Pattern: four coding-agent CLIs shipped self-hosted or in-network execution controls in the same week
Cursor·medium signal
Cursor's Sep 2 release keeps tool execution on machines in your own network with hibernating team pools; Claude Code 2.1.259 adds `managedMcpServers` and fail-closed managed settings; qwen-code v0.23.0 removed the public-only network policy so extensions install from enterprise-private Git hosts; Copilot CLI added mTLS client certificates for proxied requests two days earlier. The competitive frontier has moved from model quality to where the agent's shell runs and who controls its egress.