Skip to content
DevAgentRadarDevAgentRadar
Sign in
Guidance/Daily Briefing
digesteveryonedigestevidenceradarmodelagent7 min read · Aug 4, 2026

Radar brief — 2026-08-04

Security hardening and session control dominate: Claude Code masks sandbox credentials, Goose patches a CLI RCE path, Cline makes checkpoints actually rewind workspaces, and Codex CLI ships plugins plus cross-tool import.

What the evidence shows

High-signal, versioned GitHub releases lead this window. Themes cluster on agent session control, CLI/MCP surface growth, model routing, and security.

Claude Codev2.1.221
Key Signal & Impact
VS Code Focus view hides tool noise behind per-turn summaries (Ctrl+Alt+F). Linux/WSL sandbox gains mode: "mask" for credential files (sentinel in-sandbox, real value only on egress); macOS falls back to deny.
OpenAI Codex CLIrust-v0.146.0
Key Signal & Impact
Named/pinned sessions, thread forks (incl. temporary), Agent Plugins manifests + marketplaces (Bedrock, Claude Code), app-server ↔ remote Code Mode over WebSocket.
OpenAI Codex CLIrust-v0.145.0
Key Signal & Impact
Experimental paginated thread history + memories; /import migrates Cursor & Claude Code settings/MCP/plugins/sessions; experimental Bedrock login; GPT-5.6 Sol default on Bedrock.
OpenAI Codex CLIrust-v0.144.6
Key Signal & Impact
Hotfix: refreshed GPT-5.6 Sol/Terra/Luna prompts; context windows corrected to 272k tokens.
Google Antigravity1.1.10
Key Signal & Impact
Business sign-in for Gemini Enterprise (Cloud project auth, license seats, regional inference, org admin controls).
Clinedesktop-v0.0.8
Key Signal & Impact
Edit any earlier message → fork session, checkpoint rewind, re-run; transactional/workspace-atomic restores; more reliable checkpoints after restart/compaction/resume.
Clinecli-v3.0.49
Key Signal & Impact
/undo fixed after tool use; checkpoints recorded again; restore = full workspace rewind (respects .gitignore).
Clinesdk/sdk/v0.0.67
Key Signal & Impact
Reasoning effort/budget normalized via models.dev catalog; Anthropic thinking modes handled explicitly; OpenRouter default → anthropic/claude-sonnet-5.
Goosev1.44.0
Key Signal & Impact
Security: arbitrary command execution via goose review / git core.fsmonitor patched (GHSA-r5pp-p5r8-466r). Latest Gemini models; Stop hook gets working_dir; Sakana/Fugu provider.
OpenCodev1.18.5
Key Signal & Impact
Claude adaptive thinking across more shapes; Mistral reasoning history + cache stability; MiniMax M3 thinking fix; OpenAI Responses phase bug avoided.
xAI Grok CLI (Grok Build)780d138
Key Signal & Impact
Expired external-provider creds → sign-in (not 401 loop); vendor-compat MCP kill switch actually enforced when on.
Windsurfv3.6.27
Key Signal & Impact
Windows cert-store loading restored (corp TLS proxies); Devin Local edit/write/apply_patch/notebook_edit refuse symlink writes.
Gemini CLIv0.54.0-preview.0 / v0.55.0-nightly.*
Key Signal & Impact
Prerelease stream: HTTPS enforcement for Google creds, session ID rotate on model fallback, capacity exhaustion classified terminal, Antigravity agent-runner work.
Zed AIv1.13.1
Key Signal & Impact
Editor UX (branch picker, runnable gutter status, image zoom)—light agent signal vs. peers this window.

Confidence note: Gemini CLI entries are preview/nightly; OpenCode pr-38252-videos / pr-37967-screenshots-final are verification artifacts, not product releases. Windsurf signal is changelog HTML (weaker than GitHub tags). Grok is a monorepo sync commit, not a semver tag.

For developers

  • Upgrade Goose to v1.44.0 now if you use goose review or git hooks—treat GHSA-r5pp-p5r8-466r as a hard patch.
  • Claude Code v2.1.221: try Focus view when long tool traces bury the answer; on Linux/WSL, prefer sandbox mode: "mask" over broad secret mounts.
  • Cline users: desktop-v0.0.8 + cli-v3.0.49 restore real time-travel—edit an earlier prompt and confirm workspace files rewind; re-enable /undo after tool-heavy turns.
  • Codex CLI: rust-v0.145→0.146 is the migration band—use /import if leaving Cursor/Claude Code; pin important threads; test Agent Plugins before relying on marketplace installs.
  • Model routing: Codex 0.144.6’s 272k context fix for GPT-5.6 variants; Cline SDK v0.0.67 reasoning clamps; OpenCode v1.18.5 if you hit Claude/Mistral/MiniMax thinking or cache glitches.
  • Windsurf/Devin Local: v3.6.27 matters behind corp proxies and anywhere symlinks appear in write paths.
  • Skip pinning Gemini CLI nightlies / OpenCode PR evidence tags unless you are actively testing those builds.

For teams

  • Patch policy: Goose v1.44.0 (RCE advisory) and Windsurf symlink-write denial are the clearest fleet-wide security moves in this brief.
  • Secrets & sandbox: standardize Claude Code credential masking on Linux/WSL CI devcontainers; do not assume macOS parity (deny fallback).
  • Enterprise auth: Antigravity 1.1.10 Business sign-in is the path for Gemini Enterprise seat/region/admin control—pilot with a dedicated Cloud project before org rollout.
  • Session governance: Codex named/pinned threads + Cline atomic checkpoints change audit/repro expectations—decide what must be retained vs. ephemeral forks.
  • Tool migration: Codex /import from Cursor/Claude Code reduces MCP/plugin drift; still diff imported MCP servers and permissions before shared images.
  • MCP posture: confirm Grok’s vendor-compat MCP kill switch is on and enforced in locked-down environments; review Codex plugin marketplaces (Bedrock/Claude Code) as new supply chain surface.
  • Open proposals (8) sit mostly at team/P5—use them to track Codex 0.145/0.144.6, Goose 1.44.0, OpenCode 1.18.5, and Zed pre breaks rather than ad-hoc Slack forwards.

What to ignore

  • OpenCode PR verification video/screenshot tags—noise for radar scoring, not ship signals.
  • Gemini CLI nightly/preview churn unless you need a specific fix (HTTPS creds, capacity-terminal, fallback session rotate).
  • Zed v1.13.1 as an “agent platform” event—this cut is mostly IDE UX.
  • Raw “+N more changes” counts without reading security/MCP/session notes.
  • Marketing phrasing around model names; trust the versioned changelog lines (context windows, defaults, advisories).

Watch next

  • Codex Agent Plugins + remote Code Mode WebSocket hardening and permission model.
  • Whether Claude Code credential mask gains macOS parity (or stays deny).
  • Cline checkpoint/undo stability across desktop + CLI + SDK after the 0.0.69-related regressions.
  • Goose post-advisory follow-ups on hook/fsmonitor attack surface.
  • Gemini CLI promoting preview→stable with Antigravity runner pieces.
  • Grok MCP kill-switch edge cases and external-provider auth UX after the sync.
  • Resolution of open team proposals on Codex 0.145, Goose 1.44.0, OpenCode 1.18.5, Zed breaking pre.

How to use DevAgentRadar

  • Read What the evidence shows first—versioned tables only, no launch-post spin.
  • Developers: apply concrete upgrade/try steps in For developers; verify on one repo before defaults.
  • Teams: turn For teams into patch tickets, sandbox/MCP policy, and import/migration checklists.
  • Use What to ignore to filter nightlies, screenshot tags, and weak HTML blips.
  • Track Watch next + linked open proposals for follow-through; re-check primary GitHub release URLs when you act.

Evidence appendix

  • Evidence window: top curated signals (versioned releases preferred)
  • Assistants tracked: 22
  • Signals in this brief: 18
  • Trusted source mix (GitHub/changelog vs HTML): 55%
  • Open improvement proposals: 8
  • Sources reporting errors: 0

High-signal releases used

  • Claude Code v2.1.221: [VSCode] · Added Focus view: a chat-menu toggle that hides tool activity behind an expandable per-turn summary with a live running-tool indicator, toggled with — source

  • OpenAI Codex CLI rust-v0.146.0: Name new sessions with /new or /clear, pin important threads, and switch between side conversations without closing them. (#34605, #34840, #35011) · Support — source

  • OpenAI Codex CLI rust-v0.145.0: Added experimental paginated thread history with efficient resume, search, persisted names, sub-agent support, and memories. (#33364, #33907, #34085, #34229, #3 — source

  • Google Antigravity 1.1.10: Added Business sign-in for Gemini Enterprise accounts, so you can authenticate with a Google Cloud project under Google Cloud terms, use a license seat allocate — source

  • Cline desktop-v0.0.8: Edit any earlier message in a conversation — the app forks the session at that point, rewinds the workspace to that run's checkpoint, and re-runs from your edit — source

  • Goose v1.44.0: Arbitrary command execution in goose CLI via goose review (via git core.fsmonitor config) - [GHSA-r5pp-p5r8-466r](https://github.com/aaif-goose/goose/security — source

  • Zed AI v1.13.1: This week's release includes improved branch picker filtering and grouping, run-status indicators for runnable gutter controls, and editable image-viewer zoom l — source

  • Cline sdk/sdk/v0.0.67 — SDK v0.0.67: Reasoning controls (effort, budget, on/off) are now driven by the models.dev catalog and normalized once before provider encoding, so requests match what each p — source

  • Cline cli-v3.0.49: /undo works again once the agent has used tools — the checkpoint picker counted tool results as user turns, so restore aborted with "Could not find user messa — source

  • OpenCode v1.18.5: Improve Claude adaptive thinking handling across more response shapes. · Avoid OpenAI Responses phase handling that could break some conversations. · Preserve g — source

  • Gemini CLI v0.54.0-preview.0: Changelog for v0.53.0-preview.0 · Changelog for v0.52.0 · chore(release): bump version to 0.54.0-nightly.20260722.gf743ab579 · fix(caretaker): sanitize and wrap — source

  • Gemini CLI v0.55.0-nightly.20260729.g3499c84f7: chore/release: bump version to 0.54.0-nightly.20260728.gbef611950 · feat(pr-generator-db): implement Firestore concurrency dual-locking and test ingestion utili — source

  • Gemini CLI v0.55.0-nightly.20260801.gf47d6c6f7: fix(core): classify capacity exhaustion as terminal to prevent retry hangs · fix(core,cli): propagate InvalidStreamError details to UI for specific empty respon — source

  • OpenAI Codex CLI rust-v0.144.6: Refreshed bundled instructions for GPT-5.6 Sol, Terra, and Luna, and corrected their context windows to 272,000 tokens. (#33972, #34009) · #33972 Backport refre — source

Open proposals

Was this guidance useful?

Anonymous · one vote per visitor · re-click to clear. Helps improve digests—not a product ranking.