--- collection: coding-agents collection_name: Coding Agents week_start: 2026-10-05 title: Agents get faster models, safer sandboxes, and a phone in the loop release_count: 17 generated: 2026-10-12 canonical: https://releases.sh/collections/coding-agents/digest/2026-10-05 --- # Agents get faster models, safer sandboxes, and a phone in the loop OpenAI brought GPT-6.1 Sol Ultrafast to Codex as its new default, Anthropic hardened Claude Code's sandbox and shipped a cheaper Haiku default, and Cursor let developers steer their local agents from an iPhone. ### Faster inference, cheaper defaults The week's biggest shift was on the model side. [OpenAI's Ultrafast mode brings GPT-6.1 Sol to Codex and ChatGPT Work](https://developers.openai.com/codex/changelog/#codex-2026-10-08-gpt-61-sol-ultrafast), trading raw token-generation speed for a plan requirement: it's limited to Pro $500 and eligible Enterprise and Edu workspaces, with enterprise access off until a workspace owner flips it on, and inference residency restricted to the US and Europe. Codex CLI followed by [making GPT-6.1 Sol the default model in both the bundled and Amazon Bedrock catalogs](https://developers.openai.com/codex/changelog/#github-release-405921402), while pulling Daybreak behind an explicit opt-in flag so its controls and automatic Cyber routing no longer appear unless you ask for them. The same CLI work added MCP server sign-in from a live terminal, per-turn Cyber access program selection, and saved voice input/output device preferences. Anthropic answered on the cost side: [Claude Haiku 5.5 is now the default Haiku model with a 1M context window](https://code.claude.com/docs/en/changelog#2-1-293) at $0.10/$0.50 per Mtok, which quietly lowers the floor for subagent work and other high-volume delegation. Codex for iOS got in on the mobility theme too, [rendering page previews inline and opening Codex task links directly](https://developers.openai.com/codex/changelog/#codex-2026-10-07-mobile), with a clearer approval picker and desktop-matching worktree support. ### Sandbox and permission hardening Claude Code's week reads as a security sweep. [v2.1.292 closed several sandbox and permission bypasses](https://code.claude.com/docs/en/changelog#2-1-292), among them sandboxed commands reading staged upload file copies, managed read-deny paths failing to drop project grants, network-path reads skipping the permission prompt, and a tampered settings cache disabling the policy plugin — plus a `--marketplace ` option for `claude plugin install` that runs under the same policy checks as a manual marketplace add. [Hook failures can now be made fail-closed](https://code.claude.com/docs/en/changelog#2-1-295) via `onFailure: "block"`, so a hook that can't start or times out blocks the action instead of waving it through, and gateway upstreams accept a model allowlist that holds across failover. Anthropic also [fixed prompt and agent hooks written as instructions allowing what they should block](https://code.claude.com/docs/en/changelog#2-1-294), tightened judgment of Stop and SubagentStop prompts so Claude is less likely to quit early, and [stopped managed PreToolUse hooks from approving blocked calls](https://code.claude.com/docs/en/changelog#2-1-296) while refusing Edit and NotebookEdit writes that would corrupt non-UTF-8 files. Earlier in the week [proxies rejecting beta headers, image-heavy sessions, and WebFetch's 100,000-character silent truncation were all fixed](https://code.claude.com/docs/en/changelog#2-1-290), mod hooks got richer turn and permission context, and [two regressions that dropped permission answers and lost a session's final messages](https://code.claude.com/docs/en/changelog#2-1-291) were patched. ### Remote control and the local workspace Cursor took the most interesting bet: [Remote Control lets the iOS app display and message agents running on your own machine](https://cursor.com/changelog/remote-control-local-agents), with computers pairing to the account automatically, agents continuing to run locally, and Enterprise admins gating it from Org settings. Devin spent the week deepening its session workspace — [a Terminal tab for running commands on Devin's machine](https://docs.devin.ai/release-notes/overview#october-5-2026) that, like the Files tab, wakes a sleeping session, plus a keyboard shortcuts page available to everyone and new API and MCP paths for fetching code scans. A [notification inbox with a sidebar bell and per-channel delivery settings](https://docs.devin.ai/release-notes/overview#october-7-2026) arrived alongside a ⌘K palette that mirrors sidebar pages and surfaces PR review actions, with private keys in saved secrets now redacted line by line in command output. And [long-session transcript flicker, missing skill content, and Teams access settings that never took effect](https://docs.devin.ai/release-notes/overview#october-2-2026) were cleaned up, with Perforce snapshot builds given three hours instead of ten minutes to sync. Smaller but pointed: Cursor-adjacent work aside, [Grok Build made `grok worktree rm` refuse to delete worktrees in use or with unsaved changes](https://x.ai/build/changelog#1-0-50) without `-f`, and stopped disconnecting long sessions that exceed 4 MiB — a reminder that agent sessions are now long enough that the plumbing has to keep up. On Codex, [multiline async questions crashing the TUI](https://developers.openai.com/codex/changelog/#github-release-408271623) and startup failures from background-server feature mismatches were fixed, while [managed Git worktrees, transcript copy navigation, and configurable mouse scrolling](https://developers.openai.com/codex/changelog/#github-release-407151970) rounded out the CLI's tooling. ## Releases covered ### Anthropic - [Claude Code v2.1.293 adds Haiku 5.5 as default and fixes memory leak](https://code.claude.com/docs/en/changelog#2-1-293) - [Claude Code v2.1.292 adds plugin marketplace install and fixes sandbox escapes](https://code.claude.com/docs/en/changelog#2-1-292) - [Claude Code v2.1.295 adds onFailure block for hooks and gateway model lists](https://code.claude.com/docs/en/changelog#2-1-295) - [Claude Code v2.1.294 fixes prompt and agent hooks bypassing block instructions](https://code.claude.com/docs/en/changelog#2-1-294) - [Claude Code v2.1.296 fixes managed hook approval and Edit/NotebookEdit encoding damage](https://code.claude.com/docs/en/changelog#2-1-296) - [Claude Code v2.1.290 widens mod hook API and fixes proxy, image, and compaction failures](https://code.claude.com/docs/en/changelog#2-1-290) - [Claude Code v2.1.291 fixes regressions that dropped permission answers and lost session messages](https://code.claude.com/docs/en/changelog#2-1-291) ### Cognition - [Devin adds Terminal tab in session workspace and keyboard shortcuts](https://docs.devin.ai/release-notes/overview#october-5-2026) - [Devin adds notification inbox and refines command palette and sidebar](https://docs.devin.ai/release-notes/overview#october-7-2026) - [Devin October 2, 2026 release fixes long-session transcript flicker and enforces Teams access settings](https://docs.devin.ai/release-notes/overview#october-2-2026) ### Cursor - [Cursor adds Remote Control to manage local agents from iOS](https://cursor.com/changelog/remote-control-local-agents) ### OpenAI - [OpenAI launches GPT-6.1 Sol Ultrafast mode in Codex and ChatGPT Work](https://developers.openai.com/codex/changelog/#codex-2026-10-08-gpt-61-sol-ultrafast) - [Codex CLI 0.161.0 makes GPT-6.1 Sol the default model and makes Daybreak opt-in](https://developers.openai.com/codex/changelog/#github-release-405921402) - [Codex for iOS adds inline page previews and direct task link opening](https://developers.openai.com/codex/changelog/#codex-2026-10-07-mobile) - [Codex CLI 0.162.1 fixes TUI crash on multiline async questions](https://developers.openai.com/codex/changelog/#github-release-408271623) - [Codex CLI 0.162.0 adds managed Git worktrees and transcript copy tools](https://developers.openai.com/codex/changelog/#github-release-407151970) ### xAI - [Grok Build 1.0.50 fixes worktree delete safety and 4 MiB session disconnects](https://x.ai/build/changelog#1-0-50)