Claude Code 2.1.310 ships Monitor to cloud gateways, Codex 0.164 adds presets, Hermes and OpenClaw harden updates
The throughline is the harness hardening itself for unattended work. Claude Code 2.1.310 takes Monitor to cloud gateways and fixes a hook that could fail open; Codex 0.164 masks credentials and adds managed MCP auth; Hermes and OpenClaw spend their releases on migration, session recovery and an LTS-style channel. This is a short edition by design: the GitHub API and Hacker News were unreachable this run and web search returned no confirmed lab announcements, so every item rests on a release page we read directly.
The coding harnesses grow up — the week’s changelogs are about permissions, credentials and enterprise plumbing, not new tricks.
Claude Code v2.1.310 brings the Monitor tool to Bedrock, Vertex and Foundry and tightens permission prompts
Release Oct 23 · v2.1.310
The headline change is the Monitor tool and plugin monitors now working on Bedrock, Vertex and Foundry, and when telemetry or nonessential traffic is disabled; long foreground sleeps are blocked in those setups too. Around it sit a run of trust fixes: file-read permission prompts now show where a symlink leads, PreToolUse and PermissionRequest hooks no longer let a call through on Windows when Git Bash is missing and the hook command is only quoted strings, and Linux /sandbox now names Ubuntu’s AppArmor user-namespace restriction when it stops bubblewrap from starting.
Why it matters now: Monitor is how an agent waits on a long job without burning turns, and until now cloud-provider and locked-down deployments were the ones without it. Fixing a hook that could fail open is the more important line — a guardrail that silently passes is worse than none. Cloud sessions and Remote Control permissions can also now be assigned to Enterprise custom roles.
Codex 0.164.0 ships numbered presets, inline /model arguments and credential masking
Stable Oct 23 · rust-v0.164.0 · ~300 PRs, ~80 contributors
The stable cut adds ten numbered /presets slots for reusable prompts and slash commands, lets /model and /permissions take arguments inline (model, reasoning effort, speed, permission profile), and previews images in the fullscreen transcript on Kitty and Sixel terminals. Enterprise MCP connections can now authenticate through eligible Codex account grants or a dedicated sign-in, including OAuth clients that need secrets, and credentials are masked during supported remote Bash and Zsh snapshot sessions.
Why it matters now: masked credentials and managed MCP auth are the two features security teams ask for before letting an agent near remote shells. The release also hardens sandbox checks for case-variant macOS paths and replaceable executable symlinks, and stops failed compaction leaving partial summaries in history — the unglamorous fixes that decide whether long sessions survive.
The upgrade path is now a product surface — open agent runtimes spend their release budget on migrations, recovery and safe updates.
Update — Hermes Agent v0.22.5 rolls up ~81 PRs: reworked Nous sign-in, pluggable delegation backends, OpenClaw migration
Update · v0.22.5 Oct 22/23 · follows v0.22.3 and v0.22.4
New since the 620-PR v0.22.3 rollup covered earlier: the notes list a reworked Nous sign-in, usage-window plan support, pluggable delegation backends, a hermes import-agent command, OpenClaw migration and an Electron 44 upgrade. hermes update now refuses to offer a stable release, and long Claude DirectSDK answers are no longer cut off by the stall timer. The maintainers say full curated notes for this window arrive with v0.23.0.
Why it matters now: import-agent plus OpenClaw migration is a direct bid for users of the rival open runtime, and pluggable delegation backends are the step toward running sub-agents on whatever executor you trust. The notes are a patch-level summary, so treat v0.23.0 as the real changelog.
Update — OpenClaw 2026.10.7 adds session recovery, and an extended-stable 2026.9.34 gateway line arrives
Update · Oct 24 · 2026.10.7 and 2026.9.34
Since 2026.10.6, the new release keeps recovery records for interrupted sessions, clears leftover state from stopped conversations, lets interrupted package updates resume, and keeps earlier files when a multi-file patch fails. It also adds Gemini 4 Argon support. Alongside it, 2026.9.34 is a gateway-only extended-stable build — the project’s closest thing to LTS — whose apply_patch now validates the whole edit envelope before touching files, so a later invalid hunk cannot delete files an earlier one changed.
Why it matters now: an LTS-style channel is what teams running a self-hosted agent gateway need before standardising on it, and the patch-atomicity fix closes a data-loss path that every file-editing agent shares. Managed upgrades now also update official plugins.