@ngockhoale/ukit 3.4.68 → 3.4.69

package/CHANGELOG.md

@@ -2,6 +2,15 @@
 
 All notable changes to UKit are documented here.
 
+## 3.4.69 - 2026-10-25
+
+**Narrow shared-lock cancellation repair; no new unattended-Handoff certification.**
+
+- Fix: cancellation after a successful lock owner stamp now passes through token-checked, best-effort release before returning `aborted`; the callback remains unexecuted. Deterministic regression verifies lock absence and immediate reacquisition.
+- Tests: managed Handoff template cases pin owner-byte preservation, exact sidecar bytes/provenance and no-write aligned behavior. Preflight fixtures now use an independent temporary Git repository with ownership-checked cleanup, avoiding default dirty-worktree/sandbox accumulation without touching retained evidence.
+- Verification: independent original and cleanup-only reviews approved with minor findings; full release verifier passed (core 10,741 passed / three skipped, isolated handoff 351/351, artifact 39/39). Cleanup review retains a non-blocking concurrency-sensitive source-inventory assertion and fail-loud fixture cleanup caveats.
+- Limits unchanged: native isolation dispatch, clean unattended lifecycle/native-host acceptance, historical `ukitcmd25` loss and unidentified `79/1` remain unresolved. This fix is not established as the cause of those incidents. No 3.4.68 live-gate waiver is inherited or live acceptance claimed.
+
 ## 3.4.68 - 2026-10-25
 
 **Stable hardening release; outstanding live acceptance explicitly deferred by the owner for the internal six-person team. This is not certification of unattended Handoff.**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ngockhoale/ukit",
-  "version": "3.4.68",
+  "version": "3.4.69",
   "description": "Install/update an index-first AI workspace for Claude Code, OpenAI Codex and omp (Oh My Pi).",
   "license": "MIT",
   "type": "module",

package/template_project/.claude/ukit/runtime/async-lock.mjs

@@ -588,10 +588,10 @@ export async function withAsyncLock(filePath, { signal, deadlineMs = LOCK_MAX_SL
   // Abort between acquire and the critical section releases the owned lock through
   // the normal finally path and reports 'aborted' instead of running fn after the
   // caller was cancelled.
-  if (signal?.aborted) {
-    return { ok: false, reason: 'aborted', waitedMs: Date.now() - startedAt };
-  }
   try {
+    if (signal?.aborted) {
+      return { ok: false, reason: 'aborted', waitedMs: Date.now() - startedAt };
+    }
     return { ok: true, value: await fn() };
   } finally {
     // `owned` is only true when the mkdir AND the owner stamp both succeeded, so a