Skip to content
DevAgentRadarDevAgentRadar
Sign in
Guidance/Radar brief — 2026-07-28
digesteveryonedigestevidenceradarmodelcli7 min read · 7/28/2026, 2:05:03 AM

Radar brief — 2026-07-28

Subagent UX is splitting from “in-chat helpers” into real background sessions — and security advisories are riding the same release wave.

Headline

Subagent UX is splitting from “in-chat helpers” into real background sessions — and security advisories are riding the same release wave.

What the evidence shows

Highest-signal, versioned GitHub releases this window cluster on agent control surfaces, not raw model drops:

  • Claude Code v2.1.212 (score 251): /fork now copies the conversation into a new background session (own row in claude agents) while you keep working; the old in-session subagent path is /subtask. Tags mark breaking pressure on subagents, MCP, permissions, hooks, and sandbox.
  • OpenAI Codex CLI rust-v0.145.0: experimental paginated thread history with efficient resume/search, persisted names, sub-agent support, and memories; /import expanded (incl. migration-related work). Follow-on rust-v0.144.6 refreshes bundled GPT-5.6 Sol/Terra/Luna instructions and corrects context windows to 272,000 tokens.
  • Google Antigravity 1.1.0: agent execution mode cycling is public — default → accept-edits → plan — and request-review becomes the default, pausing before finish. Breaking tags on settings/commands/subagents.
  • Goose v1.44.0: security advisory GHSA-r5pp-p5r8-466r — arbitrary command execution in the CLI via goose review (git core.fsmonitor). Treat as a patch-now signal.
  • Cline: v4.0.7 adds ClinePass limit-reached handling and free-model selection under ClinePass; desktop v0.0.5 is a performance pass (composer/input smoothness); SDK v0.0.65 makes Claude Code/Codex provider SDKs optional peer deps and adds Kimi K3 fallback.
  • OpenCode v1.18.5: sturdier Claude adaptive-thinking handling and a fix to avoid OpenAI Responses phase handling that could break conversations.
  • xAI Grok CLI (Grok Build) 8adf901: security fix for SSRF bypass via HTTP redirect in hook runner, plus OAuth scope and enterprise STT hardening. Earlier c68e39f is mostly “publish harness/TUI” monorepo sync.
  • Zed AI v1.13.0-pre: IDE/agent polish (branch picker) with breaking/hooks tags — prerelease only.
  • Gemini CLI v0.51.0 (+ preview/nightly line): ships; detailed product intent is thinner in the captured summaries than the agent/CLI leaders above.

Trusted mix is ~55% GitHub/changelog-style; 0 sources reporting errors. Themes in-window: model ×13, cli ×11, agent ×9, security ×8, plus MCP/IDE/prerelease/breaking.

For developers

Concrete actions from this evidence only:

  1. If you use Claude Code — upgrade to v2.1.212 and retrain muscle memory: background parallel work = /fork; in-session helper = /subtask. Re-check MCP, permissions, hooks, and sandbox assumptions after the rename.
  2. If you use Codex CLI — try rust-v0.145.0 thread history + sub-agents on a throwaway repo before relying on resume/search/memories. On 0.144.6+, verify Sol/Terra/Luna context window = 272k in your prompts/tooling.
  3. If you use Antigravity — learn the mode cycle (default → accept-edits → plan). Expect request-review pauses as default; don’t assume auto-finish.
  4. If you use Goose — patch to v1.44.0 immediately for GHSA-r5pp-p5r8-466r; audit any automation that runs goose review or touches git core.fsmonitor.
  5. If you use Grok Build hooks — pull 8adf901 for the hook-runner SSRF redirect fix before exposing hooks to untrusted URLs.
  6. If you use OpenCode — v1.18.5 is the stability bump for Claude thinking shapes and OpenAI Responses breakage.
  7. If you use Cline — v4.0.7 for billing/limit UX; desktop v0.0.5 if UI jank was blocking you; SDK v0.0.65 if install size from provider SDKs hurt CI images.

For teams

  • Security first: schedule Goose v1.44.0 and Grok Build 8adf901 as out-of-band patches; both are command-execution / SSRF class issues on CLI/hook paths.
  • Policy for subagents: Claude’s /fork background sessions and Codex’s sub-agent + history features change audit trails (who ran what, in which thread). Update runbooks: one session ≠ one agent anymore.
  • Default-deny finish: Antigravity’s request-review default is a process change — good for gated repos; noisy for fully autonomous pipelines. Decide per-env defaults explicitly.
  • Supply chain / install size: Cline SDK optional peer deps reduce default footprint — useful for locked-down CI; pin which provider SDKs you actually allow.
  • Hold prereleases at the edge: Zed v1.13.0-pre, Codex rust-v0.146.0-alpha.13, Gemini nightlies — fine for dogfood, not for org-wide golden images until stable tags land.
  • Open improvement proposals (P5) exist for Cline v4.0.7, Goose v1.44.0, Codex 0.145.0/0.144.6, Gemini v0.51.0, Grok 8adf901, Zed pre, and noisy OpenCode PR artifacts — use them as triage tickets, not as marketing.

What to ignore

  • OpenCode pr-38252-videos / pr-37967-screenshots-final — verification media tags, not product releases.
  • Codex rust-v0.146.0-alpha.13 — bare “Release …” stub; no actionable changelog in-evidence.
  • Gemini v0.54.0-nightly.* and overlapping preview notes — high churn, thin unique signal vs v0.51.0.
  • Grok c68e39f “initial sync” — packaging/open-source publish noise next to the later security-bearing 8adf901.
  • Score-sorted HTML/commit blur without versions when a GitHub release tag exists for the same assistant.

Watch next

  • Claude Code: whether /fork background agents + permissions/sandbox harden into the default team workflow (or fragment further).
  • Codex CLI: paginated history/memories graduating from experimental; Sol/Terra/Luna metadata drift after the 272k correction.
  • Antigravity: adoption friction from request-review default and mode cycling in CI vs interactive use.
  • Goose: residual fallout / secondary advisories after GHSA-r5pp-p5r8-466r.
  • Grok Build: more hook/OAuth hardening after the SSRF redirect fix.
  • Zed v1.13.0 stable notes for the breaking/hooks surface called out in the pre tag.

How to use DevAgentRadar

  • Read What the evidence shows as the only source of truth for this brief — every assistant/version named above is in the evidence JSON.
  • Developers: apply the command/rename/security steps on your own machines first.
  • Teams: patch security releases on a shared cadence; treat breaking agent UX (/fork, review-default modes, sub-agents) as policy changes, not optional tips.
  • Ignore prerelease media and empty alphas until a versioned changelog ships.
  • Re-check open proposals when you adopt a listed version; they’re triage aids, not endorsements.

Evidence appendix

  • Evidence window: top curated signals (versioned releases preferred)
  • Assistants tracked: 22
  • Signals in this brief: 18
  • Trusted source mix (GitHub/changelog vs HTML): 55%
  • Open improvement proposals: 8
  • Sources reporting errors: 0

High-signal releases used

  • Claude Code v2.1.212 — v2.1.212: /fork now copies your conversation into a new background session (its own row in claude agents) while you keep working; the in-session subagent it used to l — source

  • OpenAI Codex CLI rust-v0.145.0 — rust-v0.145.0 0.145.0: Added experimental paginated thread history with efficient resume, search, persisted names, sub-agent support, and memories. (#33364, #33907, #34085, #34229, #3 — source

  • Google Antigravity 1.1.0 — 1.1.0: Agent execution mode cycling is now publicly available: default -> accept-edits -> plan) · Added request-review (default) mode as the default execution — source

  • Goose v1.44.0 — v1.44.0: Arbitrary command execution in goose CLI via goose review (via git core.fsmonitor config) - [GHSA-r5pp-p5r8-466r](https://github.com/aaif-goose/goose/security — source

  • Zed AI v1.13.0-pre — v1.13.0-pre: Improved branch picker filtering, grouping, branch creation suggestions, and remote-provider icons. (#61215; — source

  • Cline v4.0.7 — v4.0.7: Add a ClinePass limit-reached error with a one-click option to switch to Cline usage-based billing. · Allow selecting Cline free models on the ClinePass provide — source

  • Cline desktop-v0.0.5 — desktop-v0.0.5 Desktop v0.0.5: Major performance overhaul: the app now feels snappy end-to-end. The animated background renders at a locked 60fps instead of ~10fps, typing in the composer no — source

  • Gemini CLI v0.51.0 — v0.51.0 Release v0.51.0: Changelog for v0.50.0-preview.1 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/28150 · Fix no_proxy test by @jerrylin3321 in https://g — source

  • OpenCode v1.18.5 — v1.18.5: Improve Claude adaptive thinking handling across more response shapes. · Avoid OpenAI Responses phase handling that could break some conversations. · Preserve g — source

  • Gemini CLI v0.51.0-preview.0 — v0.51.0-preview.0 Release v0.51.0-preview.0: Changelog for v0.50.0-preview.1 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/28150 · Fix no_proxy test by @jerrylin3321 in https://g — source

  • Cline sdk/sdk/v0.0.65 — sdk/sdk/v0.0.65 SDK v0.0.65: Claude Code and Codex provider SDKs are now optional peer dependencies loaded on demand, dramatically cutting install size · Added Kimi K3 to the bundled ClineP — source

  • Gemini CLI v0.54.0-nightly.20260728.gbef611950 — v0.54.0-nightly.20260728.gbef611950 Release v0.54.0-nightly.20260728.gbef611950: fix(a2a-server): normalize CRLF line endings to LF in getProposedContent by @luisfelipe-alt in https://github.com/google-gemini/gemini-cli/pull/28531 · fix(core — source

  • OpenAI Codex CLI rust-v0.144.6 — rust-v0.144.6 0.144.6: Refreshed bundled instructions for GPT-5.6 Sol, Terra, and Luna, and corrected their context windows to 272,000 tokens. (#33972, #34009) · #33972 Backport refre — source

  • xAI Grok CLI (Grok Build) 8adf901 — Synced from monorepo: Changes:

  • grok-shell: request workspaces:read/write OAuth2 scopes

  • security: fix SSRF bypass via HTTP redirect in hook runner

  • fix(grok-build): enterprise ST — source

Open proposals

Was this guidance useful?

Anonymous · one vote per visitor · re-click to clear. Helps improve digests—not a product ranking.