FarHelm V0.12.1

V0.12.1 completes and fixes the native Codex remote-control workflows introduced in V0.12.0.

Improvements / 改进

• Shared native event streaming and turn-state updates, including native queue execution. / 统一原生事件流和轮次状态，覆盖原生队列执行。
• Scoped, expiring, single-use approval responses; durable reconciliation for uncertain queue submissions without automatic replay. / 审批身份绑定、过期与单次回答；队列结果不确定时持久对账，禁止自动重发。
• Lifecycle guards for history, review, goals and temporary-task operations. / 补齐历史、审查、目标与临时任务操作门禁。
• Main-composer Skills, image upload/paste and native settings; richer plans, command output, diffs, reviews and usage display. / 主输入区支持 Skills、图片上传和粘贴、原生设置，并增强计划、输出、diff、审查和用量展示。
• Standalone temporary tasks, explicit end and bounded reconnect snapshots; fix premature cleanup when reopening the Agent database. / 独立临时任务、显式结束和有界重连快照，修复数据库重开时提前清理。
• Native pinning uses advertised native state instead of section names. / 置顶使用原生状态，不再通过分组名称模拟。

Compatibility / 兼容性

Upgrade Hub first, then Agents. Database schema remains 9 and the protocol remains farhelm/1. The release contains Linux x86_64 Hub and Agent binaries, stable aliases, third-party notices and SHA256SUMS.

先升级 Hub，再升级 Agent。数据库继续使用 schema 9，协议保持 farhelm/1。附件提供 Linux x86_64 Hub/Agent 程序、稳定名称副本、第三方声明及 SHA256SUMS。

Codex 0.153.4 does not expose native pinning or support native queue submissions in temporary tasks. Ordinary temporary text turns remain available. Native unloading follows the unsubscribe grace period. Unsupported operations report their limitation explicitly.

Codex 0.153.4 不提供原生置顶，也不接受临时任务的原生队列提交；临时任务普通文本轮次仍可运行。原生卸载遵循取消订阅宽限期，不支持的操作会明确提示。

Validation / 验证

137 Rust tests, 41 Console unit tests and 134 desktop/mobile UI tests passed (1 Rust test ignored; 12 UI tests skipped). Thirteen groups of real local Hub + Agent + Codex checks passed, including native queue client identity, history/SSE, temporary reconnect and privacy checks. Full approval/fault-injection matrices and production/TITAN deployment are not claimed by this release.

Rust 137 项、Console 单元测试 41 项、桌面/移动 UI 134 项通过（Rust 忽略 1 项，UI 跳过 12 项）。本地真实 Hub＋Agent＋Codex 的 13 组闭环通过，包含原生队列身份关联、历史/SSE、临时任务重连和隐私检查。尚未覆盖完整审批/故障注入矩阵，也未执行生产或 TITAN 升级。