releases.shpreview
Home/Collections/Coding Agents/Week of May 18, 2026

iOS, Jira, and desktop shortcuts extend coding agents beyond the terminal

May 18–24, 2026

Codex landed on iOS with Spotlight and Shortcuts support, Cursor shipped a Jira integration and shared canvases, and multiple agents tightened security around permission prompts and sandbox escapes.

Agent orchestration and workflow tooling

Anthropic gave Claude Code a new Workflow tool for deterministic multi-agent orchestration, disabled by default behind CLAUDE_CODE_WORKFLOWS=1. The same release hardened both the REPL and Workflow tool sandboxes against prototype-pollution and thenable-based escapes. Meanwhile, Claude Code v2.1.149 fixed a PowerShell permission bypass where built-in cd functions could change the working directory undetected, and corrected the sandbox write allowlist in git worktrees. A separate release fixed a permission-prompt bypass where bare variable assignments to non-allowlisted environment variables were auto-approved in Bash commands, and v2.1.145 (same release) fixed Agent Teams teammates with non-ASCII names failing API calls. The renamed /code-review command (formerly /simplify) now supports configurable effort levels and GitHub PR comment integration across two releases.

Codex expands surfaces and simplifies goals

OpenAI's Codex had its biggest surface-area week in months. Codex on iOS gained Spotlight and Shortcuts support, letting you open Codex Mobile directly, browse archived threads, and invoke a /side command for side conversations. On desktop, appshots arrived on macOS — press both Command keys to send the frontmost app window to Codex as context without manual copying. Goal mode graduated from experimental to general availability across the app, IDE extension, and CLI, and the CLI v0.133.0 enables goals by default with dedicated storage. The same release introduced marketplace-aware plugin discovery, permission profile enhancements, and remote computer use that works even after your Mac locks.

Peripheral expansion: Jira, shared canvases, and new architectures

Cursor shipped two notable integrations this week. Cursor in Jira lets you assign work items or @Cursor in comments to kick off cloud agents that read ticket context, fix bugs, add features, and create pull requests. Shared canvases turn agent-created artifacts like reports and dashboards into shareable browser links for teammates. Cursor also brought automations to the Agents Window with support for multiple attached repos or none at all.

xAI expanded platform support: Grok Build added macOS x86_64 and Windows ARM64 builds, fixed copy/paste on Linux Wayland, and replaced Shift+Enter with Alt+Enter on VTE-based terminals. Several fixes addressed terminal rendering issues across Kitty, GNOME Terminal, and Windows Console Host.

Smaller fixes across the ecosystem

Claude Code v2.1.144 fixed background session crashes on macOS when projects live under Full Disk Access-protected folders, and progressive terminal corruption in very long sessions. A quick follow-up fixed a regression where the Bash tool returned exit code 127 on every command. Codex CLI v0.132.0 added first-class Python SDK authentication with API key login, ChatGPT browser flows, and faster TUI startup through batched terminal capability probes.

Releases covered