Codex can copy a conversation into a new session and show estimated costs
Codex CLI adds conversation forks and estimated session costs for eligible workspaces. A fork preserves history but does not isolate project files.
ChatGPT's New Computer History Lets Codex See What You Just Did. OpenAI Flags a Prompt Injection Risk.
OpenAI's Computer History gives Codex a timeline of your clicks and app activity for context. OpenAI's own docs say that also raises prompt injection risk.
Grok 4.6 joins GitHub Copilot with usage-based billing
GitHub Copilot added Grok 4.6 for multi-step coding tasks. Token consumption, context size, and retries determine its cost in AI credits.
Issue 6: Connected Agent Workflows Move the Safety Check to the Boundaries
Six vendors joined the Agent Plugins standard as Claude Code connected sessions and platforms tightened boundaries around data, access, and environments.
Cursor cloud agents switch to pre-built environments on August 17
Cursor's builds boot cloud agents faster, but install steps need team or environment secrets, not personal credentials, before a shared build starts.
Cursor's Design Mode Now Takes Voice Commands and Lets You Queue Edits Without Waiting
Cursor's Design Mode now adds voice commands and faster targeting, so you can direct UI changes without leaving the running app.
GitHub Copilot Supports Agent Plugins 1.0 Across Its Clients
Agent Plugins 1.0 packages skills and MCP servers for compatible clients. GitHub adds support across VS Code, Copilot CLI, SDK, and app.
GitHub Copilot for JetBrains adds memory and local Ollama models
GitHub Copilot for JetBrains adds memory across chats and local Ollama models. Check project scope and data paths before using sensitive code.
Grok Bot's Cursor Domain Reflects SpaceX's Pending Anysphere Deal
Grok Bot's beta includes several Cursor and SuperGrok plans. Its Cursor download link arrives while SpaceX's reported acquisition is still pending.
Claude Code Message Delivery Depends on Each Session's Permission Mode
Claude Code sessions can now message each other automatically. Whether it needs your approval depends on which permission mode each session runs.
Claude Code Will Auto-Approve Most Commands by Default Starting August 14
Claude Code makes auto mode the default permission setting on August 14 for Pro, Max, and Team plans. Here's what still gets blocked and how to opt out.
Issue 5: Claude Code Makes Auto-Approve the Default After a Week of Patching Permission Bypasses
Claude Code makes auto-approve the default on August 14, days after patching two permission bypasses, while Cursor's usage page stops showing dollars.
Codex adds automatic review for command approvals
Codex adds automatic review for command approvals. Inspect approval and action history, and keep manual approvals for sensitive tasks.
Claude Code Patches Four More Permission Bypasses in Three Days
Claude Code 2.1.223 fixes a second Bash permission bypass, a hidden-command trick, and a workflow sandbox escape, days after its last patch.
Claude Code Patches a Bash Permission Bypass and Adds Credential Masking
Claude Code 2.1.221 fixes a zsh Bash-tool permission bypass and adds sandbox credential masking on Linux and Windows Subsystem for Linux.
GitHub Copilot Automations Ignore Comments From Users Without Write Access by Default
GitHub Copilot cloud agent automations can now trigger from a comment. One repository setting decides whether outside commenters can set them off too.
Cursor's Usage Page Now Shows Tokens, Not Dollars. Here's Where Your Real Spend Still Lives.
Cursor's Usage page became token-based for self-serve plans, including Teams. On-demand totals remain, but CSV dollar breakdowns were removed.
Issue 4: Builder Platforms Start Setting Their Own Limits
OpenAI cut GPT-5.6 Luna's price 80%, Vercel added spend budgets to its AI Gateway, and Netlify tightened project privacy defaults this week.
GitHub Copilot Code Review Can Now Read Your Team's Own Tools and Skills
Copilot code review adds skills and MCP for Pro, Pro+, Business, and Enterprise. Read-only tools can still expose sensitive context in comments.
Issue 3: Coding Agents Gain Reach as Their Boundaries Keep Leaking
Sandbox escapes hit four coding agents as Grok and GitHub expanded automation, while Opus 5 replaced Opus 4.8 at the same API price.
GitHub Issues Adds Auto-Triage, but Approvals Do Not Limit Agent Permissions
GitHub Issues can now auto-label, assign, and close issues by agent confidence score. The approval panel is a convenience, not a permission boundary.
Grok Build Can Now Fan a Task Out Across Hundreds of Background Agents
Grok Build's new Workflows feature splits a big task, like a full pull request review, across up to 1,024 background agents while you keep working.
Cursor Router Picks Your AI Model on Teams and Enterprise Plans
Cursor Router selects a model for each coding request on Teams and Enterprise plans. Admins control modes, defaults, and model access.
Researchers Found the Same Sandbox Escape Across Cursor, Codex CLI, Gemini CLI, and Antigravity
Pillar found seven sandbox escapes through tools that ran agent-written files. Update confirmed fixes and treat repository configs as executable inputs.