Tools2026-07-10 · source-backed

v2.1.205 shipped 23 CLI changes, two of which are hard safety rules.

Issue

2026-07-10

Confidence

source-backed

Sources

Redaction

passed

Story

The changelog: auto mode is now blocked from tampering with session transcript files, and prompts before running rm -rf on an unresolved shell variable (the classic rm -rf $UNSET/ footgun). Bug fixes include --json-schema silently producing unstructured output on an invalid schema, mid-turn messages silently lost at --max-turns, Windows worktree removal deleting files outside the worktree when an NTFS junction or directory symlink lived inside it, and background agents stuck as failed/completed after resume via SendMessage. The transcript rule is the interesting one. It treats the agent's own log as a protected resource, which matters enormously if you use transcripts as the evidence trail in a self-improving harness.

Source trail

The changelog

Entities

CHANGELOG CLI NTFS SendMessage UNSET

v2.1.205 shipped 23 CLI changes, two of which are hard safety rules.

Story

Related stories

Orca hits 12,500 stars running dozens of CLI agents

Cursor 3 Ditches VS Code for Agent Orchestration. Claude Code Holds 54% Market Share at $1.2B ARR.

Source trail

Entities

GitHub Copilot ships a standalone desktop app to GA on Mac, Windows, and Linux.

Claude Code's June 9 release adds `--safe-mode`, `/cd`, and a switch to hide bundled skills.

"Loop Engineering" became a named discipline this week

Multi-CLI "cowork" desktop apps are unifying Claude Code, Codex, Gemini CLI, and OpenCode under one runtime.

cc-switch centralizes keys and config across your coding-agent CLIs.

Vibe Kanban goes fully community-maintained as Bloop winds down hosted services.

Provenance