--- collection: coding-agents collection_name: Coding Agents week_start: 2026-05-18 title: iOS, Jira, and desktop shortcuts extend coding agents beyond the terminal release_count: 22 generated: 2026-07-11 canonical: https://releases.sh/collections/coding-agents/digest/2026-05-18 --- # iOS, Jira, and desktop shortcuts extend coding agents beyond the terminal Codex landed on iOS with Spotlight and Shortcuts support, Cursor shipped a Jira integration and shared canvases, and multiple agents tightened security around permission prompts and sandbox escapes. ### Agent orchestration and workflow tooling Anthropic gave Claude Code a new [Workflow tool](/release/rel_taDieQOnTX4-gXazi5aA5-claude-code-v2-1-147-adds-workflow-tool-and-hardens-sandbox-security) for deterministic multi-agent orchestration, disabled by default behind `CLAUDE_CODE_WORKFLOWS=1`. The same release hardened both the REPL and Workflow tool sandboxes against prototype-pollution and thenable-based escapes. Meanwhile, [Claude Code v2.1.149](/release/rel_s9TO6Lp7S9m9lqegWgeEe-claude-code-v2-1-149-fixes-powershell-permission-bypass-and-sandbox-allowlist) fixed a PowerShell permission bypass where built-in `cd` functions could change the working directory undetected, and corrected the sandbox write allowlist in git worktrees. A separate release [fixed a permission-prompt bypass](/release/rel_wDsKCiz48sDRzIbaM_rnw-claude-code-v2-1-145-fixes-permission-prompt-bypass-and-permission-header) where bare variable assignments to non-allowlisted environment variables were auto-approved in Bash commands, and [v2.1.145](/release/rel_wDsKCiz48sDRzIbaM_rnw-claude-code-v2-1-145-fixes-permission-prompt-bypass-and-permission-header) (same release) fixed Agent Teams teammates with non-ASCII names failing API calls. The renamed `/code-review` command (formerly `/simplify`) now supports configurable effort levels and GitHub PR comment integration across [two](/release/rel_taDieQOnTX4-gXazi5aA5-claude-code-v2-1-147-adds-workflow-tool-and-hardens-sandbox-security) [releases](/release/rel_7xjEpeW_oIjF6o1lESKp0-claude-code-v2-1-146-fixes-powershell-tool-and-mcp-pagination-issues). ### Codex expands surfaces and simplifies goals OpenAI's Codex had its biggest surface-area week in months. [Codex on iOS](/release/rel_2lA0Wqh52bOT4XrQq4px9-codex-chatbot-for-ios-adds-spotlight-and-shortcuts-support) gained Spotlight and Shortcuts support, letting you open Codex Mobile directly, browse archived threads, and invoke a `/side` command for side conversations. On desktop, [appshots](/release/rel_oTB6ALg9k686yOLzrEJYh-codex-adds-appshots-promotes-goal-mode-to-general-availability-and-enables) arrived on macOS — press both Command keys to send the frontmost app window to Codex as context without manual copying. Goal mode graduated from experimental to [general availability](/release/rel_oTB6ALg9k686yOLzrEJYh-codex-adds-appshots-promotes-goal-mode-to-general-availability-and-enables) across the app, IDE extension, and CLI, and the [CLI v0.133.0](/release/rel_DM5h88vPQS4yA-C0K7_D5-codex-cli-v0-133-0-enables-goals-by-default-and-extends-plugin-discovery) enables goals by default with dedicated storage. The same release introduced marketplace-aware plugin discovery, permission profile enhancements, and remote computer use that works even after your Mac locks. ### Peripheral expansion: Jira, shared canvases, and new architectures Cursor shipped two notable integrations this week. [Cursor in Jira](/release/rel_5XLlX1ezHI4B18Zi7vBBk-cursor-in-jira) lets you assign work items or `@Cursor` in comments to kick off cloud agents that read ticket context, fix bugs, add features, and create pull requests. [Shared canvases](/release/rel_AFeJanUKy9UaqZK4BEKbQ-shared-canvases) turn agent-created artifacts like reports and dashboards into shareable browser links for teammates. Cursor also brought [automations to the Agents Window](/release/rel_sc85xP00Ev5P9ievD6z8N-improvements-to-cursor-automations) with support for multiple attached repos or none at all. xAI expanded platform support: Grok Build added [macOS x86_64 and Windows ARM64 builds](/release/rel_hSBTpkD6FJ2QHIt8d_qkp-grok-build-0-1-212), fixed copy/paste on Linux Wayland, and replaced Shift+Enter with Alt+Enter on VTE-based terminals. Several [fixes](/release/rel_UL1c1b7GtUACrzLme9BLj-grok-build-0-1-219) addressed terminal rendering issues across Kitty, GNOME Terminal, and Windows Console Host. ### Smaller fixes across the ecosystem Claude Code v2.1.144 fixed [background session crashes](/release/rel_yVTX64BUt1JAMOcO0rT09-claude-code-v2-1-144-fixes-background-session-crashes-and-terminal-rendering) on macOS when projects live under Full Disk Access-protected folders, and progressive terminal corruption in very long sessions. A [quick follow-up](/release/rel_OlVXj5Cj47FgjHJZQl7zn-claude-code-v2-1-148-fixes-bash-tool-exit-code-127-regression) fixed a regression where the Bash tool returned exit code 127 on every command. Codex CLI [v0.132.0](/release/rel_TgNY23Sb9ORLF9ab-SYT9-codex-cli-0-132-0-adds-first-class-python-sdk-authentication-and-faster-tui) added first-class Python SDK authentication with API key login, ChatGPT browser flows, and faster TUI startup through batched terminal capability probes. ## Releases covered ### Anthropic - [Claude Code v2.1.147 adds Workflow tool and hardens sandbox security](https://releases.sh/release/rel_taDieQOnTX4-gXazi5aA5-workflow-tool-for-multi-agent-orchestration-sandbox-escapes-hardened) - [Claude Code v2.1.149 fixes PowerShell permission bypass and sandbox allowlist](https://releases.sh/release/rel_s9TO6Lp7S9m9lqegWgeEe-powershell-permission-bypass-closed-sandbox-allowlist-scoped) - [Claude Code v2.1.145 fixes permission-prompt bypass and permission header encoding](https://releases.sh/release/rel_wDsKCiz48sDRzIbaM_rnw-permission-prompt-bypass-closed-non-ascii-names-now-work) - [Claude Code v2.1.146 fixes PowerShell tool and MCP pagination issues](https://releases.sh/release/rel_7xjEpeW_oIjF6o1lESKp0-powershell-tool-works-with-winget-store-mcp-pagination-fixed) - [Claude Code v2.1.144 fixes background session crashes and terminal rendering corruption](https://releases.sh/release/rel_yVTX64BUt1JAMOcO0rT09-background-sessions-no-longer-crash-on-full-disk-access-folders-terminal) - [Claude Code v2.1.148 fixes Bash tool exit code 127 regression](https://releases.sh/release/rel_OlVXj5Cj47FgjHJZQl7zn-bash-tool-exit-code-127-regression-fixed) ### Cursor - [Cursor in Jira](https://releases.sh/release/rel_5XLlX1ezHI4B18Zi7vBBk-cursor-in-jira) - [Shared Canvases](https://releases.sh/release/rel_AFeJanUKy9UaqZK4BEKbQ-shared-canvases) - [Improvements to Cursor Automations](https://releases.sh/release/rel_sc85xP00Ev5P9ievD6z8N-improvements-to-cursor-automations) ### OpenAI - [Codex Chatbot for iOS adds Spotlight and Shortcuts support](https://releases.sh/release/rel_2lA0Wqh52bOT4XrQq4px9-spotlight-and-shortcuts-integration-side-conversations-launch) - [Codex adds appshots, promotes goal mode to general availability, and enables remote computer use](https://releases.sh/release/rel_oTB6ALg9k686yOLzrEJYh-appshots-launch-goal-mode-exits-beta-remote-computer-use-enabled) - [Codex CLI v0.133.0 enables goals by default and extends plugin discovery](https://releases.sh/release/rel_DM5h88vPQS4yA-C0K7_D5-goals-now-on-by-default-plugin-discovery-and-permission-profiles-expanded) - [Codex CLI 0.132.0 adds first-class Python SDK authentication and faster TUI startup](https://releases.sh/release/rel_TgNY23Sb9ORLF9ab-SYT9-python-sdk-gains-first-class-auth-tui-startup-faster) ### xAI - [Grok Build 0.1.212](https://releases.sh/release/rel_hSBTpkD6FJ2QHIt8d_qkp-grok-build-0-1-212) - [Grok Build 0.1.219](https://releases.sh/release/rel_UL1c1b7GtUACrzLme9BLj-grok-build-0-1-219)