iOS, Jira, and desktop shortcuts extend coding agents beyond the terminal
May 18–24, 2026
Codex landed on iOS with Spotlight and Shortcuts support, Cursor shipped a Jira integration and shared canvases, and multiple agents tightened security around permission prompts and sandbox escapes.
Agent orchestration and workflow tooling
Anthropic gave Claude Code a new Workflow tool for deterministic multi-agent orchestration, disabled by default behind CLAUDE_CODE_WORKFLOWS=1. The same release hardened both the REPL and Workflow tool sandboxes against prototype-pollution and thenable-based escapes. Meanwhile, Claude Code v2.1.149 fixed a PowerShell permission bypass where built-in cd functions could change the working directory undetected, and corrected the sandbox write allowlist in git worktrees. A separate release fixed a permission-prompt bypass where bare variable assignments to non-allowlisted environment variables were auto-approved in Bash commands, and v2.1.145 (same release) fixed Agent Teams teammates with non-ASCII names failing API calls. The renamed /code-review command (formerly /simplify) now supports configurable effort levels and GitHub PR comment integration across two releases.
Codex expands surfaces and simplifies goals
OpenAI's Codex had its biggest surface-area week in months. Codex on iOS gained Spotlight and Shortcuts support, letting you open Codex Mobile directly, browse archived threads, and invoke a /side command for side conversations. On desktop, appshots arrived on macOS — press both Command keys to send the frontmost app window to Codex as context without manual copying. Goal mode graduated from experimental to general availability across the app, IDE extension, and CLI, and the CLI v0.133.0 enables goals by default with dedicated storage. The same release introduced marketplace-aware plugin discovery, permission profile enhancements, and remote computer use that works even after your Mac locks.
Peripheral expansion: Jira, shared canvases, and new architectures
Cursor shipped two notable integrations this week. Cursor in Jira lets you assign work items or @Cursor in comments to kick off cloud agents that read ticket context, fix bugs, add features, and create pull requests. Shared canvases turn agent-created artifacts like reports and dashboards into shareable browser links for teammates. Cursor also brought automations to the Agents Window with support for multiple attached repos or none at all.
xAI expanded platform support: Grok Build added macOS x86_64 and Windows ARM64 builds, fixed copy/paste on Linux Wayland, and replaced Shift+Enter with Alt+Enter on VTE-based terminals. Several fixes addressed terminal rendering issues across Kitty, GNOME Terminal, and Windows Console Host.
Smaller fixes across the ecosystem
Claude Code v2.1.144 fixed background session crashes on macOS when projects live under Full Disk Access-protected folders, and progressive terminal corruption in very long sessions. A quick follow-up fixed a regression where the Bash tool returned exit code 127 on every command. Codex CLI v0.132.0 added first-class Python SDK authentication with API key login, ChatGPT browser flows, and faster TUI startup through batched terminal capability probes.
Releases covered
- Claude Code v2.1.147 adds Workflow tool and hardens sandbox security
- Claude Code v2.1.149 fixes PowerShell permission bypass and sandbox allowlist
- Claude Code v2.1.145 fixes permission-prompt bypass and permission header encoding
- Claude Code v2.1.146 fixes PowerShell tool and MCP pagination issues
- Claude Code v2.1.144 fixes background session crashes and terminal rendering corruption
- Claude Code v2.1.148 fixes Bash tool exit code 127 regression
- Codex Chatbot for iOS adds Spotlight and Shortcuts support
- Codex adds appshots, promotes goal mode to general availability, and enables remote computer use
- Codex CLI v0.133.0 enables goals by default and extends plugin discovery
- Codex CLI 0.132.0 adds first-class Python SDK authentication and faster TUI startup