codeg v0.38.0-fix1

CodeG v0.38.0-fix1

Ordinary completed conversation rounds now show their execution duration
consistently after live completion, conversation switching and history reload.
Codex's native task IDs and whole-task milliseconds are retained through parsing,
metadata reconciliation and the existing completion header. Usage arriving first
no longer stops timing backfill. Late requests cannot patch a newer batch or
another identified task; all retries and history reads remain bounded.

Native timing wins over inferred clocks. Only matching trustworthy execution
boundaries permit fallback subtraction. Tool calls, model-request fragments and
branch-return notices are not whole-task timers. Truly untimed older records
keep their unknown-time completion label.

The previous release's To-dos timing additions and extra Goal elapsed display
were based on a misunderstanding and are selectively removed. The valid focus
fix, native Direct / Plan / Goal execution controls and scroll feedback-loop
fixes are preserved. Leaving an active Goal still waits for a confirmed pause;
selecting Goal never resumes it implicitly.

The fork is rebased onto upstream v0.38.0 while preserving its recovery, bounded
history, native branching and deliverable functionality. Both Windows packages
include the matching CLI companion; Server also requires matching codeg-mcp and
the pinned Codex recovery runtime and helpers.

Validation gates include frontend lint/type checking/tests/static export, Rust
tests and clippy, native task identity/timing regressions, actual Server Web and
installed Setup WebView2 completion labels, native Plan/Goal controls, 2,000-row
scroll/late-image/iframe/composer regressions, complete frontend resource hashes,
embedded migrations applied to SQLite, PE dependency resolution and isolated
Setup installation/startup/upgrade from v0.36.0-fix1 with existing fixture data
retained. Both assets are downloaded and checked before publication and again
after publication. Final CI results and independently calculated asset hashes
are reported with the delivered release.

Only Windows x64 Setup, Windows x64 Server ZIP and their SHA256 files are
published. Installation and startup verification uses disposable CI directories,
without replacing, restarting or connecting to a user's running CodeG.

Warning

This fork release is built without the upstream signing and notarization credentials. Desktop installers and server archives are unsigned; server archives include SHA-256 checksums. Use manual installation instead of the signed automatic updater.