What changed in the major AI coding CLIs?

OpenAI upgraded Codex with plugins enabled by default, npm marketplace integration, MCP tool search, system proxy support, and Amazon Bedrock support [5710]. Additionally, Codex now supports remote control via ChatGPT app, DigitalOcean cloud workspaces, multi-agent task splitting, and indexed web search [5709]. Google released Gemma 4, a local AI model that runs up to 3x faster with new MTP drafters, and the 31B model improved from 20.8% to 89% on AIME [5708]. Kimi K3, a 2.8 trillion parameter open-weight model, has been released and benchmarks show it rivals Fable 5 and GPT 5.6 Soul [5704]. Spriterrific, an AI-powered sprite generation tool, is nearing release and designed to be agent-first with skills for Cursor, Claude Code, Codex [5703]. NVIDIA launched DeepStream 9.1, featuring 13 agentic skills for building video analytics pipelines using natural language and coding agents like Claude Code or Codex [5701]. A GitHub repository allows Claude Code to use DeepSeek, Kimi, and 8 other free models by swapping endpoints, attracting 20,000 developers [5700]. Anthropic launched Claude for Teachers, a K-12 privacy-focused product that does not train on conversations and complies with FERPA [5698]. Anthropic released Frontend Design, an official skill for Claude Code that enforces aesthetic direction before coding, with 161k GitHub stars [5696]. Anthropic introduces Claude for Teachers, offering free premium Claude capabilities to verified K-12 educators in the US, with teaching skills and standards-aligned curricula [5691]. Google Gemini CLI received multiple fixes: strip thoughts from scrubbed history turns [5690], preserve escape sequences in string literals [5689], make ~/.gitconfig read-only in macOS sandbox [5688], egress Cloud Run service skeleton [5687], resolve symbolic link directory escape in memory import processor [5686], implement Cloud Run webhook ingestion service [5685], resolve defensive path resolution for at-reference files [5684], enforce case-insensitive sensitive path blocklist [5683], fix no_proxy test [5682]. Codex desktop app received fixes: removed obsolete Codex workaround [5681], preserved composer caret after request updates [5680], resynced timeline correctly after reconnecting [5679], loaded more timeline history at once [5678], fixed project picker positioning crash [5677], kept permission auto-accept state separate per server [5676], fixed connected project picker positioning [5675], fixed spacing between model provider sections in Settings [5674], fix(core): tolerate AlreadyExists in FSUtil.ensureDir [5673], hid drawer close button on Windows [5672], stopped subagents from launching nested subagents by default with configurable subagent_depth limit [5671], home page command palette search can find and open sessions [5670], fixed custom agent selector visibility [5669], fixed startup readiness including WSL server loading [5668], improved dangerous-command detection [5667], fixed plan approvals without edits being labeled "(edited by user)" [5666], fixed hook callback timeout misreported as user rejection [5665], fixed session crash when tool result renderer returned bigint or plain text [5664], fixed paste markers leaking into external editors [5663], fixed rendered text fragment leaking into crash telemetry [5662], fixed ultracode keyword opt-in firing on non-human-originated input [5661], added startup warning for Write/NotebookEdit/Glob permission rules [5660], added live elapsed-time counter to collapsed tool summary line [5659], fixed edits that leave input as "?" being silently swallowed [5658], fixed file upload validation for DOS device suffixes and multiple hard links [5657], fixed Claude Code on Vertex and Bedrock attempting default Opus model at startup [5656], fixed auto mode overriding PreToolUse hook's ask decision for unsandboxed Bash [5655], fixed permission previews not neutralizing bidirectional-override characters [5654], fixed shell mode not executing commands containing file paths while autocomplete popup was open [5653], fixed SIGTERM during Bash tool orphaning process tree [5652], fixed continue:false hook's halt being dropped [5651], fixed plan mode auto-running file-modifying Bash commands without permission prompt [5650], added session-wide limit on WebSearch tool calls (default 200) [5649], added message.uuid, client_request_id, and tool_source to OpenTelemetry log events [5648], added ISO modified timestamp to memory file frontmatter [5647], fixed Bash permission checks for help/man commands [5646], fixed Bash permission checks for zsh variable subscripts [5645], fixed Bash permission checks for very long commands [5644], fixed Bash permission checks for file-descriptor redirect forms [5643], fixed permission-check bypass in Windows PowerShell 5.1 [5642], fixed single-segment dir/** allow rules [5641].[60]

OpenAI upgraded Codex with plugins enabled by default, npm marketplace integration, MCP tool search, system proxy support, and Amazon Bedrock support [5710]. Codex also received remote control via ChatGPT app, DigitalOcean cloud workspaces, multi-agent task splitting, and indexed web search [5709]. Google released Gemma 4, a local AI model that runs up to 3x faster with new MTP drafters, and the 31B model improved from 20.8% to 89% on AIME [5708]. Kimi K3, a 2.8 trillion parameter open-weight model, was released and benchmarks show it rivals Fable 5 and GPT 5.6 Soul [5704]. Spriterrific, an AI-powered sprite generation tool, is nearing release and designed to be agent-first with skills for Cursor, Claude Code, Codex [5703]. NVIDIA launched DeepStream 9.1, featuring 13 agentic skills for building video analytics pipelines using natural language and coding agents like Claude Code or Codex [5701]. A GitHub repository allows Claude Code to use DeepSeek, Kimi, and 8 other free models by swapping endpoints, attracting 20,000 developers [5700]. Anthropic launched Claude for Teachers, a K-12 privacy-focused product that does not train on conversations and complies with FERPA [5698]. Anthropic released Frontend Design, an official skill for Claude Code that enforces aesthetic direction before coding, with 161k GitHub stars [5696]. Anthropic introduces Claude for Teachers, offering free premium Claude capabilities to verified K-12 educators in the US, with teaching skills and standards-aligned curricula [5691]. Google Gemini CLI received multiple fixes: strip thoughts from scrubbed history turns [5690], preserve escape sequences in string literals [5689], make ~/.gitconfig read-only in macOS sandbox [5688], egress Cloud Run service skeleton [5687], resolve symbolic link directory escape in memory import processor [5686], implement Cloud Run webhook ingestion service [5685], resolve defensive path resolution for at-reference files [5684], enforce case-insensitive sensitive path blocklist [5683], fix no_proxy test [5682]. Codex desktop app received fixes: removed obsolete Codex workaround [5681], preserved composer caret after request updates [5680], resynced timeline correctly after reconnecting [5679], loaded more timeline history at once [5678], fixed project picker positioning crash [5677], kept permission auto-accept state separate per server [5676], fixed connected project picker positioning [5675], fixed spacing between model provider sections in Settings [5674], fix(core): tolerate AlreadyExists in FSUtil.ensureDir [5673], hid drawer close button on Windows [5672], stopped subagents from launching nested subagents by default with configurable subagent_depth limit [5671], home page command palette search can find and open sessions [5670], fixed custom agent selector visibility [5669], fixed startup readiness including WSL server loading [5668], improved dangerous-command detection [5667], fixed plan approvals without edits being labeled "(edited by user)" [5666], fixed hook callback timeout misreported as user rejection [5665], fixed session crash when tool result renderer returned bigint or plain text [5664], fixed paste markers leaking into external editors [5663], fixed rendered text fragment leaking into crash telemetry [5662], fixed ultracode keyword opt-in firing on non-human-originated input [5661], added startup warning for Write/NotebookEdit/Glob permission rules [5660], added live elapsed-time counter to collapsed tool summary line [5659], fixed edits that leave input as "?" being silently swallowed [5658], fixed file upload validation for DOS device suffixes and multiple hard links [5657], fixed Claude Code on Vertex and Bedrock attempting default Opus model at startup [5656], fixed auto mode overriding PreToolUse hook's ask decision for unsandboxed Bash [5655], fixed permission previews not neutralizing bidirectional-override characters [5654], fixed shell mode not executing commands containing file paths while autocomplete popup was open [5653], fixed SIGTERM during Bash tool orphaning process tree [5652], fixed continue:false hook's halt being dropped [5651], fixed plan mode auto-running file-modifying Bash commands without permission prompt [5650], added session-wide limit on WebSearch tool calls (default 200) [5649], added message.uuid, client_request_id, and tool_source to OpenTelemetry log events [5648], added ISO modified timestamp to memory file frontmatter [5647], fixed Bash permission checks for help/man commands [5646], fixed Bash permission checks for zsh variable subscripts [5645], fixed Bash permission checks for very long commands [5644], fixed Bash permission checks for file-descriptor redirect forms [5643], fixed permission-check bypass in Windows PowerShell 5.1 [5642], fixed single-segment dir/** allow rules [5641].

Spriterrific, an AI-powered sprite generation tool, is nearing release and designed to be agent-first with skills for Cursor, Claude Code, Codex [5703]. NVIDIA launched DeepStream 9.1, featuring 13 agentic skills for building video analytics pipelines using natural language and coding agents like Claude Code or Codex [5701]. A GitHub repository allows Claude Code to use DeepSeek, Kimi, and 8 other free models by swapping endpoints, attracting 20,000 developers [5700].[3]