v4.1.0

What's Changed

• fix(deploy): stabilize daemon startup by @Inakitajes in #371
• feat(security): harden npm supply chain against post-install script attacks by @Inakitajes in #372
• chore(infra): cleanup old podman images after deploy by @Inakitajes in #369
• chore(security): remediate npm dependency vulnerabilities by @Inakitajes in #373
• fix(connectors): reject duplicate custom connector names and prevent ambiguous remapping by @Inakitajes in #376
• feat(providers): add Hugging Face as supported provider by @Inakitajes in #374
• feat(learning): add learning proposals system with pending KB updates by @Inakitajes in #375
• fix(opencode): stop disposing instances mid-generation and surface real run errors by @Inakitajes in #377
• feat: archctl support version by @albertoperdomo2 in #379
• feat(learning): add ability to cancel learning runs by @Inakitajes in #380
• feat(web): Add narrow MCP access by @albertoperdomo2 in #361
• fix: upgrade OpenCode to 1.17.9 to fix GLM-5.2 compatibility by @Inakitajes in #381
• fix(workspace): improve knowledge mode file review by @Inakitajes in #382

Full Changelog: v4.0.1...v4.1.0