Ternilo v0.1.3

Ternilo v0.1.3

本版补齐 Node 账号停用后的持久任务清理和完成确认，并修复组织登录的浏览器地址校验。

• 封禁或注销账号时，Server 持久登记 Node 清理请求。Node 按输入的账号、状态版本和接收凭据清理排队消息、运行任务、提醒、持续目标及受管进程，保留其他账号和本机的独立工作。解封不会恢复旧任务授权。
• Node 启动时同步授权，持久保存接收证据、撤销状态及清理回执。每个凭据绑定一个数据目录，空目录或新凭据不能替原实例确认任务已清理。
• Shell、job、terminal 和外部 ACP 使用独立进程监督。Windows 在子进程执行前绑定 Job Object；只有受管进程退出、目录占用释放和任务状态写入后才确认完成。离线或无法核实旧进程时保持待确认。
• 平台账号页新增“电脑任务清理”，显示电脑、空间、请求及确认时间和未完成原因，支持桌面与手机查看及手动刷新。
• 清理归档会话不启动其运行时；事件序号校验避免覆盖其他作者的新目标或重复删除提醒。账号撤销不会暂停其他作者的队列，人工对子任务的独立跟进也保留自己的授权来源。
• OIDC 登录前检查浏览器加密能力和回调来源，提供中英文操作提示。公网地址拒绝 0.0.0.0／:: 等监听地址；已保存的错误地址保留密码登录入口，便于修正设置。
• 共享授权、权限组及项目继承的变更可以通知连接同一数据库的其他 Server。网页自动更新资源列表，撤权后清空已打开的历史并停止旧订阅；这不代替跨 Server 的 Node 命令路由。

发行提供 Linux x86_64、Windows x86_64、macOS Apple Silicon、macOS Intel 的客户端、Server 二进制及 Desktop 安装器。Windows CLI 使用 ZIP，Linux／macOS CLI 使用 tar.gz，用户文档包含 docs/zh-CN/ 和 docs/en/。Desktop 安装器未签名／公证，自动更新关闭。

Node、Server 和独立 Worker 应使用相同发行版本。PostgreSQL 通过 schema owner 初始化 node_account_cleanup 和 resource_live 组件，服务继续使用受限 runtime 身份。清理确认覆盖 Ternilo 登记的执行资源，不回滚任务已经造成的外部效果。

Server 镜像为 ghcr.io/mosttt/ternilo-server:0.1.3（linux/amd64），附带 Compose 直接拉取镜像。SOURCE、SHA256SUMS 和 server-image.txt 分别记录来源、附件校验和镜像摘要。本版发布 Server 镜像，Work 保留独立设计空间。

---

Ternilo v0.1.3

This release adds durable Node cleanup and completion receipts for suspended accounts, and fixes browser-origin checks for organization sign-in.

• Account bans and removal persist cleanup requests. Nodes cancel the account's queued inputs, active work, schedules, goals and supervised resources while preserving unrelated accounts and local work. Unbanning does not authorize old tasks.
• Nodes synchronize authority before restoring remote work and persist input evidence, revocation state and receipts. Credentials bind a local data directory; a replacement directory or credential cannot confirm work from the original instance.
• Shell, jobs, terminals and external ACP tasks use independent process supervision. Windows assigns Job Objects before child execution. Confirmation requires supervised processes to exit, workspace ownership to be released and task state to be persisted. Offline Nodes and unknown prior process state remain pending.
• Account administration displays computer cleanup requests, scope, timestamps and outstanding errors, with desktop/mobile layouts and manual refresh.
• Archived cleanup does not start a session runtime. Conditional event writes preserve other authors' goals and avoid duplicate schedule deletion. Independent human follow-ups keep their own authorization origin.
• OIDC checks browser cryptography and callback origin before redirecting, with actionable Chinese and English messages. Public URLs reject wildcard listening addresses such as 0.0.0.0 and ::; password access remains available to correct an invalid saved URL.
• Sharing, permission-group and project-inheritance changes notify other Servers using the same database. Browsers refresh resource lists automatically; revocation clears open history and stops the previous subscription. This does not replace cross-Server Node command routing.

Client and Server binaries plus Desktop installers are provided for Linux x86_64, Windows x86_64, Apple Silicon and Intel macOS. Windows CLI archives use ZIP; Linux/macOS use tar.gz. User documentation includes docs/zh-CN/ and docs/en/. Desktop installers are unsigned/not notarized and automatic updates are disabled.

Use the same release for Node, Server and an independent Worker. PostgreSQL initializes the node_account_cleanup and resource_live components through the schema-owner connection, then serves with the restricted runtime identity. Cleanup confirmation covers registered execution resources and does not roll back external effects.

The Server image is ghcr.io/mosttt/ternilo-server:0.1.3 for linux/amd64. The attached Compose file pulls it directly. SOURCE, SHA256SUMS and server-image.txt record provenance, asset checksums and image digest. This release publishes the Server image; Work retains its separate design scope.
Server image: ghcr.io/mosttt/ternilo-server:0.1.3 (linux/amd64).