Skip to content
DevAgentRadarDevAgentRadar
Sign in
Guidance/Daily Briefing
digesteveryonedigestevidenceradarmodelcli8 min read · Jul 27, 2026

Radar brief — 2026-07-27

Subagent controls and security patches dominate: Claude Code splits /fork from /subtask, Codex ships thread history + sub-agents, Goose discloses a CLI RCE path, and Antigravity makes review-first execution the default.

What the evidence shows

High-signal, versioned GitHub releases cluster around agent control surfaces, CLI security, and model/pricing packaging—not greenfield products.

Agent UX is being productized in the CLI

Security is not theoretical this window

Models & pricing packaging

Stability / secondary

Evidence mix this brief: 55% GitHub/changelog-style, 18 signals across 22 tracked assistants, 0 sources reporting errors. Themes by volume: model (13), cli (12), security (9), agent (8).

For developers

Concrete actions from versioned evidence only:

  1. If you use Claude Code — upgrade notes for v2.1.212: muscle-memory change — background parallel work is /fork; in-session helper is /subtask. Re-check any scripts/docs that assumed old /fork = subagent.
  2. If you use Codex CLI — try rust-v0.145.0 thread history/resume/search before relying on it in anger (tagged experimental). Pull 0.144.6+ if you need corrected GPT-5.6 metadata (272k context).
  3. If you use Goose — patch to v1.44.0 immediately; read GHSA-r5pp-p5r8-466r and audit git core.fsmonitor / goose review usage on shared machines.
  4. If you use Grok Build hooks — move to commit 8adf901 or newer for the hook-runner SSRF redirect fix; don’t assume monorepo sync commits are “just tooling.”
  5. If you use Antigravity — learn the 1.1.0 mode cycle; default is now request-review (pauses before finish). Expect workflow friction until you deliberately choose accept-edits or plan.
  6. If you use Cline — v4.0.7 / CLI v3.0.39: free models appear under ClinePass; know the limit-reached → usage-based path. SDK v0.0.65 optional peer deps = leaner installs if you don’t need every provider SDK.
  7. If you use Gemini CLI — v0.51.0 stable line; sandbox hardening is active—prefer release over nightly unless you are testing ~/.gitconfig read-only behavior.
  8. If you use OpenCode — v1.18.5 is a conversation-correctness release (thinking/Responses/grep paths), not a feature splash.

For teams

  1. Patch policy (P0): Goose ≤ fixed in v1.44.0 and Grok hook SSRF (8adf901) belong on the same board as dependency CVEs—CLI agents read git config and run hooks with developer credentials.
  2. Rollout gates for agent defaults: Antigravity 1.1.0 defaulting to request-review and Claude’s fork vs subtask split will break unattended CI/agent scripts. Require a short “command surface changelog” in your internal runbooks before fleet upgrade.
  3. Subagent governance: Codex 0.145.0 sub-agents + memories and Claude background sessions increase parallel write risk. Set: allowed directories, who can enable MCP, and whether background agents may push or only draft.
  4. Billing UX: Cline’s ClinePass → usage-based one-click path will show up as surprise spend if seats share accounts. Decide: free-tier only, prepaid caps, or usage-based with alerts—before v4.0.7 lands org-wide.
  5. Model catalog drift: Codex GPT-5.6 bundled metadata refresh (272k) and Cline model list churn (retire GLM 5.1, add free/Kimi fallback) mean “the model picker lied” tickets. Pin model IDs in team config where the tool allows it.
  6. Open proposals (all P5 in queue): team-scoped improve/review items exist for Claude Code v2.1.212, Cline v4.0.7, Codex 0.145.0, Goose v1.44.0, Grok 8adf901, Zed v1.13.0-pre, plus a developer proposal for Codex 0.144.6—use them as checklist seeds, not as completed reviews.

What to ignore

  • OpenCode pr-38252-videos / pr-37967-screenshots-final — erification artifact tags, not product releases (score noise despite sitting in the signal list).
  • Codex rust-v0.146.0-alpha.13 — alpha tag with no substantive notes in-evidence; watch, don’t deploy.
  • Gemini v0.51.0-preview.0 / nightly — useful for sandbox fix details; redundant if you already standardize on v0.51.0.
  • xAI c68e39f “Publish harness and TUI open-source” — initial monorepo sync, empty tags, low score; not an operational upgrade signal.
  • Zed v1.13.0-pre breaking tags — real repo activity, but prerelease; don’t set team policy from -pre alone.
  • Raw theme counts (model ×13, etc.) without versions—direction only, not adoption proof.

Watch next

  • Claude Code: whether /fork background sessions + permissions/sandbox tags settle or need a fast follow after v2.1.212.
  • Codex: experimental thread history/sub-agents graduating out of “experimental” after 0.145.0; any non-alpha 0.146.x notes.
  • Goose: post-GHSA-r5pp-p5r8-466r residual git-config / review-command attack surface.
  • Antigravity: how painful request-review default is in real repos (revert pressure on settings/commands).
  • Gemini CLI: sandbox defaults (read-only gitconfig and friends) landing cleanly on stable.
  • Cline: ClinePass free vs usage-based economics after v4.0.7 list changes.
  • Grok Build: whether security fixes keep shipping as monorepo commits vs tagged releases (process risk).

How to use DevAgentRadar

  • Read evidence, not logos. Every claim above ties to a version/commit URL in this window—if it’s not linked, don’t operationalize it.
  • Developers: patch security first (Goose, Grok hooks), then relearn command surfaces (Claude /fork vs /subtask, Antigravity modes, Codex resume).
  • Teams: convert defaults (review-first agents, billing fallbacks, subagent parallelism) into written allowlists before wide rollout.
  • Ignore artifact tags and empty alphas so prerelease noise doesn’t drive roadmap theater.
  • Feed forward: open improvement proposals stay P5 until someone reproduces on your stack—use them as starting checklists, then close with internal notes.

Evidence appendix

  • Evidence window: top curated signals (versioned releases preferred)
  • Assistants tracked: 22
  • Signals in this brief: 18
  • Trusted source mix (GitHub/changelog vs HTML): 55%
  • Open improvement proposals: 8
  • Sources reporting errors: 0

High-signal releases used

  • Claude Code v2.1.212 — /fork now copies your conversation into a new background session (its own row in claude agents) while you keep working; the in-session subagent it used to l — source

  • OpenAI Codex CLI rust-v0.145.0 — Added experimental paginated thread history with efficient resume, search, persisted names, sub-agent support, and memories. (#33364, #33907, #34085, #34229, #3 — source

  • Google Antigravity 1.1.0 — Agent execution mode cycling is now publicly available: default -> accept-edits -> plan) · Added request-review (default) mode as the default execution — source

  • Goose v1.44.0 — Arbitrary command execution in goose CLI via goose review (via git core.fsmonitor config) - GHSA-r5pp-p5r8-466r

  • Zed AI v1.13.0-pre — Improved branch picker filtering, grouping, branch creation suggestions, and remote-provider icons. (#61215; — source

  • Cline v4.0.7 — Add a ClinePass limit-reached error with a one-click option to switch to Cline usage-based billing. · Allow selecting Cline free models on the ClinePass provide — source

  • OpenCode v1.18.5 — Improve Claude adaptive thinking handling across more response shapes. · Avoid OpenAI Responses phase handling that could break some conversations. · Preserve g — source

  • Gemini CLI v0.51.0 — Changelog for v0.50.0-preview.1 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/28150 · Fix no_proxy test by @jerrylin3321 in https://g — source

  • Gemini CLI v0.51.0-preview.0 — Changelog for v0.50.0-preview.1 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/28150 · Fix no_proxy test by @jerrylin3321 in https://g — source

  • Gemini CLI v0.51.0-nightly.20260707.g15a9429b6 — fix(sandbox): make ~/.gitconfig read-only in the macOS sandbox by @ompatel-aiml in https://github.com/google-gemini/gemini-cli/pull/28221 · fix(core): preserve — source

  • Cline sdk/sdk/v0.0.65 — SDK v0.0.65: Claude Code and Codex provider SDKs are now optional peer dependencies loaded on demand, dramatically cutting install size · Added Kimi K3 to the bundled ClineP — source

  • Cline cli-v3.0.39 — You can now select Cline free models on the ClinePass provider in the model picker · Removed the retired ClinePass GLM 5.1 model · Fixed OpenAI Codex model meta — source

  • OpenAI Codex CLI rust-v0.144.6 — Refreshed bundled instructions for GPT-5.6 Sol, Terra, and Luna, and corrected their context windows to 272,000 tokens. (#33972, #34009) · #33972 Backport refre — source

  • xAI Grok CLI (Grok Build) 8adf901 — Synced from monorepo: Changes:

  • grok-shell: request workspaces:read/write OAuth2 scopes

  • security: fix SSRF bypass via HTTP redirect in hook runner

  • fix(grok-build): enterprise ST — source

Open proposals

Was this guidance useful?

Anonymous · one vote per visitor · re-click to clear. Helps improve digests—not a product ranking.