OpenCollab 0.4.1

Added

• Added immutable non-secret effective configuration metadata, public stateless
  tool composition, and caller-owned Local, Worktree, and image-backed Docker
  environment factories for external integrations. Configuration metadata
  includes deep-copied thinking parameters and a SHA-256 endpoint fingerprint
  without exposing the base URL.
• Expanded the public workflow-authoring contract with the supported agent
  controls, draft findings, working-tree diff access, and live token
  observation.
• Added public agent and workflow step limits, cleanup deadlines, workflow
  system prompts, aggregate session metrics, and sanitized child-agent failure
  summaries.
• Added the narrow VerificationTool contract for reading parser-verified test
  targets without importing a concrete test adapter.

Changed

• Team configuration is now explicit: the CLI and SDK use the built-in
  lead-only team unless a file is selected with --team-config, config=, or
  OPENCOLLAB_TEAM_FILE; conventional filenames are no longer auto-discovered.
• Replaced the request-heavy SDK v2 surface with the compact OpenCollab facade:
  agent, team, and workflow now share one RunResult, central configuration,
  and bootstrap-owned lifecycle wiring.
• Workflow budget stops now use an explicit runtime reason rather than
  interpreting caller output, and timeout or execution failures retain finalized
  session metrics when lifecycle evidence is complete.
• Reduced the everyday Python API to four root exports and moved optional tool,
  environment, and workflow-authoring contracts into small capability modules.
• Adopted the Mulan Permissive Software License v2 (MulanPSL-2.0) for OpenCollab.
• Flattened the Python project layout so the repository root owns build metadata, tests, and the canonical license
  while public opencollab.* import paths remain unchanged.
• Prepared the public SDK distribution for release with a package-version
  consistency gate, standards-based license metadata, bundled notices, and a
  minimal integration example.
• Moved benchmark datasets, adapters, runners, and reports out of the framework
  package. External evaluation packages now compose the compact SDK and Clean
  Architecture ports, while reusable evidence-capture primitives remain part of
  workflow authoring.
• Raised the package version to 0.4.1 for the incompatible compact SDK boundary.

Fixed

• Restored the exact terminal state after turn-scoped TUI keyboard navigation on
  macOS and added the terminal probe to macOS CI.
• Emitted valid JavaScript comments around the vendored js-yaml license in Team
  Config HTML blueprints.

Removed

• Removed the SDK v2 request/result DTO graph, its independent API-version integer,
  and the obsolete sdk.models, sdk.runtime, sdk.environment, sdk.errors,
  sdk.tools, sdk.usage, and sdk.workflows modules.