Radar brief — 2026-07-29

Headline

Security patches and session-fork UX dominate: Goose ships a critical CLI advisory, Claude Code renames subagent flow, and Codex doubles down on multi-thread agents plus cross-tool import.

What the evidence shows

Highest-signal versioned releases this window cluster on agent session control, model routing, and security hardening across CLI-first assistants.

Theme counts in this brief: agent×14, model×14, cli×12, security×8, mcp×7. Trusted source mix is 55% GitHub/changelog vs HTML — prefer the GitHub tags above when acting.

For developers

Do now

1. Goose users: upgrade to v1.44.0 and read GHSA-r5pp-p5r8-466r before running goose review on untrusted repos (fsmonitor-based command execution).
2. Claude Code: if scripts/docs say /fork for in-session subagents, switch to /subtask; use new /fork only when you want a background session row. Set CLAUDE_CODE_MAX_WEB_SEARCHES_PER_SESSION if you hit runaway search loops; use claude auto-mode reset --yes in CI-like setups after experiments.
3. Codex CLI: on 0.145+, try /import if moving from Cursor or Claude Code (settings, MCP, plugins, sessions). On 0.146, use named/pinned threads and temporary forks instead of killing sessions. Bedrock path defaults to GPT-5.6 Sol — pin models explicitly if you need stability. Line up with 0.144.6 prompt/context fixes (272k) if you stayed on the 0.144 line.
4. Gemini CLI v0.51.0: pull for path-blocklist, symlink-escape, and sandbox ~/.gitconfig hardening — relevant if you use at-refs, memory import, or macOS sandbox.
5. Grok Build (8adf901): update for hook-runner SSRF redirect fix before custom hooks that fetch URLs.
6. Antigravity 1.1.5: pin models via stable slugs (--model / /model) and tune latency/depth with /effort or --effort per task.
7. Cline: desktop 0.0.5+ for input/stream jank; 0.0.7 for session tray/history; CLI 3.0.47 if you rely on free models or persisted auto-approve/plan-act toggles.
8. OpenCode v1.18.5: upgrade if you saw broken OpenAI Responses phases, Mistral cache/history drops, or MiniMax thinking variant mismatches.

Concrete local checks

• Re-read any aliases/scripts that call Claude /fork.
• After Codex upgrade, run one /import dry migration on a dotfiles repo before production profiles.
• Confirm Goose version >= 1.44.0 in PATH after pull.

For teams

Patch policy (security-first)

• Schedule Goose v1.44.0 and Grok hook SSRF fix (8adf901) as priority upgrades; treat goose review and HTTP-fetching hooks as sensitive until fleets are current.
• Roll Gemini CLI ≥ v0.51.0 where sandboxing, HITL, or memory import are enabled.
• Track Claude Code v2.1.212 as a breaking agent UX change: update runbooks, slash-command cheatsheets, and any automation that assumed /fork = in-session subagent.

Platform / standards

• Codex 0.145–0.146 is the clearest “team migration” bar this window: Cursor/Claude import, plugin marketplaces (including Bedrock + Claude Code), multi-thread fork/pin, remote Code Mode WebSocket. Decide a floor version (recommend ≥ 0.146.0 for plugin + session UX; ensure 0.144.x stragglers at least take 0.144.6 model metadata).
• Model pinning: Antigravity stable slugs + Codex/Zed GPT-5.6.* naming (Sol/Terra/Luna) mean “latest” is no longer a safe default in shared configs — pin slugs in project docs.
• Cline desktop is moving fast on session/subagent visibility and perf; if you standardize on Cline Desktop, require ≥ desktop-v0.0.7 for operable multi-session status.
• Windsurf v3.5.17: status bar hidden by default in Agent Command Center — communicate workbench.statusBar.visible: true if your team depends on it; confirm devin.* gitignore/completion/auto-continue settings are intentional.

Process

• Open team proposals already filed (P5) for Goose 1.44.0, Codex 0.145.0 / 0.144.6, Grok 8adf901, Zed pre, and Cline — use those threads for rollout owners rather than ad-hoc Slack pins.
• Prefer GitHub release tags over HTML changelogs when certifying versions (Windsurf is the main HTML-only high-surface item here).

What to ignore

• OpenCode pr-38252-videos and pr-37967-screenshots-final: PR verification media tags, not product releases — noise for adoption decisions (also reflected in low-value open proposals).
• Gemini CLI nightlies/previews (v0.55.0-nightly.*, v0.54.0-preview.0): useful only if you dogfood; changelog text is partly churn/bumps. Prefer v0.51.0 security fixes for fleets.
• Zed AI v1.13.0-pre: explicitly prerelease; fine for individuals on ChatGPT/Luna, not a team baseline until stable.
• Score-chasing without tags: Windsurf’s HTML changelog and monorepo sync commits are real but noisier than dated GitHub releases — don’t outrank Goose/Claude/Codex security or breaking CLI notes.
• Marketing tone around “snappy” desktop perf (Cline) — the actionable part is the listed stuck-state and freeze fixes, not FPS copy.

Watch next

• Claude Code: whether /fork vs /subtask + WebSearch session caps need further defaults after 2.1.212’s “+45” surface area (MCP/permissions/sandbox tags).
• Codex: stabilization of experimental thread history, Bedrock login, and plugin marketplaces post-0.145/0.146; remote Code Mode WebSocket readiness.
• Goose: residual risk / follow-up CVEs after GHSA-r5pp-p5r8-466r; hook permission model.
• Gemini CLI: promotion of caretaker/Cloud Run and sandbox work from 0.51 → 0.54/0.55 lines into a stable cut.
• Zed stable after v1.13.0-pre breaking/hooks signals; GPT-5.6 Luna availability outside pre.
• Grok Build: whether hook-runner SSRF fix is complete across redirect classes; SDK self-update staging guardrails.
• Cline Desktop beyond 0.0.x: session pagination/subagent UI maturity vs CLI 3.0.47 settings persistence.
• Open proposals queue (8): especially team P5s on Goose 1.44.0, Codex 0.145.0, Grok 8adf901, Zed breaking review.

How to use DevAgentRadar

• Evidence over hype: act only on versioned links in this brief; we tracked 22 assistants and 19 signals here — nothing else is implied released.
• Developers: patch security (Goose, Grok, Gemini), then fix broken personal workflows (Claude /subtask, Codex import/fork, model pins).
• Teams: set a minimum approved version per tool, assign the open P5 proposals, and document slash-command + model-slug standards.
• Ignore prerelease media tags and nightly churn unless you explicitly dogfood.
• Revisit cadence: re-check Watch next items on the next brief; trust mix was 55% GitHub/changelog — discount pure HTML when versions conflict.
• Improve the radar via the listed open proposals or by favoring upstream GitHub releases in your own tooling configs.

---

Evidence appendix

• Evidence window: top curated signals (versioned releases preferred)
• Assistants tracked: 22
• Signals in this brief: 19
• Trusted source mix (GitHub/changelog vs HTML): 55%
• Open improvement proposals: 8
• Sources reporting errors: 0

High-signal releases used

• Claude Code v2.1.212 — v2.1.212: /fork now copies your conversation into a new background session (its own row in claude agents) while you keep working; the in-session subagent it used to l — source

• OpenAI Codex CLI rust-v0.146.0 — rust-v0.146.0 0.146.0: Name new sessions with /new or /clear, pin important threads, and switch between side conversations without closing them. (#34605, #34840, #35011) · Support — source

• OpenAI Codex CLI rust-v0.145.0 — rust-v0.145.0 0.145.0: Added experimental paginated thread history with efficient resume, search, persisted names, sub-agent support, and memories. (#33364, #33907, #34085, #34229, #3 — source

• Goose v1.44.0 — v1.44.0: Arbitrary command execution in goose CLI via goose review (via git core.fsmonitor config) - [GHSA-r5pp-p5r8-466r](https://github.com/aaif-goose/goose/security — source

• Zed AI v1.13.0-pre — v1.13.0-pre: This week's release includes improved branch picker filtering and grouping, run-status indicators for runnable gutter controls, editable image-viewer zoom level — source

• Google Antigravity 1.1.5 — 1.1.5: Added a /effort command to view and change the current model's reasoning effort, with a left/right timeline-gauge picker and a direct /effort <level> form s — source

• Cline desktop-v0.0.5 — desktop-v0.0.5 Desktop v0.0.5: Major performance overhaul: the app now feels snappy end-to-end. · The animated background renders at a locked 60fps instead of ~10fps, typing in the composer n — source

• Gemini CLI v0.51.0 — v0.51.0 Release v0.51.0: Changelog for v0.50.0-preview.1 · Fix no_proxy test · chore(release): bump version to 0.51.0-nightly.20260625.g3fbf93e26 · Vertex base url update · fix(security — source

• Cline desktop-v0.0.7 — desktop-v0.0.7 Desktop v0.0.7: New system tray icon showing app status and how many agent sessions are currently running. · Session history is now paginated in ten-session pages, fetching old — source

• Gemini CLI v0.55.0-nightly.20260729.g3499c84f7 — v0.55.0-nightly.20260729.g3499c84f7 Release v0.55.0-nightly.20260729.g3499c84f7: chore/release: bump version to 0.54.0-nightly.20260728.gbef611950 · feat(pr-generator-db): implement Firestore concurrency dual-locking and test ingestion utili — source

• Cline cli-v3.0.47 — cli-v3.0.47 CLI v3.0.47: Free Cline models are now supported end to end: free models show as "(free)", and hitting the free limit renders a dedicated card with the reset time (from SDK — source

• Gemini CLI v0.54.0-preview.0 — v0.54.0-preview.0 Release v0.54.0-preview.0: Changelog for v0.53.0-preview.0 · Changelog for v0.52.0 · chore(release): bump version to 0.54.0-nightly.20260722.gf743ab579 · fix(caretaker): sanitize and wrap — source

• OpenCode v1.18.5 — v1.18.5: Improve Claude adaptive thinking handling across more response shapes. · Avoid OpenAI Responses phase handling that could break some conversations. · Preserve g — source

• OpenAI Codex CLI rust-v0.144.6 — rust-v0.144.6 0.144.6: Refreshed bundled instructions for GPT-5.6 Sol, Terra, and Luna, and corrected their context windows to 272,000 tokens. (#33972, #34009) · #33972 Backport refre — source

Open proposals

• Improve with Goose v1.44.0: v1.44.0 (audience: team, P5)

• Improve with OpenAI Codex CLI rust-v0.145.0: rust-v0.145.0 0.145.0 (audience: team, P5)

• Improve with Cline v4.0.7: v4.0.7 (audience: team, P5)

• Improve with xAI Grok CLI (Grok Build) 8adf901: Synced from monorepo (audience: team, P5)

• Improve with OpenAI Codex CLI rust-v0.144.6: rust-v0.144.6 0.144.6 (audience: developer, P5)

• Review breaking changes in Zed AI v1.13.0-pre (audience: team, P5)

• Improve with OpenCode pr-38252-videos: pr-38252-videos PR #38252 verification videos (audience: everyone, P5)

• Improve with Zed AI v1.12.0-pre: v1.12.0-pre (audience: team, P5)