Coding Agents Digest
What changed in AI coding agents, selected and explained

← Latest

📰

Check · Fri, Oct 23, 2026

Codex 0.164.0 adds /presets; Claude Code 2.1.309 and agy 1.4.6 change sandbox and rewind behavior.

08:12Claude Code, Antigravity CLI, Codex CLI, Kilo Code · 4 releases, 72 bug fixes
Claude Code
  • ⚠️ claude ultrareview needs workspace trust (2.1.309). Scripts must pass --trust-workspace after any PR number or base branch, or set CLAUDE_CODE_DISABLE_ULTRAREVIEW_TRUST_CHECK=1, because without a terminal the command now refuses to run. Source
  • ⚠️ sed -i edits are no longer undone by /rewind (2.1.309). They now run as normal Bash commands, so keep a git commit or a backup before using sed -i. Source
  • Sandboxed commands can’t change the MCP config (2.1.309). Commands and auto-accepted edits can no longer modify the file passed with --mcp-config. Source
Antigravity CLI
  • ⚠️ Sandbox hides ~/.docker, ~/.kube and ~/_netrc (1.4.6). Sandboxed commands that use Docker registry or Kubernetes cluster credentials now need an explicit grant, or they are blocked. Source
  • Configure plugin MCP servers in /plugin (1.4.6). A new row sets or changes a plugin’s MCP server variables without disabling and re-enabling the plugin. Source
  • Permission grants cover subagents (1.4.6). Allowing an action for the conversation now applies to the main agent and all its subagents, so you stop getting the same prompt. Source
Codex CLI
  • ⚠️ Guardian v2 defaults to conversation mode (rust-v0.164.0). Its async classification now uses that mode by default, so its verdicts can differ from before; check them before you rely on them. Source
  • Ten numbered /presets slots (rust-v0.164.0). Keep reusable prompts and slash commands in ten numbered slots. Source
  • Inline arguments for /model and /permissions (rust-v0.164.0). Set the model, reasoning effort, speed or permission profile in the same command. Source
Kilo Code
  • ⚠️ MCP prompts no longer run shell expressions (v7.8.16). Shell expressions in MCP prompts are now plain text, so any MCP prompt that relied on them will change output. Source
  • Kilo Cloud provider (v7.8.16). A built-in provider lists, reads, starts and describes cloud-hosted sessions, backed by a new internal Session Host registry. Source
  • Links limited to HTTP and HTTPS (v7.8.16). Browser links and MCP OAuth URLs must be HTTP or HTTPS, which also fixes URL handling on Windows and WSL. Source
  • Stable v7.8.17 has no notes of its own (v7.8.17). It says “No notable changes”; the three items above come from pre-release v7.8.16, covered here. Source
Across tools
  • Sandboxes and MCP servers are locked down. Claude Code stops sandboxed commands from editing the --mcp-config file, agy blocks ~/.docker, ~/.kube and ~/_netrc from sandboxed commands, and Kilo Code stops running shell expressions in MCP prompts. Sources: Claude Code, Antigravity CLI, Kilo Code
OpenCode · no updates