v0.4.1

Summary

• Fix DCP tool permissions for orchestrator agents (depth 1): compress, distill, and prune were always DENIED due to conflicting permission mechanisms in task spawning
• Root cause: task.ts mapped primary_tools to {tool: false} in the deprecated tools parameter for both orchestrator and subagent paths, which prompt.ts converted to deny rules that overrode all user/DCP config
• Depth-aware policy: PM (depth 0) and Orchestrator (depth 1) can now use DCP tools; Subagents (depth 2+) remain denied

Notes

• Version bump: 0.4.0 -> 0.4.1
• Same bug exists in upstream opencode 1.1.48 (inherited, not introduced by fork)
• No other behavioral changes