v0.4.1: attribution you can trust

A large fix wave from running real multi-agent fleets against one checkout. Two themes: attribution you can trust, and signals worth trusting.

Attribution you can trust

• Symbol claims that bind nothing are denied (with a did-you-mean suggestion) instead of granted-but-non-binding, which could silently protect nothing. --creating / creating: true opts into forward claims for symbols you are about to add.
• Absolute file paths (what Claude Code hooks and MCP clients actually send) no longer disable prevention and capture.
• Parallel subagents of one session get distinct identities (agent_id-derived ids), claim adoption binds MCP role claims to native-edit capture, and the checkout-global quilt start pointer no longer owns other agents' edits.
• --include-unclaimed can never touch another actor's claimed paths, and the read layer shows a peer's in-flight hunks as theirs (attribution pending), never "unclaimed". Status carries a file-level actors union.
• No more swept, torn, or dropped commits: contested-tree inference gating, torn-symbol withholding, and run-opening trivial-line resolution (}),, blank lines).

Signals worth trusting

• Clobber false positives eliminated (worktree matching HEAD, rewrites of landed code), and stale clobbers auto-resolve when the victim's work demonstrably landed.
• Claims live as long as you do: a 30-minute TTL renewed by any quilt activity. release reports lapsed claims, and denials carry the holder's expiry for retry pacing.
• Directory claims (convex/_generated/) cover codegen output in one claim.
• commit_mine reports its auto-released claims; release explains a zero.

Plus a fresh-user UX pass: version honesty, Cursor and AGENTS.md wiring, setup self-attribution, one identity story, and docs that teach the binding rules (docs/orchestrators.md).

Install: npm install -g @quilt-dev/cli

Full changelog: https://github.com/wkoverfield/quilt/blob/main/CHANGELOG.md