Ternilo v0.1.2

Ternilo v0.1.2

本版补齐账号封禁／注销后的托管运行取消，并隔离不同作者与执行授权账号的队列批次。

• 账号停用、凭据撤销和托管任务取消在同一事务完成，覆盖全部租户及派生运行。排队和未启动的任务取消并释放预留；运行中的任务收到持久停止命令，等待 Worker 实际收尾回执。
• 按当前执行授权账号处理取消，保留同一会话其他账号的独立任务。排队消息被其他成员编辑后，执行授权属于编辑者，历史消息保留最初作者。解封不会恢复已取消的任务，历史文件效果和实际用量保留。
• Local／Cloud 队列只合并连续且身份明确的同作者消息。Cloud 同时要求执行授权相同；未知来源和无法证明共同作者的自动任务单条执行，不跨越其他作者的消息合并。
• 提交、编辑和启动前复核账号访问状态。批量取消先取得所需会话锁，争用时整事务回滚并有限重试，避免与提交或子任务调度形成锁环。
• 管理页面的中英文确认说明同步显示任务取消影响。CI 增加 SQLite、受限 PostgreSQL 的清理／作者隔离契约，以及真实管理页面的桌面和手机验收。

发行提供 Linux x86_64、Windows x86_64、macOS Apple Silicon、macOS Intel 的客户端和 Server 二进制及 Desktop 安装器。Windows CLI 使用 ZIP，Linux／macOS CLI 使用 tar.gz；文档按 docs/zh-CN/、docs/en/ 分类。Desktop 安装器未签名／公证，自动更新关闭。

Server 镜像为 ghcr.io/mosttt/ternilo-server:0.1.2（linux/amd64），附带的 Compose 直接拉取镜像。SOURCE、SHA256SUMS 和 server-image.txt 提供来源、附件校验和镜像摘要。PostgreSQL 由 schema owner 初始化 cloud_account_cleanup 组件，服务使用受限 runtime 身份。

Node 已开始的任务、持续目标和离线队列清理仍需执行端确认；账号停用不代表所有外部进程已停止。资源交接与跨 Server 路由继续推进，Work 保持设计预留，本版发布 Server 镜像。

---

Ternilo v0.1.2

This release adds managed-run cancellation when accounts are banned or closed and separates queued work by author and execution authorization.

• Account status changes, credential revocation and managed-run cancellation commit atomically across tenants and derived runs. Queued and unstarted tasks are cancelled and release reservations. Running tasks receive durable stop commands and retain their pending state until the Worker reports the actual end.
• Cancellation follows the current execution account and preserves other accounts' independently authorized tasks in the same session. Editing another member's queued message authorizes execution as the editor while keeping the original message author. Unbanning does not revive cancelled work; file effects and actual usage remain.
• Local and Cloud combine only consecutive messages with a provable common author. Cloud also requires matching execution accounts. Unattributed inputs and automated tasks without a common author run individually and cannot jump over another author's messages.
• Submission, editing and starting recheck account access. Batch cancellation acquires the required session locks before changing reservations; contention rolls back the entire transaction with bounded retries, avoiding deadlocks with admission and subagent scheduling.
• Chinese and English administration confirmations explain the task effects. CI covers SQLite, restricted PostgreSQL, author boundaries and actual desktop/mobile administration in Chromium.

Client and Server binaries and Desktop installers cover Linux x86_64, Windows x86_64, macOS Apple Silicon and macOS Intel. Windows CLI archives use ZIP; Linux/macOS use tar.gz. Documentation is organized under docs/zh-CN/ and docs/en/. Desktop installers are unsigned and automatic updates remain disabled.

The Server image is ghcr.io/mosttt/ternilo-server:0.1.2 for linux/amd64. The attached Compose file pulls it directly. SOURCE, SHA256SUMS and server-image.txt record source provenance, asset checksums and the image digest. PostgreSQL requires schema-owner initialization of cloud_account_cleanup; the service uses its restricted runtime identity.

Running Node tasks, persistent goals and offline Node queues still need executor cleanup confirmation. Account suspension is not proof that every external process has stopped. Resource handoff and routing across Server replicas remain in progress. Work remains a design reservation; this release publishes the Server image.
Server image: ghcr.io/mosttt/ternilo-server:0.1.2 (linux/amd64).