Skip to content
DevAgentRadarDevAgentRadar
Sign in
Guidance/Daily Briefing
digesteveryonedigestevidenceradarmodelagent7 min read · Aug 4, 2026

Radar brief — 2026-08-04

Security hardening and session control dominate: Claude Code masks sandbox credentials, Goose ships a critical CLI advisory fix, and Codex/Cline deepen multi-thread agent workflows.

What the evidence shows

High-signal, versioned releases cluster around agent session control, MCP/plugin surfaces, model routing, and security. Trusted mix is ~55% GitHub/changelog; several Gemini and OpenCode tags are prerelease/noise.

Claude Codev2.1.221
Key Signal & Impact
Focus view hides tool noise (Ctrl+Alt+F); Linux/WSL sandbox mode: "mask" for credential files (macOS falls back to deny) — clearer UI + tighter secret handling
OpenAI Codex CLIrust-v0.146.0
Key Signal & Impact
Named/pinned sessions, thread forks (incl. temporary), Agent Plugins manifests + Bedrock/Claude Code marketplaces, app-server ↔ remote Code Mode over WebSocket
OpenAI Codex CLIrust-v0.145.0
Key Signal & Impact
Experimental paginated history + sub-agents/memories; /import migrates Cursor & Claude Code settings/MCP/plugins/sessions; experimental Bedrock login; GPT-5.6 Sol default on Bedrock
OpenAI Codex CLIrust-v0.144.6
Key Signal & Impact
Bundled GPT-5.6 Sol/Terra/Luna instructions refreshed; context windows corrected to 272k
Google Antigravity1.1.10
Key Signal & Impact
Business sign-in for Gemini Enterprise (Cloud project auth, license seats, regional inference, admin controls)
Clinedesktop-v0.0.8
Key Signal & Impact
Edit any earlier message → fork + workspace checkpoint rewind; transactional/atomic restores; reliable checkpoints after restart/compaction
Clinecli-v3.0.49
Key Signal & Impact
/undo fixed after tool use; checkpoints recorded again; restore = full workspace rewind (respects .gitignore)
Clinesdk/sdk/v0.0.67
Key Signal & Impact
Reasoning effort/budget normalized via models.dev; Anthropic thinking modes handled; OpenRouter default → anthropic/claude-sonnet-5
Goosev1.44.0
Key Signal & Impact
GHSA-r5pp-p5r8-466r: arbitrary command execution via goose review / git core.fsmonitor; latest Gemini models; Stop hook gets working_dir; Sakana/Fugu provider
OpenCodev1.18.5
Key Signal & Impact
Claude adaptive thinking, Mistral reasoning/cache stability, MiniMax thinking variant, prompt-cache key fixes, server terminal transport
Windsurfv3.6.27
Key Signal & Impact
Windows cert-store loading restored (corp TLS proxies); local edit/write/apply_patch/notebook_edit refuse symlink writes
xAI Grok CLI (Grok Build)ed6d543
Key Signal & Impact
ACP session resume/close; cap live workflow subagents at 16; MCP images extracted before truncation; sandbox no longer refuses large deny-glob workspaces
Gemini CLIv0.54.0-preview.0 / v0.55.0-nightly.*
Key Signal & Impact
Prerelease: HTTPS enforced for Google creds; session ID rotate on model fallback; capacity exhaustion treated terminal; Antigravity agent runner work
Zed AIv1.13.1
Key Signal & Impact
Branch picker filtering/grouping and runnable gutter status — IDE polish more than agent core

For developers

  • Patch Goose to v1.44.0 immediately if you use CLI goose review or custom git hooks — GHSA-r5pp-p5r8-466r is arbitrary command execution via core.fsmonitor.
  • Claude Code v2.1.221: try Focus view when tool traces drown the chat; on Linux/WSL, prefer sandbox credential mode: "mask" over blunt deny so egress still works with real secrets substituted by the proxy.
  • Codex CLI: rust-v0.146.0 session pins/forks and plugin manifests are the practical unlock for side conversations without killing context; rust-v0.145.0 /import is the migration path from Cursor/Claude Code MCP + skills.
  • Cline users: desktop-v0.0.8 + cli-v3.0.49 make checkpoints trustworthy again — edit-earlier-message fork and /undo after tool use are worth re-testing; SDK v0.0.67 reasoning budgets should match provider ads more cleanly.
  • Windsurf v3.6.27: if you sit behind a TLS-inspecting proxy on Windows, cert-store fix unblocks sign-in; symlink write refusal reduces surprise file redirection on approved edits.
  • OpenCode v1.18.5: pull if you hit Claude thinking shape breaks, Mistral cache drift, or empty/odd stream handling.
  • Grok Build ed6d543: session resume/close and subagent cap (16) matter for long agentic runs; MCP image-before-truncate avoids silent context loss.

For teams

  • Security review queue: Goose GHSA-r5pp-p5r8-466r, Claude sandbox credential masking, Windsurf symlink write block, Gemini CLI HTTPS credential enforcement — treat as policy-relevant, not optional polish.
  • Enterprise auth: Antigravity 1.1.10 Business sign-in ties Gemini Enterprise seats, region, and admin controls to the CLI — evaluate before broad rollout.
  • Migration / dual-stack: Codex rust-v0.145.0 /import (Cursor + Claude Code settings, MCP, plugins, sessions, memories) plus rust-v0.146.0 plugin marketplaces (Bedrock, Claude Code) reduce lock-in friction; pilot on one squad before org-wide.
  • Bedrock / model defaults: Codex Bedrock path defaults to GPT-5.6 Sol with corrected 272k context in the 0.144.6 hotfix line — align internal model allowlists and cost caps.
  • Checkpoint discipline: Cline’s atomic workspace rewind is now viable for shared agent runs; define what must stay gitignored (.env, build dirs) so restores don’t thrash artifacts.
  • Open proposals (P5): team-scoped improve/review items exist for Codex 0.145.0 / 0.144.6, Cline, Goose v1.44.0, OpenCode v1.18.5, Grok sync, and Zed pre — use them to track adoption, not as release notes.

What to ignore

  • OpenCode pr-38252-videos and pr-37967-screenshots-final — erification media tags, not product releases.
  • Gemini CLI nightly/preview tags (v0.54.0-preview.0, v0.55.0-nightly.*) — useful for trend (Antigravity runner, HTTPS, capacity handling) but not stable pin targets.
  • Zed AI v1.13.1 branch-picker/UX churn unless your bottleneck is IDE navigation; low agent-core impact vs the CLI/security cluster.
  • Inflated “+N more changes” tails without versioned security or workflow claims.

Watch next

  • Codex plugin marketplace + remote Code Mode WebSocket maturity (auth boundaries, marketplace trust).
  • Whether Claude Code credential mask lands equivalent strength on macOS (today: deny fallback).
  • Goose post-advisory follow-ups and any further hook/permission tightening.
  • Cline checkpoint/restore behavior under long multi-agent desktop + CLI mixes.
  • Gemini CLI promotion of Antigravity runner and HTTPS credential fixes out of nightly.
  • Grok Build subagent cap and sandbox deny-glob performance on monorepos.
  • Resolution path on open P5 proposals (Codex, Goose, OpenCode, Zed pre).

How to use DevAgentRadar

  • Read What the evidence shows first — tables are GitHub/changelog-backed, not vendor blogs.
  • Developers: apply security pins (Goose, Windsurf, Claude sandbox) and trial session/checkpoint features on a personal branch today.
  • Teams: route enterprise auth, Bedrock defaults, and migration imports through a short pilot; file adoption notes against the open proposals.
  • Ignore prerelease media tags and uncritical IDE chrome unless they map to a concrete failure you already see.
  • Re-check this radar when scores shift — evidence window is curated and version-preferred; absence of a tool is not a negative verdict.

Evidence appendix

  • Evidence window: top curated signals (versioned releases preferred)
  • Assistants tracked: 22
  • Signals in this brief: 18
  • Trusted source mix (GitHub/changelog vs HTML): 55%
  • Open improvement proposals: 8
  • Sources reporting errors: 0

High-signal releases used

  • Claude Code v2.1.221: [VSCode] · Added Focus view: a chat-menu toggle that hides tool activity behind an expandable per-turn summary with a live running-tool indicator, toggled with — source

  • OpenAI Codex CLI rust-v0.146.0: Name new sessions with /new or /clear, pin important threads, and switch between side conversations without closing them. (#34605, #34840, #35011) · Support — source

  • Google Antigravity 1.1.10: Added Business sign-in for Gemini Enterprise accounts, so you can authenticate with a Google Cloud project under Google Cloud terms, use a license seat allocate — source

  • OpenAI Codex CLI rust-v0.145.0: Added experimental paginated thread history with efficient resume, search, persisted names, sub-agent support, and memories. (#33364, #33907, #34085, #34229, #3 — source

  • Cline desktop-v0.0.8: Edit any earlier message in a conversation — the app forks the session at that point, rewinds the workspace to that run's checkpoint, and re-runs from your edit — source

  • Goose v1.44.0: Arbitrary command execution in goose CLI via goose review (via git core.fsmonitor config) - [GHSA-r5pp-p5r8-466r](https://github.com/aaif-goose/goose/security — source

  • Zed AI v1.13.1: This week's release includes improved branch picker filtering and grouping, run-status indicators for runnable gutter controls, and editable image-viewer zoom l — source

  • Cline sdk/sdk/v0.0.67 — Reasoning controls (effort, budget, on/off) are now driven by the models.dev catalog and normalized once before provider encoding, so requests match what each p — source

  • Cline cli-v3.0.49: /undo works again once the agent has used tools — the checkpoint picker counted tool results as user turns, so restore aborted with "Could not find user messa — source

  • OpenCode v1.18.5: Improve Claude adaptive thinking handling across more response shapes. · Avoid OpenAI Responses phase handling that could break some conversations. · Preserve g — source

  • Gemini CLI v0.54.0-preview.0: Changelog for v0.53.0-preview.0 · Changelog for v0.52.0 · chore(release): bump version to 0.54.0-nightly.20260722.gf743ab579 · fix(caretaker): sanitize and wrap — source

  • Gemini CLI v0.55.0-nightly.20260729.g3499c84f7: chore/release: bump version to 0.54.0-nightly.20260728.gbef611950 · feat(pr-generator-db): implement Firestore concurrency dual-locking and test ingestion utili — source

  • Gemini CLI v0.55.0-nightly.20260801.gf47d6c6f7: fix(core): classify capacity exhaustion as terminal to prevent retry hangs · fix(core,cli): propagate InvalidStreamError details to UI for specific empty respon — source

  • OpenAI Codex CLI rust-v0.144.6: Refreshed bundled instructions for GPT-5.6 Sol, Terra, and Luna, and corrected their context windows to 272,000 tokens. (#33972, #34009) · #33972 Backport refre — source

Open proposals

Was this guidance useful?

Anonymous · one vote per visitor · re-click to clear. Helps improve digests—not a product ranking.