{"collection":{"slug":"coding-agents","name":"Coding Agents"},"digest":{"id":"cwd_7JMJ2IqTIMjsgrlx-Evg6","weekStart":"2026-11-02","title":"Coding agents learn to speak, ship, and lock themselves down","intro":"Cursor gave its agents a voice and a hosting button, Claude Code closed a sandbox escape and tightened auto mode, and Devin opened enterprise SSO to self-serve setup.","body":"### Agents you can talk to, and apps you can ship\n\nCursor's biggest week in a while went in two directions at once. Its agents now take realtime voice calls in the Agents Window, the IDE, on web, and on iOS: describe a change out loud, ask what an agent is working on, and hear progress as the work moves — running on Grok Voice with selectable voices and zero data retention under Privacy Mode, per [Cursor's voice chat rollout](/release/rel_KRTpUnDHC_oFwQX5qyxA_-cursor-adds-realtime-voice-chat-with-coding-agents-across-ide-web-and-ios).\n\nThe more consequential addition is [live app building and hosting](/release/rel_Y24yyNC_kryzrH41z4zeS-cursor-adds-live-app-building-and-hosting-with-shareable-links). Cloud agents can scaffold a web app, provision Postgres, put auth behind Cursor SSO, and deploy to a link on a domain you pick — with deterministic and agentic checks for exposed secrets or credentials, and nothing going live until they pass. The pitch is pointed: most apps agents write never leave localhost, and Cursor wants to be the thing that gets them off it.\n\n### Claude Code hardens its permission boundary\n\nAnthropic's week was mostly about who gets to run what. The headline is a pair of security fixes in [Claude Code's sandbox and auto-mode changes](/release/rel_hkpRaOLC0K0hHwthFBQ1b-claude-code-2-1-319-changes-auto-mode-fallback-and-fixes-sandbox-escape): a sandbox escape when creating a worktree, and a Bash permission bypass where a crafted environment prefix could hide part of a command from permission checks. Auto mode itself now errs toward asking or denying when telemetry or feature flags are off and the server can't check a call, rather than silently falling back to the built-in classifier — `CLAUDE_CODE_AUTO_MODE_SERVER=0` restores the old behavior, and Bedrock, Vertex, and Foundry are unchanged.\n\nElsewhere it was trust and continuity. [Nested session IDs came back](/release/rel_O-C6_gk8wVnAo7EiAQZWU-claude-code-2-1-317-restores-nested-session-ids-and-fixes-mcp-disconnects) for `claude -p` inside self-hosted runners, MCP servers stopped disconnecting after the first turn in some desktop sessions, and Claude Code now asks before a web or shell tool call sends your account email to the network. Sign-in expiry dates now surface in `claude auth status` and `-p` JSON output with a warning ten days out, as part of [fixes for config loss on shared home directories and a --continue regression](/release/rel_2RHL6lTHakEm6erqNrDGL-claude-code-2-1-318-adds-sign-in-expiry-dates-and-fixes-data-loss-bugs).\n\n### Devin takes the admin work out of enterprise setup\n\nCognition spent the week removing tickets from the enterprise onboarding path. [Self-serve SSO](/release/rel_vV6sgPGtWEYPZ9bGT0_7U-devin-adds-self-serve-sso-budgets-and-default-pat-approval) lets admins verify domain ownership with a DNS record and create, edit, and delete their own OIDC or SAML connections, while budgets now organize user and org spend into a hierarchy with sub-limits, and security connections ingest findings from SonarQube, Linear, and Vanta. Enterprises without a PAT policy now default to approval required.\n\nGovernance followed: [session sharing defaults and a log-out-everywhere switch](/release/rel_nooq0KygKKnTx1eR2wjE0-devin-adds-session-sharing-controls-sign-out-everywhere-and-gerrit-permission) let admins set visibility enterprise- or org-wide, limit sharing to the session's organization, and sign out of web, Desktop, CLI, and mobile at once, with Gerrit group and project access syncing into repo permissions. Scale also moved — [multi-repo scans now cap at 1,000 repositories](/release/rel_MKwq-2_wgUi4LXtO2xLeK-devin-raises-multi-repo-scan-cap-to-1-000-repositories) instead of 500, and MCP servers returning 401 mid-session trigger OAuth discovery.\n\n### Codex's terminal becomes a control room\n\nCodex CLI's contribution is orchestration: [an agent command center via `codex agents --no-daemon`](/release/rel_sAKqckb6H-y44wHzHs5E1-codex-cli-0-167-0-adds-agent-command-center-and-cross-backend-session-switching) that marks unread results, and a session picker that switches between connected backends while keeping your drafts, with saved chats surviving provider switches and network approval prompts closing when their requests end.","releaseIds":["rel_KRTpUnDHC_oFwQX5qyxA_","rel_Y24yyNC_kryzrH41z4zeS","rel_hkpRaOLC0K0hHwthFBQ1b","rel_O-C6_gk8wVnAo7EiAQZWU","rel_2RHL6lTHakEm6erqNrDGL","rel_vV6sgPGtWEYPZ9bGT0_7U","rel_nooq0KygKKnTx1eR2wjE0","rel_MKwq-2_wgUi4LXtO2xLeK","rel_sAKqckb6H-y44wHzHs5E1"],"releaseCount":9,"generatedAt":"2026-11-09T06:17:27.670Z","releases":[{"id":"rel_KRTpUnDHC_oFwQX5qyxA_","title":"Cursor adds realtime voice chat with coding agents across IDE, web, and iOS","path":"/release/rel_KRTpUnDHC_oFwQX5qyxA_-voice-chat-with-agents-lands-in-ide-web-ios","url":"https://cursor.com/changelog/voice-chat","org":{"slug":"cursor","name":"Cursor","avatarUrl":"https://media.releases.sh/orgs/cursor.png","githubHandle":"getcursor"},"product":null,"importance":4,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-11-06T00:00:00.000Z"},{"id":"rel_Y24yyNC_kryzrH41z4zeS","title":"Cursor adds live app building and hosting with shareable links","path":"/release/rel_Y24yyNC_kryzrH41z4zeS-cloud-agents-now-build-deploy-and-share-live-apps","url":"https://cursor.com/changelog/build-live-apps","org":{"slug":"cursor","name":"Cursor","avatarUrl":"https://media.releases.sh/orgs/cursor.png","githubHandle":"getcursor"},"product":null,"importance":4,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-11-05T00:00:00.000Z"},{"id":"rel_hkpRaOLC0K0hHwthFBQ1b","title":"Claude Code 2.1.319 changes auto mode fallback and fixes sandbox escape","path":"/release/rel_hkpRaOLC0K0hHwthFBQ1b-auto-mode-no-longer-falls-back-to-built-in-classifier-sandbox-escape-fixed","url":"https://code.claude.com/docs/en/changelog#2-1-319","org":{"slug":"anthropic","name":"Anthropic","avatarUrl":"https://media.releases.sh/orgs/anthropic.png","githubHandle":"anthropics"},"product":{"slug":"claude-code","name":"Claude Code"},"importance":4,"composition":{"bugs":60,"features":11,"enhancements":20},"publishedAt":"2026-11-06T17:04:01.000Z"},{"id":"rel_O-C6_gk8wVnAo7EiAQZWU","title":"Claude Code 2.1.317 restores nested session IDs and fixes MCP disconnects","path":"/release/rel_O-C6_gk8wVnAo7EiAQZWU-nested-session-ids-restorable-desktop-mcp-servers-stay-connected","url":"https://code.claude.com/docs/en/changelog#2-1-317","org":{"slug":"anthropic","name":"Anthropic","avatarUrl":"https://media.releases.sh/orgs/anthropic.png","githubHandle":"anthropics"},"product":{"slug":"claude-code","name":"Claude Code"},"importance":3,"composition":{"bugs":50,"features":13,"enhancements":12},"publishedAt":"2026-11-03T01:25:46.000Z"},{"id":"rel_2RHL6lTHakEm6erqNrDGL","title":"Claude Code 2.1.318 adds sign-in expiry dates and fixes data-loss bugs","path":"/release/rel_2RHL6lTHakEm6erqNrDGL-sign-in-expiry-surfaced-shared-home-config-no-longer-silently-dropped","url":"https://code.claude.com/docs/en/changelog#2-1-318","org":{"slug":"anthropic","name":"Anthropic","avatarUrl":"https://media.releases.sh/orgs/anthropic.png","githubHandle":"anthropics"},"product":{"slug":"claude-code","name":"Claude Code"},"importance":3,"composition":{"bugs":40,"features":7,"enhancements":15},"publishedAt":"2026-11-04T00:01:03.000Z"},{"id":"rel_vV6sgPGtWEYPZ9bGT0_7U","title":"Devin adds self-serve SSO, budgets, and default PAT approval","path":"/release/rel_vV6sgPGtWEYPZ9bGT0_7U-self-serve-sso-and-budgets-pats-default-to-approval","url":"https://docs.devin.ai/release-notes/overview#october-30-2026","org":{"slug":"cognition","name":"Cognition","avatarUrl":"https://media.releases.sh/orgs/cognition.png","githubHandle":"Cognition-ai"},"product":{"slug":"devin","name":"Devin"},"importance":3,"composition":{"bugs":0,"features":18,"enhancements":3},"publishedAt":"2026-11-03T01:13:51.000Z"},{"id":"rel_nooq0KygKKnTx1eR2wjE0","title":"Devin adds session sharing controls, sign-out everywhere, and Gerrit permission sync","path":"/release/rel_nooq0KygKKnTx1eR2wjE0-session-sharing-gets-org-caps-log-out-of-all-devices","url":"https://docs.devin.ai/release-notes/overview#november-6-2026","org":{"slug":"cognition","name":"Cognition","avatarUrl":"https://media.releases.sh/orgs/cognition.png","githubHandle":"Cognition-ai"},"product":{"slug":"devin","name":"Devin"},"importance":3,"composition":{"bugs":1,"features":20,"enhancements":0},"publishedAt":"2026-11-08T17:56:37.000Z"},{"id":"rel_MKwq-2_wgUi4LXtO2xLeK","title":"Devin raises multi-repo scan cap to 1,000 repositories","path":"/release/rel_MKwq-2_wgUi4LXtO2xLeK-scan-cap-doubled-to-1-000-repos-oauth-discovery-from-401","url":"https://docs.devin.ai/release-notes/overview#november-2-2026","org":{"slug":"cognition","name":"Cognition","avatarUrl":"https://media.releases.sh/orgs/cognition.png","githubHandle":"Cognition-ai"},"product":{"slug":"devin","name":"Devin"},"importance":3,"composition":{"bugs":0,"features":9,"enhancements":3},"publishedAt":"2026-11-03T01:16:22.000Z"},{"id":"rel_sAKqckb6H-y44wHzHs5E1","title":"Codex CLI 0.167.0 adds agent command center and cross-backend session switching","path":"/release/rel_sAKqckb6H-y44wHzHs5E1-agent-command-center-lands-sessions-switch-across-backends","url":"https://developers.openai.com/codex/changelog/#github-release-435979892","org":{"slug":"openai","name":"OpenAI","avatarUrl":"https://media.releases.sh/orgs/openai.png","githubHandle":"openai"},"product":{"slug":"codex","name":"Codex"},"importance":3,"composition":{"bugs":6,"features":7,"enhancements":1},"publishedAt":"2026-11-06T00:00:00.000Z"}],"sections":[{"heading":"Agents you can talk to, and apps you can ship","anchor":"agents-you-can-talk-to-and-apps-you-can-ship","lede":"Cursor's biggest week in a while went in two directions at once.","releaseIds":["rel_KRTpUnDHC_oFwQX5qyxA_","rel_Y24yyNC_kryzrH41z4zeS"],"releases":[{"id":"rel_KRTpUnDHC_oFwQX5qyxA_","title":"Cursor adds realtime voice chat with coding agents across IDE, web, and iOS","path":"/release/rel_KRTpUnDHC_oFwQX5qyxA_-voice-chat-with-agents-lands-in-ide-web-ios","url":"https://cursor.com/changelog/voice-chat","org":{"slug":"cursor","name":"Cursor","avatarUrl":"https://media.releases.sh/orgs/cursor.png","githubHandle":"getcursor"},"product":null,"importance":4,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-11-06T00:00:00.000Z"},{"id":"rel_Y24yyNC_kryzrH41z4zeS","title":"Cursor adds live app building and hosting with shareable links","path":"/release/rel_Y24yyNC_kryzrH41z4zeS-cloud-agents-now-build-deploy-and-share-live-apps","url":"https://cursor.com/changelog/build-live-apps","org":{"slug":"cursor","name":"Cursor","avatarUrl":"https://media.releases.sh/orgs/cursor.png","githubHandle":"getcursor"},"product":null,"importance":4,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-11-05T00:00:00.000Z"}]},{"heading":"Claude Code hardens its permission boundary","anchor":"claude-code-hardens-its-permission-boundary","lede":"Anthropic's week was mostly about who gets to run what.","releaseIds":["rel_hkpRaOLC0K0hHwthFBQ1b","rel_O-C6_gk8wVnAo7EiAQZWU","rel_2RHL6lTHakEm6erqNrDGL"],"releases":[{"id":"rel_hkpRaOLC0K0hHwthFBQ1b","title":"Claude Code 2.1.319 changes auto mode fallback and fixes sandbox escape","path":"/release/rel_hkpRaOLC0K0hHwthFBQ1b-auto-mode-no-longer-falls-back-to-built-in-classifier-sandbox-escape-fixed","url":"https://code.claude.com/docs/en/changelog#2-1-319","org":{"slug":"anthropic","name":"Anthropic","avatarUrl":"https://media.releases.sh/orgs/anthropic.png","githubHandle":"anthropics"},"product":{"slug":"claude-code","name":"Claude Code"},"importance":4,"composition":{"bugs":60,"features":11,"enhancements":20},"publishedAt":"2026-11-06T17:04:01.000Z"},{"id":"rel_O-C6_gk8wVnAo7EiAQZWU","title":"Claude Code 2.1.317 restores nested session IDs and fixes MCP disconnects","path":"/release/rel_O-C6_gk8wVnAo7EiAQZWU-nested-session-ids-restorable-desktop-mcp-servers-stay-connected","url":"https://code.claude.com/docs/en/changelog#2-1-317","org":{"slug":"anthropic","name":"Anthropic","avatarUrl":"https://media.releases.sh/orgs/anthropic.png","githubHandle":"anthropics"},"product":{"slug":"claude-code","name":"Claude Code"},"importance":3,"composition":{"bugs":50,"features":13,"enhancements":12},"publishedAt":"2026-11-03T01:25:46.000Z"},{"id":"rel_2RHL6lTHakEm6erqNrDGL","title":"Claude Code 2.1.318 adds sign-in expiry dates and fixes data-loss bugs","path":"/release/rel_2RHL6lTHakEm6erqNrDGL-sign-in-expiry-surfaced-shared-home-config-no-longer-silently-dropped","url":"https://code.claude.com/docs/en/changelog#2-1-318","org":{"slug":"anthropic","name":"Anthropic","avatarUrl":"https://media.releases.sh/orgs/anthropic.png","githubHandle":"anthropics"},"product":{"slug":"claude-code","name":"Claude Code"},"importance":3,"composition":{"bugs":40,"features":7,"enhancements":15},"publishedAt":"2026-11-04T00:01:03.000Z"}]},{"heading":"Devin takes the admin work out of enterprise setup","anchor":"devin-takes-the-admin-work-out-of-enterprise-setup","lede":"Cognition spent the week removing tickets from the enterprise onboarding path.","releaseIds":["rel_vV6sgPGtWEYPZ9bGT0_7U","rel_nooq0KygKKnTx1eR2wjE0","rel_MKwq-2_wgUi4LXtO2xLeK"],"releases":[{"id":"rel_vV6sgPGtWEYPZ9bGT0_7U","title":"Devin adds self-serve SSO, budgets, and default PAT approval","path":"/release/rel_vV6sgPGtWEYPZ9bGT0_7U-self-serve-sso-and-budgets-pats-default-to-approval","url":"https://docs.devin.ai/release-notes/overview#october-30-2026","org":{"slug":"cognition","name":"Cognition","avatarUrl":"https://media.releases.sh/orgs/cognition.png","githubHandle":"Cognition-ai"},"product":{"slug":"devin","name":"Devin"},"importance":3,"composition":{"bugs":0,"features":18,"enhancements":3},"publishedAt":"2026-11-03T01:13:51.000Z"},{"id":"rel_nooq0KygKKnTx1eR2wjE0","title":"Devin adds session sharing controls, sign-out everywhere, and Gerrit permission sync","path":"/release/rel_nooq0KygKKnTx1eR2wjE0-session-sharing-gets-org-caps-log-out-of-all-devices","url":"https://docs.devin.ai/release-notes/overview#november-6-2026","org":{"slug":"cognition","name":"Cognition","avatarUrl":"https://media.releases.sh/orgs/cognition.png","githubHandle":"Cognition-ai"},"product":{"slug":"devin","name":"Devin"},"importance":3,"composition":{"bugs":1,"features":20,"enhancements":0},"publishedAt":"2026-11-08T17:56:37.000Z"},{"id":"rel_MKwq-2_wgUi4LXtO2xLeK","title":"Devin raises multi-repo scan cap to 1,000 repositories","path":"/release/rel_MKwq-2_wgUi4LXtO2xLeK-scan-cap-doubled-to-1-000-repos-oauth-discovery-from-401","url":"https://docs.devin.ai/release-notes/overview#november-2-2026","org":{"slug":"cognition","name":"Cognition","avatarUrl":"https://media.releases.sh/orgs/cognition.png","githubHandle":"Cognition-ai"},"product":{"slug":"devin","name":"Devin"},"importance":3,"composition":{"bugs":0,"features":9,"enhancements":3},"publishedAt":"2026-11-03T01:16:22.000Z"}]},{"heading":"Codex's terminal becomes a control room","anchor":"codexs-terminal-becomes-a-control-room","lede":"Codex CLI's contribution is orchestration: an agent command center via codex agents --no-daemon that marks unread results, and a session picker that switches between connected backends while keeping your drafts, with saved chats surviving provider switches and network approval prompts closing when their requests end.","releaseIds":["rel_sAKqckb6H-y44wHzHs5E1"],"releases":[{"id":"rel_sAKqckb6H-y44wHzHs5E1","title":"Codex CLI 0.167.0 adds agent command center and cross-backend session switching","path":"/release/rel_sAKqckb6H-y44wHzHs5E1-agent-command-center-lands-sessions-switch-across-backends","url":"https://developers.openai.com/codex/changelog/#github-release-435979892","org":{"slug":"openai","name":"OpenAI","avatarUrl":"https://media.releases.sh/orgs/openai.png","githubHandle":"openai"},"product":{"slug":"codex","name":"Codex"},"importance":3,"composition":{"bugs":6,"features":7,"enhancements":1},"publishedAt":"2026-11-06T00:00:00.000Z"}]}]}}