--- collection: coding-agents collection_name: Coding Agents week_start: 2026-09-14 title: Agents get a voice, a memory, and a tighter grip on credentials release_count: 13 generated: 2026-09-21 canonical: https://releases.sh/collections/coding-agents/digest/2026-09-14 --- # Agents get a voice, a memory, and a tighter grip on credentials Claude Code shipped seven releases in six days, Devin and Codex both added live voice sessions, and across all three agents credentials, transcripts, and sandbox escapes got serious hardening. ### Agents learn to talk The week's most visible shift is that coding agents started speaking. [Codex CLI 0.155.0](/release/rel_JotzQfuFf_u8NV4btlouH-codex-cli-0-155-0-adds-experimental-voice-conversations-and-touch-id-for-mcp) added experimental `/voice` conversations with live transcripts and microphone controls, enabled through `/experimental`, and the same release brought Touch ID verification for MCP requests in local TUI sessions on supported Macs — a neat pairing of "let it listen to you" and "make sure it is you." Devin shipped a competing take a day earlier with [live voice mode](/release/rel_ACOkQGJzq0IqqkhoWRR7C-devin-adds-live-voice-mode-skipped-question-states-and-gitlab-automation-scope), moving calls onto a live speech model with ringtone-while-connecting, hold-Space-to-talk after muting, ordered spoken replies in the transcript, and Slack thread attribution showing who was on the call. Codex also polished the non-voice TUI, adding live reasoning summaries and completion timestamps, though [0.155.1](/release/rel_ouHUMdTjnl8p6YcHlBizT-codex-cli-0-155-1-disables-reasoning-summaries-by-default-in-new-tui-sessions) walked the reasoning summaries back to disabled-by-default in new local sessions after providers without support rejected the requests — a reminder that these surfaces are still settling. [Codex for iOS](/release/rel_yHCdCk5m7n-MZ5kfJ2Cz2-codex-for-ios-adds-folders-in-file-picker-and-writing-blocks) picked up folders in the file picker and writing blocks with draft alternatives, plus fixes for queued prompts vanishing when you reopen a task. ### Claude Code hardens the edges Claude Code's week was less about features and more about closing gaps that had been quietly costing users. [v2.1.275](/release/rel_1SjjEYFg34YFzPatqXk3o-claude-code-v2-1-275-fixes-prompt-cache-misses-and-hardens-plugin-credential) fixed a restored memory file's age note changing between requests after compaction or resume — the kind of small nondeterminism that causes prompt cache misses and inflated bills — and stopped plugin and marketplace messages, logs, and listings from leaking passwords or tokens stored in git, ssh, or marketplace URLs. It also added a send-now key (ctrl+enter) that interrupts the current turn and flushes queued messages at once, and syncing of claude.ai skills and plugins into terminal sessions. [2.1.274](/release/rel_uBw6beGnIDuiTP1Kk_lDV-claude-code-2-1-274-self-heals-corrupted-transcripts-and-bounds-mcp-startup) tackled two failure modes that previously left users stuck: sessions endlessly retrying `unexpected tool_use_id` 400 errors now self-heal corrupted transcripts where possible and otherwise exit with a clear error and a `/rewind` hint, and a new `CLAUDE_CODE_MCP_STARTUP_WAIT_MS` variable bounds how long the first non-interactive turn waits on connecting MCP servers. Elsewhere the sequence reads like a bug-fix relay. [2.1.276](/release/rel_jNbTm_lkX5SXHDGV-dn_0-claude-code-v2-1-276-fixes-400-errors-behind-proxies-and-gateways) patched a 2.1.275 regression where every request through a proxy or gateway failed with `400 ... Input tag 'advisor_20260301'` — a one-line reminder of how fast a release train can break a setup. [2.1.273](/release/rel_Riq1bkvJR1ZJn9i6s3rKR-claude-code-2-1-273-adds-gateway-hint-headers-and-reverts-bash-deny-rule-change) added opt-in gateway hint headers and reverted a change that applied Read and Edit deny rules to Bash lines the permission checker can't analyze, so `time -p make build` prompts again instead of being denied outright. ### Coarser controls, better audits Two releases reworked where policy actually lives. [v2.1.278](/release/rel_WabQz8DpxX8c3guIq3YEd-claude-code-v2-1-278-defaults-auto-mode-to-server-side-classifier-for-api) made auto mode default to the server-side classifier for the Claude API, Bedrock, Vertex, Foundry, and gateways, with `CLAUDE_CODE_AUTO_MODE_SERVER=0` to opt out and a new row in `/status` confirming where the classifier runs — meaningful because the server-side path doesn't bill classifier overhead. [2.1.271](/release/rel_FZcAuO_f0_zkSbkd7zvaS-claude-code-2-1-271-adds-fast-mode-to-remote-sessions-and-per-command-allowed) brought fast mode to Remote sessions on cloud and self-hosted runners and added per-command `allowed_domains` so each Bash, PowerShell, and Monitor command reaches only the hosts it needs. [v2.1.277](/release/rel_cbueYirXLzGc0E7uNzZJ_-claude-code-v2-1-277-adds-agents-md-support-and-fixes-p-hang) filled an ecosystem gap by falling back to AGENTS.md when no CLAUDE.md exists and fixed `claude -p` and Agent SDK sessions hanging with no result after an internal error. Devin's [September 18 release](/release/rel_EuErM75S-bOJmBGPxX3kp-devin-september-18-2026-release-adds-session-origin-filters-and-mcp-reconnect) is the one to read before touching your integrations: the Enterprise API audit-logs list response no longer populates `total`, returning null, so pagination must use `has_next_page` and `end_cursor`. It also added Origin session filters, an MCP Reconnect action that redoes authentication without uninstalling, per-PR Devin Review from the Cmd+K palette, Azure DevOps Server 2020/2022 connections, and 60 fps screen recordings. MCP credentials moved to each server's page, part of the same week-long theme: agents are getting more capable and, finally, more careful about the keys they hold. ## Releases covered ### Anthropic - [Claude Code v2.1.275 fixes prompt cache misses and hardens plugin credential handling](https://releases.sh/release/rel_1SjjEYFg34YFzPatqXk3o-memory-file-age-no-longer-breaks-prompt-cache-plugin-urls-stop-leaking-tokens) - [Claude Code 2.1.274 self-heals corrupted transcripts and bounds MCP startup waits](https://releases.sh/release/rel_uBw6beGnIDuiTP1Kk_lDV-corrupted-transcripts-self-heal-mcp-startup-wait-bounded) - [Claude Code v2.1.276 fixes 400 errors behind proxies and gateways](https://releases.sh/release/rel_jNbTm_lkX5SXHDGV-dn_0-gateway-and-proxy-400-errors-fixed) - [Claude Code 2.1.273 adds gateway hint headers and reverts Bash deny-rule change](https://releases.sh/release/rel_Riq1bkvJR1ZJn9i6s3rKR-gateway-hint-headers-opt-in-bash-deny-rule-check-reverted) - [Claude Code v2.1.278 defaults auto mode to server-side classifier for API, Bedrock, Vertex, and Foundry](https://releases.sh/release/rel_WabQz8DpxX8c3guIq3YEd-auto-mode-defaults-to-server-side-classifier-on-bedrock-vertex-foundry) - [Claude Code 2.1.271 adds fast mode to Remote sessions and per-command allowed domains](https://releases.sh/release/rel_FZcAuO_f0_zkSbkd7zvaS-fast-mode-in-remote-sessions-per-command-allowed-domains) - [Claude Code v2.1.277 adds AGENTS.md support and fixes -p hang](https://releases.sh/release/rel_cbueYirXLzGc0E7uNzZJ_-agents-md-supported-claude-p-no-longer-hangs-silently) ### Cognition - [Devin adds live voice mode, skipped-question states, and GitLab automation scope](https://releases.sh/release/rel_ACOkQGJzq0IqqkhoWRR7C-live-voice-mode-skipped-questions-shown-as-skipped) - [Devin September 18, 2026 release adds session origin filters and MCP reconnect](https://releases.sh/release/rel_EuErM75S-bOJmBGPxX3kp-enterprise-audit-logs-lose-total-field-mcp-servers-get-reconnect) ### OpenAI - [Codex CLI 0.155.0 adds experimental voice conversations and Touch ID for MCP](https://releases.sh/release/rel_JotzQfuFf_u8NV4btlouH-voice-conversations-and-touch-id-mcp-verification-arrive) - [Codex CLI 0.155.1 disables reasoning summaries by default in new TUI sessions](https://releases.sh/release/rel_ouHUMdTjnl8p6YcHlBizT-new-tui-sessions-default-to-no-reasoning-summaries) - [Codex for iOS adds folders in file picker and writing blocks](https://releases.sh/release/rel_yHCdCk5m7n-MZ5kfJ2Cz2-folder-creation-in-file-picker-queued-prompt-fixes)