@zq-silk/yui 0.13.0 → 0.13.2

package/dist/cli.js

@@ -547,8 +547,12 @@ export async function main() {
         validateCompatibleFileTaskStore(home);
         const controllerMethod = method;
         const updateHandoverOwner = process.env.YUI_UPDATE_HANDOVER_OWNER_PID;
+        // A pre-fix updater cannot pass the owner environment variable to the
+        // activated restart child, but it remains that child's direct parent while
+        // holding the exact handover lock. Inherit only that OS-backed relationship;
+        // every unrelated live lock still compares foreign and fails closed.
         const updateHandoverOwnerPid = updateHandoverOwner === undefined
-            ? undefined
+            ? (Number.isSafeInteger(process.ppid) && process.ppid > 0 ? process.ppid : undefined)
             : Number(updateHandoverOwner);
         if (updateHandoverOwnerPid !== undefined
             && (!Number.isSafeInteger(updateHandoverOwnerPid) || updateHandoverOwnerPid < 1)) {

package/dist/storage/upgrade/upgradeOrchestrator.js

@@ -589,7 +589,7 @@ async function executeSqliteInPlaceUpgrade(options, classification, now, callerP
                     finally {
                         db.close();
                     }
-                });
+                }, options.externalUpgradeFenceOwnerPid ?? callerPid);
             }
             catch (error) {
                 unexpected = error;
@@ -1358,7 +1358,7 @@ function executeFenced(options, classification, target, callerPid, now, switchSt
                     ? {}
                     : { backupPath: report.switch.backupPath })
             };
-        });
+        }, options.externalUpgradeFenceOwnerPid ?? callerPid);
     }
     catch (error) {
         if (!(error instanceof UpgradeFenceError))

package/dist/storage/upgradeCoordination.js

@@ -37,12 +37,13 @@ const COORDINATION_LOCK_MIN_AGE_MS = 1_000;
  * A hook that passed a check before an upgrade placed its fence either owns the
  * lock and finishes before cutover, or waits and receives an explicit
  * UpgradeFenceError after the cutover holder releases it.  There is no second
- * scan or retry protocol hidden in this helper.
+ * scan or retry protocol hidden in this helper. A staged updater child passes
+ * its already-authenticated parent fence owner through this same boundary.
  */
-export function withUpgradeCoordinationLock(home, execute) {
+export function withUpgradeCoordinationLock(home, execute, fenceOwnerPid = process.pid) {
     const release = acquireUpgradeCoordinationLock(home);
     try {
-        assertUpgradeAdmission(home);
+        assertUpgradeAdmission(home, fenceOwnerPid);
         return execute();
     }
     finally {
@@ -57,8 +58,8 @@ export function withUpgradeCoordinationLock(home, execute) {
  * avoiding a permanent post-promote hook deadlock.  A malformed marker with a
  * missing Home still fails closed because its recovery phase cannot be trusted.
  */
-export function assertUpgradeAdmission(home) {
-    assertHomeWritable(home);
+export function assertUpgradeAdmission(home, fenceOwnerPid = process.pid) {
+    assertHomeWritable(home, fenceOwnerPid);
     const progressPath = switchProgressPath(home);
     if (!existsSync(progressPath))
         return;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zq-silk/yui",
-  "version": "0.13.0",
+  "version": "0.13.2",
   "description": "Local control plane for long-running native agent CLI sessions backed by tmux.",
   "license": "MIT",
   "private": false,