAAC;IAEvD,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,IAAc,EAAQ,EAAE;QACnD,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,CAAC,KAAK,OAAO,EAAE,CAAC;YAAA,OAAO;QAAA,CAAC;QAC5B,IAAI,CAAC,KAAK,MAAM,EAAE,CAAC;YACjB,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpE,MAAM,IAAI,KAAK,CAAC,yCAAyC,KAAK,EAAE,CAAC,CAAC;QACpE,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACxB,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9B,oEAAoE;QACpE,kEAAkE;QAClE,qEAAqE;QACrE,+EAA+E;QAC/E,IAAI,CAAC,IAAI,EAAE,CAAC;YAAA,OAAO;QAAA,CAAC;QACpB,oBAAoB;QACpB,2EAA2E;QAC3E,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;YACxC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CACb,gCAAgC,IAAI,8BAA8B,GAAG,GAAG,CACzE,CAAC;YACJ,CAAC;YACD,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAC9B,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3B,CAAC,CAAC;IAEF,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACpB,CAAC;AACH,CAAC"}

package/dist/check-crate-size.d.ts

@@ -22,5 +22,5 @@ import type { Package } from './config.js';
  * within the limit — or when a crate's size can't be determined, in
  * which case the check skips it rather than inventing a finding.
  */
-export declare function checkCratesPackageSize(packages: readonly Package[]): CheckFinding[];
+export declare function checkCratesPackageSize(packages: readonly Package[]): Promise<CheckFinding[]>;
 //# sourceMappingURL=check-crate-size.d.ts.map

package/dist/check-crate-size.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"check-crate-size.d.ts","sourceRoot":"","sources":["../src/check-crate-size.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAKH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAc3C;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,SAAS,OAAO,EAAE,GAC3B,YAAY,EAAE,CAehB"}
+{"version":3,"file":"check-crate-size.d.ts","sourceRoot":"","sources":["../src/check-crate-size.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAgB3C;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAC1C,QAAQ,EAAE,SAAS,OAAO,EAAE,GAC3B,OAAO,CAAC,YAAY,EAAE,CAAC,CAezB"}

package/dist/check-crate-size.js

@@ -14,9 +14,10 @@
  * config loader is covered by
  * `tests/integration/check-crate-size.integration.test.ts`.
  */
-import { spawnSync } from 'node:child_process';
 import { join } from 'node:path';
 import { ErrorCodes } from './error-codes.js';
+import { execCapture } from './utils/exec-capture.js';
+import { ExecError } from './utils/exec-error.js';
 // crates.io rejects any `.crate` upload over this size.
 const CRATES_MAX_UPLOAD_BYTES = 10 * 1024 * 1024;
 const CARGO_SIZE_UNIT_BYTES = {
@@ -32,14 +33,14 @@ const CARGO_SIZE_UNIT_BYTES = {
  * within the limit — or when a crate's size can't be determined, in
  * which case the check skips it rather than inventing a finding.
  */
-export function checkCratesPackageSize(packages) {
+export async function checkCratesPackageSize(packages) {
     const findings = [];
     for (const p of packages) {
         if (p.kind !== 'crates') {
             continue;
         }
         const cargoTomlPath = join(p.path, 'Cargo.toml');
-        const compressedBytes = packagedCrateBytes(cargoTomlPath);
+        const compressedBytes = await packagedCrateBytes(cargoTomlPath);
         if (compressedBytes === null) {
             continue;
         }
@@ -60,21 +61,29 @@ export function checkCratesPackageSize(packages) {
  * mirroring the null-means-skip shape `listTrackedFiles` uses outside a
  * git repo.
  */
-function packagedCrateBytes(cargoTomlPath) {
-    let result;
+async function packagedCrateBytes(cargoTomlPath) {
+    let stderr;
+    let status;
     try {
-        result = spawnSync('cargo', ['package', '--no-verify', '--allow-dirty', '--manifest-path', cargoTomlPath], { encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'] });
+        const r = await execCapture('cargo', [
+            'package', '--no-verify', '--allow-dirty', '--manifest-path', cargoTomlPath,
+        ]);
+        stderr = r.stderr;
+        status = 0;
     }
-    catch {
-        return null;
-    }
-    if (result.error !== undefined) {
-        return null;
+    catch (err) {
+        // cargo absent (ENOENT → status null) or a non-zero exit both mean
+        // "can't verify"; skip rather than invent a size finding.
+        if (!(err instanceof ExecError)) {
+            return null;
+        }
+        stderr = err.stderr;
+        status = err.status;
     }
-    if (result.status !== 0) {
+    if (status !== 0) {
         return null;
     }
-    return parseCargoCompressedBytes(result.stderr);
+    return parseCargoCompressedBytes(stderr);
 }
 /**
  * Pull the compressed `.crate` size out of `cargo package`'s summary

package/dist/check-crate-size.js.map

@@ -1 +1 @@
-{"version":3,"file":"check-crate-size.js","sourceRoot":"","sources":["../src/check-crate-size.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,SAAS,EAAyB,MAAM,oBAAoB,CAAC;AACtE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAIjC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,wDAAwD;AACxD,MAAM,uBAAuB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEjD,MAAM,qBAAqB,GAA2B;IACpD,CAAC,EAAE,CAAC;IACJ,GAAG,EAAE,IAAI;IACT,GAAG,EAAE,IAAI,IAAI,CAAC;IACd,GAAG,EAAE,IAAI,IAAI,CAAC;IACd,GAAG,EAAE,IAAI,IAAI,CAAC;CACf,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAA4B;IAE5B,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAAA,SAAS;QAAA,CAAC;QACpC,MAAM,aAAa,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACjD,MAAM,eAAe,GAAG,kBAAkB,CAAC,aAAa,CAAC,CAAC;QAC1D,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;YAAA,SAAS;QAAA,CAAC;QACzC,IAAI,eAAe,GAAG,uBAAuB,EAAE,CAAC;YAC9C,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,CAAC,CAAC,IAAI;gBACf,OAAO,EAAE,IAAI,UAAU,CAAC,wBAAwB,KAAK,aAAa,8BAA8B,SAAS,CAAC,eAAe,CAAC,6BAA6B,SAAS,CAAC,uBAAuB,CAAC,KAAK,uBAAuB,mLAAmL;aACzY,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,kBAAkB,CAAC,aAAqB;IAC/C,IAAI,MAAgC,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,GAAG,SAAS,CAChB,OAAO,EACP,CAAC,SAAS,EAAE,aAAa,EAAE,eAAe,EAAE,iBAAiB,EAAE,aAAa,CAAC,EAC7E,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CACxD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAAA,OAAO,IAAI,CAAC;IAAA,CAAC;IAC9C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAAA,OAAO,IAAI,CAAC;IAAA,CAAC;IACvC,OAAO,yBAAyB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAClD,CAAC;AAED;;;;GAIG;AACH,SAAS,yBAAyB,CAAC,WAAmB;IACpD,MAAM,CAAC,GAAG,uEAAuE,CAAC,IAAI,CACpF,WAAW,CACZ,CAAC;IACF,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QAAA,OAAO,IAAI,CAAC;IAAA,CAAC;IAC9B,MAAM,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAwC,CAAC;IACvE,MAAM,IAAI,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QAAA,OAAO,IAAI,CAAC;IAAA,CAAC;IACtC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,GAAG,CAAC,KAAK,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;AACrD,CAAC"}
+{"version":3,"file":"check-crate-size.js","sourceRoot":"","sources":["../src/check-crate-size.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAIjC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAElD,wDAAwD;AACxD,MAAM,uBAAuB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEjD,MAAM,qBAAqB,GAA2B;IACpD,CAAC,EAAE,CAAC;IACJ,GAAG,EAAE,IAAI;IACT,GAAG,EAAE,IAAI,IAAI,CAAC;IACd,GAAG,EAAE,IAAI,IAAI,CAAC;IACd,GAAG,EAAE,IAAI,IAAI,CAAC;CACf,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,QAA4B;IAE5B,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAAA,SAAS;QAAA,CAAC;QACpC,MAAM,aAAa,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACjD,MAAM,eAAe,GAAG,MAAM,kBAAkB,CAAC,aAAa,CAAC,CAAC;QAChE,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;YAAA,SAAS;QAAA,CAAC;QACzC,IAAI,eAAe,GAAG,uBAAuB,EAAE,CAAC;YAC9C,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,CAAC,CAAC,IAAI;gBACf,OAAO,EAAE,IAAI,UAAU,CAAC,wBAAwB,KAAK,aAAa,8BAA8B,SAAS,CAAC,eAAe,CAAC,6BAA6B,SAAS,CAAC,uBAAuB,CAAC,KAAK,uBAAuB,mLAAmL;aACzY,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,kBAAkB,CAAC,aAAqB;IACrD,IAAI,MAAc,CAAC;IACnB,IAAI,MAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE;YACnC,SAAS,EAAE,aAAa,EAAE,eAAe,EAAE,iBAAiB,EAAE,aAAa;SAC5E,CAAC,CAAC;QACH,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;QAClB,MAAM,GAAG,CAAC,CAAC;IACb,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,mEAAmE;QACnE,0DAA0D;QAC1D,IAAI,CAAC,CAAC,GAAG,YAAY,SAAS,CAAC,EAAE,CAAC;YAAA,OAAO,IAAI,CAAC;QAAA,CAAC;QAC/C,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QACpB,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;IACtB,CAAC;IACD,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;QAAA,OAAO,IAAI,CAAC;IAAA,CAAC;IAChC,OAAO,yBAAyB,CAAC,MAAM,CAAC,CAAC;AAC3C,CAAC;AAED;;;;GAIG;AACH,SAAS,yBAAyB,CAAC,WAAmB;IACpD,MAAM,CAAC,GAAG,uEAAuE,CAAC,IAAI,CACpF,WAAW,CACZ,CAAC;IACF,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QAAA,OAAO,IAAI,CAAC;IAAA,CAAC;IAC9B,MAAM,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAwC,CAAC;IACvE,MAAM,IAAI,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QAAA,OAAO,IAAI,CAAC;IAAA,CAAC;IACtC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,GAAG,CAAC,KAAK,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;AACrD,CAAC"}

package/dist/check.d.ts

@@ -45,5 +45,5 @@ export interface CheckOptions {
  * check assumes a parsed `Config`, and a missing or malformed file
  * would otherwise cascade into a noisy stack trace per package.
  */
-export declare function runChecks(opts: CheckOptions): CheckFinding[];
+export declare function runChecks(opts: CheckOptions): Promise<CheckFinding[]>;
 //# sourceMappingURL=check.d.ts.map

package/dist/check.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"check.d.ts","sourceRoot":"","sources":["../src/check.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AA0BH,MAAM,WAAW,YAAY;IAC3B;yEACqE;IACrE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;iDAC6C;IAC7C,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,mEAAmE;IACnE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;;GASG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,YAAY,GAAG,YAAY,EAAE,CA2C5D"}
+{"version":3,"file":"check.d.ts","sourceRoot":"","sources":["../src/check.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AA2BH,MAAM,WAAW,YAAY;IAC3B;yEACqE;IACrE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;iDAC6C;IAC7C,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,mEAAmE;IACnE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;;GASG;AACH,wBAAsB,SAAS,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAgD3E"}

package/dist/check.js

@@ -22,8 +22,7 @@
  *
  * Issue #319.
  */
-import { execFileSync } from 'node:child_process';
-import { existsSync, readFileSync, statSync } from 'node:fs';
+import { readFile, stat } from 'node:fs/promises';
 import { dirname, isAbsolute, join, resolve } from 'node:path';
 import { parse as parseToml } from 'smol-toml';
 import { assertNoCycles } from './cascade.js';
@@ -31,6 +30,8 @@ import { checkCratesPackageSize } from './check-crate-size.js';
 import { loadConfig } from './config.js';
 import { ErrorCodes } from './error-codes.js';
 import { expandDirGlob, matchesAny } from './glob.js';
+import { execCapture } from './utils/exec-capture.js';
+import { pathExists } from './utils/path-exists.js';
 import { assertTripleSupported } from './handlers/npm-platform.js';
 import { checkCargoShape, checkCratesMetadata, checkPackageJsonShape, checkProvenanceMetadata, checkPyprojectShape, checkPypiVersionSource, checkRepoUrlMatch, } from './preflight.js';
 import { formatTag } from './tag-template.js';
@@ -45,11 +46,11 @@ import { normalizeTarget } from './types.js';
  * check assumes a parsed `Config`, and a missing or malformed file
  * would otherwise cascade into a noisy stack trace per package.
  */
-export function runChecks(opts) {
+export async function runChecks(opts) {
     const findings = [];
     const cwd = opts.cwd;
     const cfgPath = opts.configPath ?? join(cwd, 'putitoutthere.toml');
-    if (!existsSync(cfgPath)) {
+    if (!(await pathExists(cfgPath))) {
         findings.push({
             message: `putitoutthere.toml not found at ${cfgPath}. Drop one at the repo root; see https://github.com/thekevinscott/putitoutthere#2-drop-in-putitoutthere-toml`,
         });
@@ -57,7 +58,7 @@ export function runChecks(opts) {
     }
     let packages;
     try {
-        const config = loadConfig(cfgPath);
+        const config = await loadConfig(cfgPath);
         // Anchor pkg.path to opts.cwd up front so per-kind fs ops point at
         // the right tree even when the CLI is invoked with --cwd from
         // outside the repo (mirrors publish.ts's loop).
@@ -67,57 +68,62 @@ export function runChecks(opts) {
         }));
     }
     catch (err) {
-        findings.push({ message: err instanceof Error ? err.message : String(err) });
+        findings.push({
+            message: err instanceof Error
+                ? err.message
+                : /* v8 ignore next -- loadConfig only ever throws Error; the String(err) fallback is unreachable */
+                    String(err),
+        });
         return findings;
     }
-    checkPaths(packages, findings);
-    checkGlobsMatchTrackedFiles(packages, cwd, findings);
+    await checkPaths(packages, findings);
+    await checkGlobsMatchTrackedFiles(packages, cwd, findings);
     checkDependsOn(packages, findings);
     checkTagTemplateCollisions(packages, findings);
-    checkNpmRepository(packages, findings);
-    checkCratesPackageMetadata(packages, findings);
-    findings.push(...checkCratesPackageSize(packages));
-    checkPyprojectAndBundleCli(packages, cwd, findings);
-    checkPypiVersion(packages, findings);
-    checkPyprojectShapeFindings(packages, findings);
-    checkCargoShapeFindings(packages, cwd, findings);
-    checkPackageJsonShapeFindings(packages, findings);
+    await checkNpmRepository(packages, findings);
+    await checkCratesPackageMetadata(packages, findings);
+    findings.push(...(await checkCratesPackageSize(packages)));
+    await checkPyprojectAndBundleCli(packages, cwd, findings);
+    await checkPypiVersion(packages, findings);
+    await checkPyprojectShapeFindings(packages, findings);
+    await checkCargoShapeFindings(packages, cwd, findings);
+    await checkPackageJsonShapeFindings(packages, findings);
     checkNpmTargetTriples(packages, findings);
-    checkRepoUrlMatchFindings(packages, findings);
+    await checkRepoUrlMatchFindings(packages, findings);
     return findings;
 }
-function checkRepoUrlMatchFindings(packages, findings) {
+async function checkRepoUrlMatchFindings(packages, findings) {
     // Sourced from GHA's process env at PR time when this runs inside the
     // reusable workflow. Locally invoked `putitoutthere check` outside any
     // GHA context will skip the check (the preflight returns no findings
     // when GITHUB_REPOSITORY is unset), which is the right behaviour:
     // there is no workflow source to disagree with.
     const githubRepository = process.env.GITHUB_REPOSITORY;
-    for (const f of checkRepoUrlMatch(packages, { githubRepository })) {
+    for (const f of await checkRepoUrlMatch(packages, { githubRepository })) {
         findings.push({
             package: f.package,
             message: `[${ErrorCodes.REPO_URL_MISMATCH}] ${f.manifestPath}: declared repository "${f.declaredOwnerRepo}" does not match GITHUB_REPOSITORY "${f.expectedOwnerRepo}". npm rejects \`--provenance\` publishes whose package.json#repository.url disagrees with the OIDC source claim (422); crates.io / PyPI trusted-publisher paths carry the same risk.`,
         });
     }
 }
-function checkPyprojectShapeFindings(packages, findings) {
-    for (const f of checkPyprojectShape(packages)) {
+async function checkPyprojectShapeFindings(packages, findings) {
+    for (const f of await checkPyprojectShape(packages)) {
         findings.push({
             package: f.package,
             message: `[${f.code}] ${f.pyprojectPath}: ${f.detail}`,
         });
     }
 }
-function checkCargoShapeFindings(packages, cwd, findings) {
-    for (const f of checkCargoShape(packages, { cwd })) {
+async function checkCargoShapeFindings(packages, cwd, findings) {
+    for (const f of await checkCargoShape(packages, { cwd })) {
         findings.push({
             package: f.package,
             message: `[${f.code}] ${f.cargoTomlPath}: ${f.detail}`,
         });
     }
 }
-function checkPackageJsonShapeFindings(packages, findings) {
-    for (const f of checkPackageJsonShape(packages)) {
+async function checkPackageJsonShapeFindings(packages, findings) {
+    for (const f of await checkPackageJsonShape(packages)) {
         findings.push({
             package: f.package,
             message: `[${f.code}] ${f.packageJsonPath}: ${f.detail}`,
@@ -125,9 +131,9 @@ function checkPackageJsonShapeFindings(packages, findings) {
     }
 }
 /* ----------------------------- internals ----------------------------- */
-function checkPaths(packages, findings) {
+async function checkPaths(packages, findings) {
     for (const p of packages) {
-        if (!existsSync(p.path) || !statSync(p.path).isDirectory()) {
+        if (!(await pathExists(p.path)) || !(await stat(p.path)).isDirectory()) {
             findings.push({
                 package: p.name,
                 message: `path "${p.path}" does not exist or is not a directory in the worktree`,
@@ -135,13 +141,13 @@ function checkPaths(packages, findings) {
         }
     }
 }
-function checkGlobsMatchTrackedFiles(packages, cwd, findings) {
-    const tracked = listTrackedFiles(cwd);
-    /* v8 ignore next -- tests always seed a git repo; defensive against
-       callers outside one */
+async function checkGlobsMatchTrackedFiles(packages, cwd, findings) {
+    const tracked = await listTrackedFiles(cwd);
+    /* v8 ignore start -- checks run inside the repo checkout where git ls-files always resolves; the null branch is defensive against callers outside a worktree */
     if (tracked === null) {
         return;
     }
+    /* v8 ignore stop -- end of defensive guard above */
     for (const p of packages) {
         const matched = tracked.some((f) => matchesAny(p.globs, f));
         if (!matched) {
@@ -157,7 +163,12 @@ function checkDependsOn(packages, findings) {
         assertNoCycles(packages);
     }
     catch (err) {
-        findings.push({ message: err instanceof Error ? err.message : String(err) });
+        findings.push({
+            message: err instanceof Error
+                ? err.message
+                : /* v8 ignore next -- assertNoCycles only ever throws Error; the String(err) fallback is unreachable */
+                    String(err),
+        });
     }
 }
 function checkTagTemplateCollisions(packages, findings) {
@@ -180,8 +191,8 @@ function checkTagTemplateCollisions(packages, findings) {
         }
     }
 }
-function checkNpmRepository(packages, findings) {
-    for (const f of checkProvenanceMetadata(packages)) {
+async function checkNpmRepository(packages, findings) {
+    for (const f of await checkProvenanceMetadata(packages)) {
         const reason = f.reason === 'missing'
             ? `${f.packageJsonPath} not found`
             : `${f.packageJsonPath} has missing or empty \`repository\``;
@@ -191,21 +202,21 @@ function checkNpmRepository(packages, findings) {
         });
     }
 }
-function checkCratesPackageMetadata(packages, findings) {
-    for (const f of checkCratesMetadata(packages)) {
+async function checkCratesPackageMetadata(packages, findings) {
+    for (const f of await checkCratesMetadata(packages)) {
         findings.push({
             package: f.package,
             message: `[${ErrorCodes.CRATES_MISSING_METADATA}] ${f.cargoTomlPath} missing required Cargo.toml [package] field(s): ${f.missing.join(', ')}. crates.io rejects the publish after cargo's verification build.`,
         });
     }
 }
-function checkPyprojectAndBundleCli(packages, cwd, findings) {
+async function checkPyprojectAndBundleCli(packages, cwd, findings) {
     for (const p of packages) {
         if (p.kind !== 'pypi') {
             continue;
         }
         const pyprojectPath = join(p.path, 'pyproject.toml');
-        if (!existsSync(pyprojectPath)) {
+        if (!(await pathExists(pyprojectPath))) {
             findings.push({
                 package: p.name,
                 message: `pyproject.toml not found at ${pyprojectPath}`,
@@ -223,21 +234,21 @@ function checkPyprojectAndBundleCli(packages, cwd, findings) {
             ? bundleCli.crate_path
             : resolve(cwd, bundleCli.crate_path);
         const cargoTomlPath = join(cratePathAbs, 'Cargo.toml');
-        if (!existsSync(cratePathAbs) || !statSync(cratePathAbs).isDirectory()) {
+        if (!(await pathExists(cratePathAbs)) || !(await stat(cratePathAbs)).isDirectory()) {
             findings.push({
                 package: p.name,
                 message: `bundle_cli.crate_path "${bundleCli.crate_path}" does not exist or is not a directory`,
             });
             continue;
         }
-        if (!existsSync(cargoTomlPath)) {
+        if (!(await pathExists(cargoTomlPath))) {
             findings.push({
                 package: p.name,
                 message: `bundle_cli.crate_path "${bundleCli.crate_path}" has no Cargo.toml`,
             });
             continue;
         }
-        const declaredBins = readDeclaredBins(cargoTomlPath);
+        const declaredBins = await readDeclaredBins(cargoTomlPath);
         if (!declaredBins.includes(bundleCli.bin)) {
             findings.push({
                 package: p.name,
@@ -246,8 +257,8 @@ function checkPyprojectAndBundleCli(packages, cwd, findings) {
         }
     }
 }
-function checkPypiVersion(packages, findings) {
-    for (const f of checkPypiVersionSource(packages)) {
+async function checkPypiVersion(packages, findings) {
+    for (const f of await checkPypiVersionSource(packages)) {
         findings.push({
             package: f.package,
             message: `[${ErrorCodes.PYPI_STATIC_VERSION}] ${f.pyprojectPath} declares a static \`[project].version\` literal. Use \`[project].dynamic = ["version"]\` with hatch-vcs (recommended), setuptools-scm, or the maturin Cargo.toml-driven path — putitoutthere does not edit pyproject.toml at release time, so a literal silently ships the previous release.`,
@@ -271,29 +282,26 @@ function checkNpmTargetTriples(packages, findings) {
             catch (err) {
                 findings.push({
                     package: p.name,
-                    message: err instanceof Error ? err.message : String(err),
+                    message: err instanceof Error
+                        ? err.message
+                        : /* v8 ignore next -- assertTripleSupported only ever throws Error; the String(err) fallback is unreachable */
+                            String(err),
                 });
             }
         }
     }
 }
-function listTrackedFiles(cwd) {
+async function listTrackedFiles(cwd) {
     try {
-        const out = execFileSync('git', ['ls-files'], {
-            cwd,
-            encoding: 'utf8',
-            stdio: ['ignore', 'pipe', 'pipe'],
-        });
-        return out.split('\n').filter((l) => l.length > 0);
-        /* v8 ignore start -- defensive against callers outside a git repo */
+        const { stdout } = await execCapture('git', ['ls-files'], { cwd });
+        return stdout.split('\n').filter((l) => l.length > 0);
     }
     catch {
         return null;
     }
-    /* v8 ignore stop */
 }
-function readDeclaredBins(cargoTomlPath) {
-    const parsed = parseCargoToml(cargoTomlPath);
+async function readDeclaredBins(cargoTomlPath) {
+    const parsed = await parseCargoToml(cargoTomlPath);
     if (parsed === null) {
         return [];
     }
@@ -308,8 +316,8 @@ function readDeclaredBins(cargoTomlPath) {
     // cargo resolves them. parseCargoToml returns null for missing /
     // malformed manifests, so stray entries silently drop out — cargo's
     // own diagnostics own surfacing those.
-    for (const memberManifest of workspaceMemberManifests(parsed, cargoTomlPath)) {
-        const memberParsed = parseCargoToml(memberManifest);
+    for (const memberManifest of await workspaceMemberManifests(parsed, cargoTomlPath)) {
+        const memberParsed = await parseCargoToml(memberManifest);
         if (memberParsed === null) {
             continue;
         }
@@ -321,7 +329,7 @@ function readDeclaredBins(cargoTomlPath) {
     }
     return result;
 }
-function workspaceMemberManifests(parsed, cargoTomlPath) {
+async function workspaceMemberManifests(parsed, cargoTomlPath) {
     const workspace = parsed.workspace;
     if (typeof workspace !== 'object' || workspace === null) {
         return [];
@@ -334,17 +342,17 @@ function workspaceMemberManifests(parsed, cargoTomlPath) {
     const out = [];
     for (const m of members) {
         if (typeof m === 'string') {
-            for (const memberDir of expandDirGlob(workspaceDir, m)) {
+            for (const memberDir of await expandDirGlob(workspaceDir, m)) {
                 out.push(join(memberDir, 'Cargo.toml'));
             }
         }
     }
     return out;
 }
-function parseCargoToml(path) {
+async function parseCargoToml(path) {
     let raw;
     try {
-        raw = readFileSync(path, 'utf8');
+        raw = await readFile(path, 'utf8');
     }
     catch {
         return null;