{"collection":{"slug":"coding-agents","name":"Coding Agents"},"digest":{"id":"cwd__wSYDdA03WDzyzUV605Q_","weekStart":"2026-05-18","title":"iOS, Jira, and desktop shortcuts extend coding agents beyond the terminal","intro":"Codex landed on iOS with Spotlight and Shortcuts support, Cursor shipped a Jira integration and shared canvases, and multiple agents tightened security around permission prompts and sandbox escapes.","body":"### Agent orchestration and workflow tooling\n\nAnthropic gave Claude Code a new [Workflow tool](/release/rel_taDieQOnTX4-gXazi5aA5-claude-code-v2-1-147-adds-workflow-tool-and-hardens-sandbox-security) for deterministic multi-agent orchestration, disabled by default behind `CLAUDE_CODE_WORKFLOWS=1`. The same release hardened both the REPL and Workflow tool sandboxes against prototype-pollution and thenable-based escapes. Meanwhile, [Claude Code v2.1.149](/release/rel_s9TO6Lp7S9m9lqegWgeEe-claude-code-v2-1-149-fixes-powershell-permission-bypass-and-sandbox-allowlist) fixed a PowerShell permission bypass where built-in `cd` functions could change the working directory undetected, and corrected the sandbox write allowlist in git worktrees. A separate release [fixed a permission-prompt bypass](/release/rel_wDsKCiz48sDRzIbaM_rnw-claude-code-v2-1-145-fixes-permission-prompt-bypass-and-permission-header) where bare variable assignments to non-allowlisted environment variables were auto-approved in Bash commands, and [v2.1.145](/release/rel_wDsKCiz48sDRzIbaM_rnw-claude-code-v2-1-145-fixes-permission-prompt-bypass-and-permission-header) (same release) fixed Agent Teams teammates with non-ASCII names failing API calls. The renamed `/code-review` command (formerly `/simplify`) now supports configurable effort levels and GitHub PR comment integration across [two](/release/rel_taDieQOnTX4-gXazi5aA5-claude-code-v2-1-147-adds-workflow-tool-and-hardens-sandbox-security) [releases](/release/rel_7xjEpeW_oIjF6o1lESKp0-claude-code-v2-1-146-fixes-powershell-tool-and-mcp-pagination-issues).\n\n### Codex expands surfaces and simplifies goals\n\nOpenAI's Codex had its biggest surface-area week in months. [Codex on iOS](/release/rel_2lA0Wqh52bOT4XrQq4px9-codex-chatbot-for-ios-adds-spotlight-and-shortcuts-support) gained Spotlight and Shortcuts support, letting you open Codex Mobile directly, browse archived threads, and invoke a `/side` command for side conversations. On desktop, [appshots](/release/rel_oTB6ALg9k686yOLzrEJYh-codex-adds-appshots-promotes-goal-mode-to-general-availability-and-enables) arrived on macOS — press both Command keys to send the frontmost app window to Codex as context without manual copying. Goal mode graduated from experimental to [general availability](/release/rel_oTB6ALg9k686yOLzrEJYh-codex-adds-appshots-promotes-goal-mode-to-general-availability-and-enables) across the app, IDE extension, and CLI, and the [CLI v0.133.0](/release/rel_DM5h88vPQS4yA-C0K7_D5-codex-cli-v0-133-0-enables-goals-by-default-and-extends-plugin-discovery) enables goals by default with dedicated storage. The same release introduced marketplace-aware plugin discovery, permission profile enhancements, and remote computer use that works even after your Mac locks.\n\n### Peripheral expansion: Jira, shared canvases, and new architectures\n\nCursor shipped two notable integrations this week. [Cursor in Jira](/release/rel_5XLlX1ezHI4B18Zi7vBBk-cursor-in-jira) lets you assign work items or `@Cursor` in comments to kick off cloud agents that read ticket context, fix bugs, add features, and create pull requests. [Shared canvases](/release/rel_AFeJanUKy9UaqZK4BEKbQ-shared-canvases) turn agent-created artifacts like reports and dashboards into shareable browser links for teammates. Cursor also brought [automations to the Agents Window](/release/rel_sc85xP00Ev5P9ievD6z8N-improvements-to-cursor-automations) with support for multiple attached repos or none at all.\n\nxAI expanded platform support: Grok Build added [macOS x86_64 and Windows ARM64 builds](/release/rel_hSBTpkD6FJ2QHIt8d_qkp-grok-build-0-1-212), fixed copy/paste on Linux Wayland, and replaced Shift+Enter with Alt+Enter on VTE-based terminals. Several [fixes](/release/rel_UL1c1b7GtUACrzLme9BLj-grok-build-0-1-219) addressed terminal rendering issues across Kitty, GNOME Terminal, and Windows Console Host.\n\n### Smaller fixes across the ecosystem\n\nClaude Code v2.1.144 fixed [background session crashes](/release/rel_yVTX64BUt1JAMOcO0rT09-claude-code-v2-1-144-fixes-background-session-crashes-and-terminal-rendering) on macOS when projects live under Full Disk Access-protected folders, and progressive terminal corruption in very long sessions. A [quick follow-up](/release/rel_OlVXj5Cj47FgjHJZQl7zn-claude-code-v2-1-148-fixes-bash-tool-exit-code-127-regression) fixed a regression where the Bash tool returned exit code 127 on every command. Codex CLI [v0.132.0](/release/rel_TgNY23Sb9ORLF9ab-SYT9-codex-cli-0-132-0-adds-first-class-python-sdk-authentication-and-faster-tui) added first-class Python SDK authentication with API key login, ChatGPT browser flows, and faster TUI startup through batched terminal capability probes.","releaseIds":["rel_taDieQOnTX4-gXazi5aA5","rel_s9TO6Lp7S9m9lqegWgeEe","rel_wDsKCiz48sDRzIbaM_rnw","rel_7xjEpeW_oIjF6o1lESKp0","rel_2lA0Wqh52bOT4XrQq4px9","rel_oTB6ALg9k686yOLzrEJYh","rel_DM5h88vPQS4yA-C0K7_D5","rel_5XLlX1ezHI4B18Zi7vBBk","rel_AFeJanUKy9UaqZK4BEKbQ","rel_sc85xP00Ev5P9ievD6z8N","rel_hSBTpkD6FJ2QHIt8d_qkp","rel_UL1c1b7GtUACrzLme9BLj","rel_yVTX64BUt1JAMOcO0rT09","rel_OlVXj5Cj47FgjHJZQl7zn","rel_TgNY23Sb9ORLF9ab-SYT9"],"releaseCount":22,"generatedAt":"2026-07-11T16:57:53.698Z","releases":[{"id":"rel_taDieQOnTX4-gXazi5aA5","title":"Claude Code v2.1.147 adds Workflow tool and hardens sandbox security","path":"/release/rel_taDieQOnTX4-gXazi5aA5-workflow-tool-for-multi-agent-orchestration-sandbox-escapes-hardened","org":{"slug":"anthropic","name":"Anthropic"},"importance":null},{"id":"rel_s9TO6Lp7S9m9lqegWgeEe","title":"Claude Code v2.1.149 fixes PowerShell permission bypass and sandbox allowlist","path":"/release/rel_s9TO6Lp7S9m9lqegWgeEe-powershell-permission-bypass-closed-sandbox-allowlist-scoped","org":{"slug":"anthropic","name":"Anthropic"},"importance":null},{"id":"rel_wDsKCiz48sDRzIbaM_rnw","title":"Claude Code v2.1.145 fixes permission-prompt bypass and permission header encoding","path":"/release/rel_wDsKCiz48sDRzIbaM_rnw-permission-prompt-bypass-closed-non-ascii-names-now-work","org":{"slug":"anthropic","name":"Anthropic"},"importance":null},{"id":"rel_7xjEpeW_oIjF6o1lESKp0","title":"Claude Code v2.1.146 fixes PowerShell tool and MCP pagination issues","path":"/release/rel_7xjEpeW_oIjF6o1lESKp0-powershell-tool-works-with-winget-store-mcp-pagination-fixed","org":{"slug":"anthropic","name":"Anthropic"},"importance":null},{"id":"rel_2lA0Wqh52bOT4XrQq4px9","title":"Codex Chatbot for iOS adds Spotlight and Shortcuts support","path":"/release/rel_2lA0Wqh52bOT4XrQq4px9-spotlight-and-shortcuts-integration-side-conversations-launch","org":{"slug":"openai","name":"OpenAI"},"importance":null},{"id":"rel_oTB6ALg9k686yOLzrEJYh","title":"Codex adds appshots, promotes goal mode to general availability, and enables remote computer use","path":"/release/rel_oTB6ALg9k686yOLzrEJYh-appshots-launch-goal-mode-exits-beta-remote-computer-use-enabled","org":{"slug":"openai","name":"OpenAI"},"importance":null},{"id":"rel_DM5h88vPQS4yA-C0K7_D5","title":"Codex CLI v0.133.0 enables goals by default and extends plugin discovery","path":"/release/rel_DM5h88vPQS4yA-C0K7_D5-goals-now-on-by-default-plugin-discovery-and-permission-profiles-expanded","org":{"slug":"openai","name":"OpenAI"},"importance":null},{"id":"rel_5XLlX1ezHI4B18Zi7vBBk","title":"Cursor in Jira","path":"/release/rel_5XLlX1ezHI4B18Zi7vBBk-cursor-in-jira","org":{"slug":"cursor","name":"Cursor"},"importance":null},{"id":"rel_AFeJanUKy9UaqZK4BEKbQ","title":"Shared Canvases","path":"/release/rel_AFeJanUKy9UaqZK4BEKbQ-shared-canvases","org":{"slug":"cursor","name":"Cursor"},"importance":null},{"id":"rel_sc85xP00Ev5P9ievD6z8N","title":"Improvements to Cursor Automations","path":"/release/rel_sc85xP00Ev5P9ievD6z8N-improvements-to-cursor-automations","org":{"slug":"cursor","name":"Cursor"},"importance":null},{"id":"rel_hSBTpkD6FJ2QHIt8d_qkp","title":"Grok Build 0.1.212","path":"/release/rel_hSBTpkD6FJ2QHIt8d_qkp-grok-build-0-1-212","org":{"slug":"xai","name":"xAI"},"importance":null},{"id":"rel_UL1c1b7GtUACrzLme9BLj","title":"Grok Build 0.1.219","path":"/release/rel_UL1c1b7GtUACrzLme9BLj-grok-build-0-1-219","org":{"slug":"xai","name":"xAI"},"importance":null},{"id":"rel_yVTX64BUt1JAMOcO0rT09","title":"Claude Code v2.1.144 fixes background session crashes and terminal rendering corruption","path":"/release/rel_yVTX64BUt1JAMOcO0rT09-background-sessions-no-longer-crash-on-full-disk-access-folders-terminal","org":{"slug":"anthropic","name":"Anthropic"},"importance":null},{"id":"rel_OlVXj5Cj47FgjHJZQl7zn","title":"Claude Code v2.1.148 fixes Bash tool exit code 127 regression","path":"/release/rel_OlVXj5Cj47FgjHJZQl7zn-bash-tool-exit-code-127-regression-fixed","org":{"slug":"anthropic","name":"Anthropic"},"importance":null},{"id":"rel_TgNY23Sb9ORLF9ab-SYT9","title":"Codex CLI 0.132.0 adds first-class Python SDK authentication and faster TUI startup","path":"/release/rel_TgNY23Sb9ORLF9ab-SYT9-python-sdk-gains-first-class-auth-tui-startup-faster","org":{"slug":"openai","name":"OpenAI"},"importance":null}]}}