diff --git a/.agents/skills/release/SKILL.md b/.agents/skills/release/SKILL.md
index a482e5c..fefc419 100644
--- a/.agents/skills/release/SKILL.md
+++ b/.agents/skills/release/SKILL.md
@@ -138,6 +138,9 @@ here — this is the safety net for step 6.
 - Publishes crates in dependency order to crates.io.
 - `cargo workspaces plan --skip-published` makes re-runs safe: a run that dies
   mid-publish only publishes the crates still missing from the registry.
+- Workspace-member dev-deps must be path-only (`foo = { path = "../foo" }`), not
+  `foo.workspace = true`. cargo-workspaces strips dev-deps that carry a version,
+  which changes `Cargo.lock` and fails the `--locked` publish (ed-claude 1.4.0).
 
 ### `release-sdk-swift.yml` → XCFramework + `ed-swift`
 
diff --git a/Cargo.lock b/Cargo.lock
index 8f1a211..fc3becb 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1995,7 +1995,7 @@ checksum = "e1d926b4d407d372f141f93bb444696142c29d32962ccbd3531117cf3aa0bfa9"
 
 [[package]]
 name = "ed-acp"
-version = "1.4.0"
+version = "1.4.1"
 dependencies = [
  "agent-client-protocol",
  "anyhow",
@@ -2018,7 +2018,7 @@ dependencies = [
 
 [[package]]
 name = "ed-acp-tauri"
-version = "1.4.0"
+version = "1.4.1"
 dependencies = [
  "agent-client-protocol",
  "ed-acp",
@@ -2034,7 +2034,7 @@ dependencies = [
 
 [[package]]
 name = "ed-acp-testkit"
-version = "1.4.0"
+version = "1.4.1"
 dependencies = [
  "serde_json",
  "tokio",
@@ -2043,7 +2043,7 @@ dependencies = [
 
 [[package]]
 name = "ed-acp-tui"
-version = "1.4.0"
+version = "1.4.1"
 dependencies = [
  "agent-client-protocol",
  "anyhow",
@@ -2055,7 +2055,7 @@ dependencies = [
 
 [[package]]
 name = "ed-agent"
-version = "1.4.0"
+version = "1.4.1"
 dependencies = [
  "async-trait",
  "futures-core",
@@ -2069,7 +2069,7 @@ dependencies = [
 
 [[package]]
 name = "ed-agent-ffi"
-version = "1.4.0"
+version = "1.4.1"
 dependencies = [
  "async-trait",
  "cc",
@@ -2084,7 +2084,7 @@ dependencies = [
 
 [[package]]
 name = "ed-agent-tauri"
-version = "1.4.0"
+version = "1.4.1"
 dependencies = [
  "async-trait",
  "ed-agent",
@@ -2098,7 +2098,7 @@ dependencies = [
 
 [[package]]
 name = "ed-claude"
-version = "1.4.0"
+version = "1.4.1"
 dependencies = [
  "agent-client-protocol",
  "anyhow",
@@ -2113,7 +2113,7 @@ dependencies = [
 
 [[package]]
 name = "ed-mcp"
-version = "1.4.0"
+version = "1.4.1"
 dependencies = [
  "agent-client-protocol",
  "anyhow",
@@ -2132,7 +2132,7 @@ dependencies = [
 
 [[package]]
 name = "ed-onde-account"
-version = "1.4.0"
+version = "1.4.1"
 dependencies = [
  "axum",
  "reqwest 0.13.5",
diff --git a/Cargo.toml b/Cargo.toml
index 5787b6b..2243b9c 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -17,7 +17,7 @@ members = [
 # Shared across every crate in the workspace so a release moves one number.
 # `sync-version` tooling (see the Makefile) reads these.
 [workspace.package]
-version = "1.4.0"
+version = "1.4.1"
 edition = "2021"
 rust-version = "1.94"
 license = "MIT OR Apache-2.0"
@@ -60,14 +60,14 @@ directories = "6"
 base64 = "0.23"
 
 # Internal
-ed-agent = { version = "1.4.0", path = "crates/ed-agent" }
-ed-mcp = { version = "1.4.0", path = "crates/ed-mcp" }
-ed-acp = { version = "1.4.0", path = "crates/ed-acp" }
-ed-acp-tauri = { version = "1.4.0", path = "crates/ed-acp-tauri" }
-ed-acp-tui = { version = "1.4.0", path = "crates/ed-acp-tui" }
-ed-acp-testkit = { version = "1.4.0", path = "crates/ed-acp-testkit" }
-ed-onde-account = { version = "1.4.0", path = "crates/ed-onde-account" }
-ed-claude = { version = "1.4.0", path = "crates/ed-claude" }
+ed-agent = { version = "1.4.1", path = "crates/ed-agent" }
+ed-mcp = { version = "1.4.1", path = "crates/ed-mcp" }
+ed-acp = { version = "1.4.1", path = "crates/ed-acp" }
+ed-acp-tauri = { version = "1.4.1", path = "crates/ed-acp-tauri" }
+ed-acp-tui = { version = "1.4.1", path = "crates/ed-acp-tui" }
+ed-acp-testkit = { version = "1.4.1", path = "crates/ed-acp-testkit" }
+ed-onde-account = { version = "1.4.1", path = "crates/ed-onde-account" }
+ed-claude = { version = "1.4.1", path = "crates/ed-claude" }
 
 # gemm-common (via candle, via onde) depends on sysctl for every
 # `target_vendor = "apple"`, but sysctl 0.6.0 only has a `sys` module behind