Coder added Claude Code to Agent Relay on Sept 15, letting regulated enterprises run the Claude Code agent loop inside their own cloud, VPC, or on-prem infrastructure while Anthropic still handles billing and inference. Cursor got the same integration first, on Sept 2 — which says more about the market than about either tool.
Claude Code v2.1.271 (Sept 14) added per-command allowed_domains for Bash, PowerShell, and Monitor in auto mode with sandboxing, plus omitClaudeMd for subagents, fast mode in Remote sessions, and a marked-up pricing multiplier for internal chargeback. None of it got a launch post — it shipped as one changelog among 60-plus line items.
Manifold Security’s Sept 1 GitSpawn disclosure found that Claude Code’s git status subprocess — and separately, its /ultrareview command — execute attacker-controlled git-config settings before any trust prompt appears. Cursor, OpenAI Codex, and Goose all shipped fixes; the /ultrareview path in Claude Code is still unpatched as of v2.1.270 (Sept 12).
Cognition shipped SWE-2 on September 10, Devin’s new engine, post-trained on Moonshot’s 2.8T-parameter Kimi K3 base with three reasoning-effort tiers. Cognition’s own numbers claim near-Fable-5.1 coding quality at a fraction of the cost — but the model underneath is still someone else’s, four months after Cognition’s $48B Series E.
Cursor launched Projects in beta on September 10 — a cloud-resident ‘coordinator agent’ that doesn’t write code itself but directs other agents that do, subscribing to Slack channels, PR activity, and schedules to act without being prompted. Cursor’s own numbers claim 6x the PR throughput for users who adopt it — but the feature is a beta re-implementation of an orchestration model Claude Code has run natively, headless, and in production for over a year.
Claude Code v2.1.269 (Sept 11) added CLAUDE_CODE_WORKFLOW_MAX_CONCURRENT_AGENTS, letting the Workflow tool fan out up to 256 concurrent agents for inference-bound tasks, alongside a VS Code agent map and claude plugin eval for scored plugin testing. It shipped as one line in a changelog the same week Cursor launched a ‘coordinator agent’ product around the same underlying capability.
GitHub’s Project HydraFusion research preview routes each Copilot CLI task across a pool of models — drafting cheaply, escalating only when a quality gate fails. GitHub’s own benchmark table shows it beating Claude Opus 5 on cost in all three tests, but matching or exceeding Opus 5’s quality in only one of them, per VentureBeat’s read of the numbers.
OpenAI shipped the Agents API in public beta on September 10, exposing the Codex harness — session management, context compaction, sandboxing, MCP tool wiring — behind a single API. It’s the same managed-agent-loop pitch Anthropic made with Claude Managed Agents in April, arriving five months late and with a rougher enterprise story: US-only data residency and no zero-data-retention option during the beta.
Claude Code v2.1.267 (Sept 9) adds a maxEffortLevel setting that lets organizations cap reasoning effort across every provider without hiding the cap from users, plus a long batch of prompt-cache and session-resumption reliability fixes. Verified directly against Anthropic’s own changelog.
Claude Code v2.1.265 (Sept 8) adds folder-based plugin loading via –plugin-dir and fixes a symlink containment bypass in the plugin path check; v2.1.266, shipped the same day, fixes a regression the previous release introduced for gateway/proxy auth. Verified directly against Anthropic’s own changelog.