{"collection":{"slug":"coding-agents","name":"Coding Agents"},"digest":{"id":"cwd_nqO4aqjUBl_U3imARDPCw","weekStart":"2026-09-14","title":"Agents get a voice, a memory, and a tighter grip on credentials","intro":"Claude Code shipped seven releases in six days, Devin and Codex both added live voice sessions, and across all three agents credentials, transcripts, and sandbox escapes got serious hardening.","body":"### Agents learn to talk\n\nThe week's most visible shift is that coding agents started speaking. [Codex CLI 0.155.0](/release/rel_JotzQfuFf_u8NV4btlouH-codex-cli-0-155-0-adds-experimental-voice-conversations-and-touch-id-for-mcp) added experimental `/voice` conversations with live transcripts and microphone controls, enabled through `/experimental`, and the same release brought Touch ID verification for MCP requests in local TUI sessions on supported Macs — a neat pairing of \"let it listen to you\" and \"make sure it is you.\" Devin shipped a competing take a day earlier with [live voice mode](/release/rel_ACOkQGJzq0IqqkhoWRR7C-devin-adds-live-voice-mode-skipped-question-states-and-gitlab-automation-scope), moving calls onto a live speech model with ringtone-while-connecting, hold-Space-to-talk after muting, ordered spoken replies in the transcript, and Slack thread attribution showing who was on the call. Codex also polished the non-voice TUI, adding live reasoning summaries and completion timestamps, though [0.155.1](/release/rel_ouHUMdTjnl8p6YcHlBizT-codex-cli-0-155-1-disables-reasoning-summaries-by-default-in-new-tui-sessions) walked the reasoning summaries back to disabled-by-default in new local sessions after providers without support rejected the requests — a reminder that these surfaces are still settling.\n\n[Codex for iOS](/release/rel_yHCdCk5m7n-MZ5kfJ2Cz2-codex-for-ios-adds-folders-in-file-picker-and-writing-blocks) picked up folders in the file picker and writing blocks with draft alternatives, plus fixes for queued prompts vanishing when you reopen a task.\n\n### Claude Code hardens the edges\n\nClaude Code's week was less about features and more about closing gaps that had been quietly costing users. [v2.1.275](/release/rel_1SjjEYFg34YFzPatqXk3o-claude-code-v2-1-275-fixes-prompt-cache-misses-and-hardens-plugin-credential) fixed a restored memory file's age note changing between requests after compaction or resume — the kind of small nondeterminism that causes prompt cache misses and inflated bills — and stopped plugin and marketplace messages, logs, and listings from leaking passwords or tokens stored in git, ssh, or marketplace URLs. It also added a send-now key (ctrl+enter) that interrupts the current turn and flushes queued messages at once, and syncing of claude.ai skills and plugins into terminal sessions.\n\n[2.1.274](/release/rel_uBw6beGnIDuiTP1Kk_lDV-claude-code-2-1-274-self-heals-corrupted-transcripts-and-bounds-mcp-startup) tackled two failure modes that previously left users stuck: sessions endlessly retrying `unexpected tool_use_id` 400 errors now self-heal corrupted transcripts where possible and otherwise exit with a clear error and a `/rewind` hint, and a new `CLAUDE_CODE_MCP_STARTUP_WAIT_MS` variable bounds how long the first non-interactive turn waits on connecting MCP servers.\n\nElsewhere the sequence reads like a bug-fix relay. [2.1.276](/release/rel_jNbTm_lkX5SXHDGV-dn_0-claude-code-v2-1-276-fixes-400-errors-behind-proxies-and-gateways) patched a 2.1.275 regression where every request through a proxy or gateway failed with `400 ... Input tag 'advisor_20260301'` — a one-line reminder of how fast a release train can break a setup. [2.1.273](/release/rel_Riq1bkvJR1ZJn9i6s3rKR-claude-code-2-1-273-adds-gateway-hint-headers-and-reverts-bash-deny-rule-change) added opt-in gateway hint headers and reverted a change that applied Read and Edit deny rules to Bash lines the permission checker can't analyze, so `time -p make build` prompts again instead of being denied outright.\n\n### Coarser controls, better audits\n\nTwo releases reworked where policy actually lives. [v2.1.278](/release/rel_WabQz8DpxX8c3guIq3YEd-claude-code-v2-1-278-defaults-auto-mode-to-server-side-classifier-for-api) made auto mode default to the server-side classifier for the Claude API, Bedrock, Vertex, Foundry, and gateways, with `CLAUDE_CODE_AUTO_MODE_SERVER=0` to opt out and a new row in `/status` confirming where the classifier runs — meaningful because the server-side path doesn't bill classifier overhead. [2.1.271](/release/rel_FZcAuO_f0_zkSbkd7zvaS-claude-code-2-1-271-adds-fast-mode-to-remote-sessions-and-per-command-allowed) brought fast mode to Remote sessions on cloud and self-hosted runners and added per-command `allowed_domains` so each Bash, PowerShell, and Monitor command reaches only the hosts it needs. [v2.1.277](/release/rel_cbueYirXLzGc0E7uNzZJ_-claude-code-v2-1-277-adds-agents-md-support-and-fixes-p-hang) filled an ecosystem gap by falling back to AGENTS.md when no CLAUDE.md exists and fixed `claude -p` and Agent SDK sessions hanging with no result after an internal error.\n\nDevin's [September 18 release](/release/rel_EuErM75S-bOJmBGPxX3kp-devin-september-18-2026-release-adds-session-origin-filters-and-mcp-reconnect) is the one to read before touching your integrations: the Enterprise API audit-logs list response no longer populates `total`, returning null, so pagination must use `has_next_page` and `end_cursor`. It also added Origin session filters, an MCP Reconnect action that redoes authentication without uninstalling, per-PR Devin Review from the Cmd+K palette, Azure DevOps Server 2020/2022 connections, and 60 fps screen recordings. MCP credentials moved to each server's page, part of the same week-long theme: agents are getting more capable and, finally, more careful about the keys they hold.","releaseIds":["rel_JotzQfuFf_u8NV4btlouH","rel_ACOkQGJzq0IqqkhoWRR7C","rel_ouHUMdTjnl8p6YcHlBizT","rel_yHCdCk5m7n-MZ5kfJ2Cz2","rel_1SjjEYFg34YFzPatqXk3o","rel_uBw6beGnIDuiTP1Kk_lDV","rel_jNbTm_lkX5SXHDGV-dn_0","rel_Riq1bkvJR1ZJn9i6s3rKR","rel_WabQz8DpxX8c3guIq3YEd","rel_FZcAuO_f0_zkSbkd7zvaS","rel_cbueYirXLzGc0E7uNzZJ_","rel_EuErM75S-bOJmBGPxX3kp"],"releaseCount":13,"generatedAt":"2026-09-21T06:16:44.254Z","releases":[{"id":"rel_JotzQfuFf_u8NV4btlouH","title":"Codex CLI 0.155.0 adds experimental voice conversations and Touch ID for MCP","path":"/release/rel_JotzQfuFf_u8NV4btlouH-voice-conversations-and-touch-id-mcp-verification-arrive","org":{"slug":"openai","name":"OpenAI"},"importance":4},{"id":"rel_ACOkQGJzq0IqqkhoWRR7C","title":"Devin adds live voice mode, skipped-question states, and GitLab automation scope","path":"/release/rel_ACOkQGJzq0IqqkhoWRR7C-live-voice-mode-skipped-questions-shown-as-skipped","org":{"slug":"cognition","name":"Cognition"},"importance":3},{"id":"rel_ouHUMdTjnl8p6YcHlBizT","title":"Codex CLI 0.155.1 disables reasoning summaries by default in new TUI sessions","path":"/release/rel_ouHUMdTjnl8p6YcHlBizT-new-tui-sessions-default-to-no-reasoning-summaries","org":{"slug":"openai","name":"OpenAI"},"importance":2},{"id":"rel_yHCdCk5m7n-MZ5kfJ2Cz2","title":"Codex for iOS adds folders in file picker and writing blocks","path":"/release/rel_yHCdCk5m7n-MZ5kfJ2Cz2-folder-creation-in-file-picker-queued-prompt-fixes","org":{"slug":"openai","name":"OpenAI"},"importance":3},{"id":"rel_1SjjEYFg34YFzPatqXk3o","title":"Claude Code v2.1.275 fixes prompt cache misses and hardens plugin credential handling","path":"/release/rel_1SjjEYFg34YFzPatqXk3o-memory-file-age-no-longer-breaks-prompt-cache-plugin-urls-stop-leaking-tokens","org":{"slug":"anthropic","name":"Anthropic"},"importance":4},{"id":"rel_uBw6beGnIDuiTP1Kk_lDV","title":"Claude Code 2.1.274 self-heals corrupted transcripts and bounds MCP startup waits","path":"/release/rel_uBw6beGnIDuiTP1Kk_lDV-corrupted-transcripts-self-heal-mcp-startup-wait-bounded","org":{"slug":"anthropic","name":"Anthropic"},"importance":4},{"id":"rel_jNbTm_lkX5SXHDGV-dn_0","title":"Claude Code v2.1.276 fixes 400 errors behind proxies and gateways","path":"/release/rel_jNbTm_lkX5SXHDGV-dn_0-gateway-and-proxy-400-errors-fixed","org":{"slug":"anthropic","name":"Anthropic"},"importance":2},{"id":"rel_Riq1bkvJR1ZJn9i6s3rKR","title":"Claude Code 2.1.273 adds gateway hint headers and reverts Bash deny-rule change","path":"/release/rel_Riq1bkvJR1ZJn9i6s3rKR-gateway-hint-headers-opt-in-bash-deny-rule-check-reverted","org":{"slug":"anthropic","name":"Anthropic"},"importance":3},{"id":"rel_WabQz8DpxX8c3guIq3YEd","title":"Claude Code v2.1.278 defaults auto mode to server-side classifier for API, Bedrock, Vertex, and Foundry","path":"/release/rel_WabQz8DpxX8c3guIq3YEd-auto-mode-defaults-to-server-side-classifier-on-bedrock-vertex-foundry","org":{"slug":"anthropic","name":"Anthropic"},"importance":3},{"id":"rel_FZcAuO_f0_zkSbkd7zvaS","title":"Claude Code 2.1.271 adds fast mode to Remote sessions and per-command allowed domains","path":"/release/rel_FZcAuO_f0_zkSbkd7zvaS-fast-mode-in-remote-sessions-per-command-allowed-domains","org":{"slug":"anthropic","name":"Anthropic"},"importance":3},{"id":"rel_cbueYirXLzGc0E7uNzZJ_","title":"Claude Code v2.1.277 adds AGENTS.md support and fixes -p hang","path":"/release/rel_cbueYirXLzGc0E7uNzZJ_-agents-md-supported-claude-p-no-longer-hangs-silently","org":{"slug":"anthropic","name":"Anthropic"},"importance":3},{"id":"rel_EuErM75S-bOJmBGPxX3kp","title":"Devin September 18, 2026 release adds session origin filters and MCP reconnect","path":"/release/rel_EuErM75S-bOJmBGPxX3kp-enterprise-audit-logs-lose-total-field-mcp-servers-get-reconnect","org":{"slug":"cognition","name":"Cognition"},"importance":4}]}}