@zq-silk/yui 0.13.0 → 0.13.1

package/dist/storage/upgrade/upgradeOrchestrator.js

@@ -589,7 +589,7 @@ async function executeSqliteInPlaceUpgrade(options, classification, now, callerP
                     finally {
                         db.close();
                     }
-                });
+                }, options.externalUpgradeFenceOwnerPid ?? callerPid);
             }
             catch (error) {
                 unexpected = error;
@@ -1358,7 +1358,7 @@ function executeFenced(options, classification, target, callerPid, now, switchSt
                     ? {}
                     : { backupPath: report.switch.backupPath })
             };
-        });
+        }, options.externalUpgradeFenceOwnerPid ?? callerPid);
     }
     catch (error) {
         if (!(error instanceof UpgradeFenceError))

package/dist/storage/upgradeCoordination.js

@@ -37,12 +37,13 @@ const COORDINATION_LOCK_MIN_AGE_MS = 1_000;
  * A hook that passed a check before an upgrade placed its fence either owns the
  * lock and finishes before cutover, or waits and receives an explicit
  * UpgradeFenceError after the cutover holder releases it.  There is no second
- * scan or retry protocol hidden in this helper.
+ * scan or retry protocol hidden in this helper. A staged updater child passes
+ * its already-authenticated parent fence owner through this same boundary.
  */
-export function withUpgradeCoordinationLock(home, execute) {
+export function withUpgradeCoordinationLock(home, execute, fenceOwnerPid = process.pid) {
     const release = acquireUpgradeCoordinationLock(home);
     try {
-        assertUpgradeAdmission(home);
+        assertUpgradeAdmission(home, fenceOwnerPid);
         return execute();
     }
     finally {
@@ -57,8 +58,8 @@ export function withUpgradeCoordinationLock(home, execute) {
  * avoiding a permanent post-promote hook deadlock.  A malformed marker with a
  * missing Home still fails closed because its recovery phase cannot be trusted.
  */
-export function assertUpgradeAdmission(home) {
-    assertHomeWritable(home);
+export function assertUpgradeAdmission(home, fenceOwnerPid = process.pid) {
+    assertHomeWritable(home, fenceOwnerPid);
     const progressPath = switchProgressPath(home);
     if (!existsSync(progressPath))
         return;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zq-silk/yui",
-  "version": "0.13.0",
+  "version": "0.13.1",
   "description": "Local control plane for long-running native agent CLI sessions backed by tmux.",
   "license": "MIT",
   "private": false,