
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
@quilt-dev/cli
Advanced tools
Quilt is a command-line tool that tracks which agent wrote which lines in a shared Git checkout, so multiple AI coding agents can work in one repo at once and each commits only its own changes.
It captures every edit at the tool boundary, keeps a per-line record of who wrote
what, and reconstructs each agent's own changes at commit time. Git stays the
source of truth. Quilt never calls an LLM or spawns agents, and its state lives in
a .quilt/ sidecar you can delete without touching your repo.

npm install -g @quilt-dev/cli
quilt setup # wire Quilt into your repo (Claude Code, Cursor, or plain git)
You can run about three coding agents on one repo before they start clobbering each other. Two edit the same file and one silently overwrites the other. Their commits tangle into one blob you can't attribute. The usual advice is "run fewer," or "give each agent its own worktree."
Quilt lifts that ceiling. The agents share one checkout, and Quilt keeps attribution clean, prevents collisions, and gives each agent its own clean commit. And it holds as you add agents. Here are seven fanning out on one repo, run head to head:

That is ./examples/fleet.sh. It uses the quilt system, and you can also run it yourself.
commit --mine commits only your lines, even when
they share a hunk with another actor's.utils.js#formatPrice, not the whole file, so
agents editing different functions never contend. Ten languages via tree-sitter;
whole-file claims for the rest.Every commit Quilt produces is an ordinary Git commit. It trusts Git and never
rewrites it, and all state lives locally under .quilt/. No account, no daemon.
quilt setup # wire Quilt into the repo (MCP server, hooks, coordination)
quilt doctor # confirm it's wired and capture is flowing
That's it. Agents are named automatically: each Claude Code session or MCP connection gets its own id, so parallel agents are told apart with no setup. Set an explicit id when you want one that is stable across sessions:
QUILT_ACTOR=auth-agent claude # this agent's edits are attributed to auth-agent
Then each agent commits only its own lines:
quilt status # who owns what
quilt preview --mine # exact patch that would be committed
quilt commit --mine -m "fix auth redirect"
quilt fleet shows the whole picture: every actor, their claims, and anything
that needs a human. See docs/reference.md for the full
command list.
A worktree per agent is the usual answer, and for fully independent tasks it works. But isolation moves the problem to the end, and its costs grow with the number of agents.
| Run fewer agents | Worktree per agent | Quilt | |
|---|---|---|---|
| Parallelism | capped low | high | high |
| Setup per agent | none | full install/build/env × N | none (one checkout) |
| See each other's in-flight work | n/a | no | yes |
| Collisions | avoided by hand | surface at merge | prevented, or surfaced live |
| Clean per-agent commits | n/a | after a merge | yes |
Worktrees isolate; they don't coordinate. When agents work the same code at the same time, you usually want them to see each other and account for each other as they go. That is what Quilt does. The two aren't mutually exclusive: worktrees for independent, long-running work, Quilt for agents in the same code at once.
quilt setup wires the capture hooks and a shared MCP server. On Claude Code the
hooks let agents use the built-in Edit and Write tools normally while Quilt
records each change's author and blocks a write into code another agent holds,
with no protocol for the agent to follow and no setup: each session is named
automatically, or carries its own QUILT_ACTOR for a stable id. For other
runtimes, the same capture and prevention is available as MCP tools, with each
connection named automatically the same way.
See docs/orchestrators.md for Codex, Cursor, Aider, and the difference between process-per-agent and many-agents-in-one-process setups.
.quilt/ state layout.Contributions are welcome. See CONTRIBUTING.md.
MIT
FAQs
Actor-owned patches for Git. Same repo. Many agents. Clean commits.
The npm package @quilt-dev/cli receives a total of 46 weekly downloads. As such, @quilt-dev/cli popularity was classified as not popular.
We found that @quilt-dev/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.