Skip to content
DevAgentRadarAIDevAgentRadar
Sign in
Guidance/Radar brief — 2026-07-27
digesteveryonedigestevidenceradarmodelcli7 min read · 7/27/2026, 12:48:20 PM

Radar brief — 2026-07-27

Subagents, safer defaults, and a real Goose RCE fix dominate — CLI agents keep shipping control-plane changes faster than model swaps

Headline

Subagents, safer defaults, and a real Goose RCE fix dominate — CLI agents keep shipping control-plane changes faster than model swaps

What the evidence shows

Highest-signal items are versioned GitHub releases, not blogs.

Agent control surfaces moved again

  • Claude Code v2.1.212: /fork now copies the conversation into a new background session (own row in claude agents) while you keep working; the old in-session subagent path is /subtask. Release tags touch subagents, MCP, permissions, hooks, and sandbox — and mark breaking.
  • OpenAI Codex CLI rust-v0.145.0: experimental paginated thread history with efficient resume, search, persisted names, sub-agent support, and memories; /import expanded (incl. migration-related work). Tagged breaking across agent/MCP/CLI surfaces.
  • Google Antigravity 1.1.0: public execution mode cycling default → accept-edits → plan, plus request-review (default) that pauses before finishing work. Breaking on settings/commands/subagents.

Security is not theoretical this window

  • Goose v1.44.0: fixes arbitrary command execution in the CLI via goose review through git core.fsmonitor (GHSA-r5pp-p5r8-466r).
  • xAI Grok CLI (8adf901): SSRF bypass via HTTP redirect in the hook runner; also hardens OAuth workspace scopes and related shell/build paths.
  • Gemini CLI v0.51.0 line (stable + preview/nightly): sandbox work including ~/.gitconfig read-only on macOS sandbox in the nightly stream.

Model / pricing plumbing

  • Codex rust-v0.144.6: refreshed bundled instructions for GPT-5.6 Sol / Terra / Luna and corrected context windows to 272,000 tokens.
  • Cline v4.0.7 + cli-v3.0.39 + SDK v0.0.65: ClinePass limit-reached → one-click usage-based path; free models selectable on ClinePass; retired GLM 5.1; optional peer deps for Claude Code/Codex SDKs; Kimi K3 in bundled fallback; run retry-once behavior.

Secondary but real

  • OpenCode v1.18.5: Claude adaptive-thinking handling across more shapes; avoids an OpenAI Responses phase path that could break conversations; grep symlink path preservation.
  • Zed AI v1.13.0-pre: branch picker UX (filter/group/create/remote icons); prerelease with breaking/hooks tags — treat as early signal only.
  • xAI Grok (c68e39f): harness + TUI marked open-source sync from monorepo (thin changelog).

Trusted mix this brief: ~55% GitHub/changelog-style; 0 sources reporting fetch errors. Themes skew model / cli / security / agent.

For developers

Concrete actions from the releases above:

  1. If you use Claude Code — retrain muscle memory: background parallel work is /fork; in-session helper is /subtask. Re-read permissions/hooks/sandbox notes in v2.1.212 before scripting agents.
  2. If you use Codex CLI — try rust-v0.145.0 thread history/resume/search only on non-critical repos first (explicitly experimental). Pull rust-v0.144.6 metadata if you target GPT-5.6 Sol/Terra/Luna (272k context claim is in-release).
  3. If you use Goose — upgrade to v1.44.0 now for GHSA-r5pp-p5r8-466r; audit any goose review + git fsmonitor customization.
  4. If you use Grok Build/CLI — ensure you are past commit 8adf901 for the hook-runner SSRF redirect fix; don’t expose hook runners to untrusted URLs meanwhile.
  5. If you use Antigravity — learn the mode cycle and that request-review is default; expect more pauses before “done.”
  6. If you use Cline — on limit hits, use the new one-click usage-based switch; prefer free-tab models on ClinePass where enough; don’t look for retired GLM 5.1.
  7. If you use Gemini CLI — prefer v0.51.0 stable over preview/nightly unless you are testing sandbox hardening (~/.gitconfig read-only is nightly-noted).
  8. If you use OpenCode — v1.18.5 is a stability patch for Claude thinking + OpenAI Responses edge breaks; worth a quick bump if those providers flake.

For teams

  1. Patch policy (this week)

    • Mandatory: Goose ≥ v1.44.0, Grok Build ≥ 8adf901 (command exec + SSRF).
    • Schedule: Claude Code v2.1.212, Codex 0.145.0, Antigravity 1.1.0 — breaking agent UX will hit shared runbooks and CI bots.

  2. Default-to-review
    Antigravity’s request-review default and Claude’s fork/background session model both increase parallel agent sprawl. Set org norms: when background agents are allowed, where transcripts live, who approves merges.

  3. Billing / model allowlists
    ClinePass free vs usage-based split and removed GLM 5.1 need allowlist + budget alert updates. Codex’s Sol/Terra/Luna metadata refresh needs eval harness re-baseline (context 272k).

  4. SDK / install surface
    Cline SDK v0.0.65 making Claude Code & Codex providers optional peer deps is good for supply-chain size — update internal templates so CI doesn’t assume fat installs.

  5. Open improvement proposals (P5) queued for team review: Claude Code v2.1.212, Cline v4.0.7, Codex 0.145.0 & 0.144.6, Goose v1.44.0, Grok 8adf901, Zed v1.13.0-pre breaking review. Treat as backlog hygiene, not auto-merge.

What to ignore

  • OpenCode pr-38252-videos / pr-37967-screenshots-final — verification artifacts, not product releases.
  • Codex rust-v0.146.0-alpha.12 — bare alpha tag, no actionable notes in-evidence.
  • Gemini v0.51.0-preview.0 / nightly — useful only if you chase sandbox patches; noisy vs v0.51.0 stable.
  • Zed v1.13.0-pre — real PR activity, still prerelease; don’t set team baseline on it.
  • xAI c68e39f “initial sync” — directional open-source signal, thin on operator detail compared to 8adf901.
  • Marketing language generally — this brief’s weight is GitHub tags + advisories.

Watch next

  • Claude Code: whether /fork + permissions/sandbox tags force follow-up breaks in agent orchestration docs.
  • Codex: experimental thread history → stable; any post-0.145.0 sub-agent/MCP hardening; GPT-5.6 family behavior after metadata refresh.
  • Goose: residual git-integration attack surface after GHSA-r5pp-p5r8-466r.
  • Antigravity: team reaction to always-on request-review default (productivity vs safety).
  • Gemini CLI: sandbox read-only gitconfig landing cleanly in stable.
  • Grok Build: more monorepo→public syncs after harness/TUI publish + whether hook SSRF fix gets a dated advisory.
  • Cline: usage-based conversion UX after limit-reached prompts; Kimi K3 fallback quality.

How to use DevAgentRadar

  • Developers: skim Headline + For developers; patch security rows same day; adopt breaking CLI agent UX on a toy repo before your main branch.
  • Teams: use For teams as a change-control checklist; link proposals only when an owner accepts P5 backlog items.
  • Evidence rule: if it isn’t in the JSON (version/tag/advisory), it doesn’t exist here — re-check upstream release pages before policy freezes.
  • Noise control: prefer versioned GitHub releases over prerelase screenshot/video tags; pin stable when preview and stable both appear (Gemini this window).

Evidence appendix

  • Evidence window: top curated signals (versioned releases preferred)
  • Assistants tracked: 22
  • Signals in this brief: 18
  • Trusted source mix (GitHub/changelog vs HTML): 55%
  • Open improvement proposals: 8
  • Sources reporting errors: 0

High-signal releases used

  • Claude Code v2.1.212 — v2.1.212: /fork now copies your conversation into a new background session (its own row in claude agents) while you keep working; the in-session subagent it used to l — source

  • OpenAI Codex CLI rust-v0.145.0 — rust-v0.145.0 0.145.0: Added experimental paginated thread history with efficient resume, search, persisted names, sub-agent support, and memories. (#33364, #33907, #34085, #34229, #3 — source

  • Google Antigravity 1.1.0 — 1.1.0: Agent execution mode cycling is now publicly available: default -> accept-edits -> plan) · Added request-review (default) mode as the default execution — source

  • Goose v1.44.0 — v1.44.0: Arbitrary command execution in goose CLI via goose review (via git core.fsmonitor config) - [GHSA-r5pp-p5r8-466r](https://github.com/aaif-goose/goose/security — source

  • Zed AI v1.13.0-pre — v1.13.0-pre: Improved branch picker filtering, grouping, branch creation suggestions, and remote-provider icons. (#61215; — source

  • Cline v4.0.7 — v4.0.7: Add a ClinePass limit-reached error with a one-click option to switch to Cline usage-based billing. · Allow selecting Cline free models on the ClinePass provide — source

  • OpenCode v1.18.5 — v1.18.5: Improve Claude adaptive thinking handling across more response shapes. · Avoid OpenAI Responses phase handling that could break some conversations. · Preserve g — source

  • Gemini CLI v0.51.0 — v0.51.0 Release v0.51.0: Changelog for v0.50.0-preview.1 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/28150 · Fix no_proxy test by @jerrylin3321 in https://g — source

  • Gemini CLI v0.51.0-preview.0 — v0.51.0-preview.0 Release v0.51.0-preview.0: Changelog for v0.50.0-preview.1 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/28150 · Fix no_proxy test by @jerrylin3321 in https://g — source

  • Gemini CLI v0.51.0-nightly.20260707.g15a9429b6 — v0.51.0-nightly.20260707.g15a9429b6 Release v0.51.0-nightly.20260707.g15a9429b6: fix(sandbox): make ~/.gitconfig read-only in the macOS sandbox by @ompatel-aiml in https://github.com/google-gemini/gemini-cli/pull/28221 · fix(core): preserve — source

  • Cline sdk/sdk/v0.0.65 — sdk/sdk/v0.0.65 SDK v0.0.65: Claude Code and Codex provider SDKs are now optional peer dependencies loaded on demand, dramatically cutting install size · Added Kimi K3 to the bundled ClineP — source

  • Cline cli-v3.0.39 — cli-v3.0.39 CLI v3.0.39: You can now select Cline free models on the ClinePass provider in the model picker · Removed the retired ClinePass GLM 5.1 model · Fixed OpenAI Codex model meta — source

  • OpenAI Codex CLI rust-v0.144.6 — rust-v0.144.6 0.144.6: Refreshed bundled instructions for GPT-5.6 Sol, Terra, and Luna, and corrected their context windows to 272,000 tokens. (#33972, #34009) · #33972 Backport refre — source

  • xAI Grok CLI (Grok Build) 8adf901 — Synced from monorepo: Changes:

  • grok-shell: request workspaces:read/write OAuth2 scopes

  • security: fix SSRF bypass via HTTP redirect in hook runner

  • fix(grok-build): enterprise ST — source

Open proposals

Was this guidance useful?

Anonymous · one vote per visitor · re-click to clear. Helps improve digests—not a product ranking.