Skip to content
DevAgentRadarDevAgentRadar
Sign in
Guidance/Daily Briefing
digesteveryonedigestevidenceradaragentmodel8 min read · Aug 8, 2026

Radar brief — 2026-08-08

Agent runtimes harden plan-mode and auto-approve paths while plugins, self-hosted runners, and enterprise auth land across Codex, Claude Code, Cline, and Goose

What the evidence shows

Versioned GitHub releases dominate this window (Codex, Claude Code, Cline, Goose). Security and control-plane changes cluster around plan mode, auto-review, sandbox/symlink writes, and one Goose CLI advisory.

Claude Codev2.1.224
Key Signal & Impact
Self-hosted runner turns your machines/containers into session backends (Team/Enterprise); archive plugin install over HTTPS with optional SHA-256 pin; Bedrock region-prefix env
OpenAI Codex CLIrust-v0.147.0
Key Signal & Impact
Portable Agent Plugins + multi-catalog search; conversation sections; --approve-for-me auto-reviewed approvals; import/sync Cursor & Claude skills without dupes
OpenAI Codex CLIrust-v0.146.0
Key Signal & Impact
/new//clear session naming, pin/switch side threads; plugin manifests + Bedrock/Claude Code marketplaces; thread forks; app-server ↔ remote Code Mode over WebSocket
OpenAI Codex CLIrust-v0.146.1
Key Signal & Impact
Safer automatic-review defaults for cyber-capable models; permission changes explained in TUI
Clinev4.1.4
Key Signal & Impact
Plan→act switching is user-driven only; hard-block file-editing shell commands in plan mode (not prompt-only); skills shown with workflows; Chutes provider
Clinedesktop-v0.0.8
Key Signal & Impact
Edit any earlier message → fork + workspace checkpoint rewind; transactional/atomic restores; more reliable checkpoints after restart/compaction/resume
Clinesdk/v0.0.67
Key Signal & Impact
Reasoning effort/budget normalized from models.dev catalog; explicit Anthropic thinking modes; OpenRouter default → anthropic/claude-sonnet-5
Goosev1.44.0
Key Signal & Impact
Security: arbitrary command execution via goose review / git core.fsmonitor (GHSA-r5pp-p5r8-466r); Gemini model support; Stop hook working_dir
Google Antigravity1.1.10
Key Signal & Impact
Business sign-in for Gemini Enterprise (Cloud project, license seat, regional inference, admin controls)
Zed AIv1.15.0-pre
Key Signal & Impact
git.diff_base (HEAD vs default-branch merge base); Project Panel drag-out; JSX/TSX linked editing — prerelease
OpenCodev1.18.5
Key Signal & Impact
Claude adaptive thinking shapes; Mistral reasoning history + cache stability; correct prompt-cache keys per SDK; terminal/server discovery fixes
Gemini CLIv0.54.0
Key Signal & Impact
Session ID rotate on model fallback; HTTPS enforced for Google creds auth (cleartext leak fix); caretaker triage hardening
Windsurfv3.6.27
Key Signal & Impact
Windows cert-store load restored (corp TLS proxies); Devin Local edit/write/apply_patch/notebook_edit refuse symlink targets
xAI Grok CLI (Grok Build)a5589e9
Key Signal & Impact
Commit sync: 5xx retries, sandbox plan/metadata types, /resume search fix — commit hash, not a semver tag

Themes in-signal: agent/model/cli heavily represented; MCP and security tags frequent; several explicit breaking tags on Codex, Claude Code, Cline, Zed pre.

Confidence note: Gemini CLI nightlies/previews and the Grok monorepo commit are noisier than tagged stable releases. Windsurf signal is changelog HTML, not GitHub release API.

For developers

  • Patch Goose now if you use goose review or git integrations — treat GHSA-r5pp-p5r8-466r in v1.44.0 as a must-read before the next CLI run.
  • Codex CLI: try Agent Plugins and skill import from Cursor/Claude on rust-v0.147.0; prefer rust-v0.146.1+ if you rely on auto-review with cyber-capable models. Use --approve-for-me only where you already trust the review policy.
  • Cline plan mode (v4.1.4): expect hard refusals on file-mutating shell, redirects, mutating git, and package installs — plan is investigation-only; you drive plan→act. Desktop-v0.0.8: use message edit + checkpoint fork to rewind workspace atomically instead of manual reset.
  • Claude Code v2.1.224: claude self-hosted-runner for private compute; archive plugin source when you want zip+SHA-256 without git/npm; set ANTHROPIC_BEDROCK_REGION_PREFIX when cross-region Bedrock profiles matter.
  • OpenCode v1.18.5: pull if you hit Claude thinking-shape breaks, Mistral cache/history drift, or stale server terminal transport.
  • Windsurf v3.6.27: corp-proxy users on Windows should upgrade for cert-store fix; assume symlink-targeted writes will be denied in Devin Local.
  • Zed v1.15.0-pre: evaluate git.diff_base in a non-prod profile only — prerelease.
  • Gemini CLI v0.54.0 (stable tag): HTTPS credential fix and session-id rotate on fallback are the practical reasons to move off older builds; treat nightlies as experimental caretaker work.

For teams

  • Enterprise auth path: Google Antigravity 1.1.10 Business sign-in maps Gemini Enterprise seats, region, and admin controls to the CLI — useful if you standardize on GCP terms rather than consumer Google login.
  • Claude Code self-hosted runner (Team/Enterprise): pilot as a controlled execution plane for web/mobile/desktop sessions; pair with pinned archive plugins (SHA-256) for supply-chain tighter than ad-hoc git installs.
  • Codex plugin marketplaces (0.146–0.147): decide which catalogs (local/personal/workspace/remote, Bedrock, Claude Code) are allowed; document --approve-for-me policy before wide rollout.
  • Cline control policy: v4.1.4’s hard plan-mode blocks are enforceable guardrails — update runbooks so “model decided to implement” is no longer expected. Desktop checkpoint/fork behavior needs backup policy awareness (workspace rewind is real).
  • Goose: ship v1.44.0 (or newer advisory fix train) org-wide; audit core.fsmonitor / review workflows after the GHSA.
  • Windsurf/Devin Local: symlink write refusal reduces approved-edit redirection risk — note in secure-SDLC baselines alongside proxy/cert requirements on Windows.
  • Open proposals (8) sit mostly at P5 team improvements (Codex 0.145/0.144.6, Cline 4.0.7, Goose 1.44.0, OpenCode 1.18.5, Zed breaking review, Grok sync) — triage only after the security and plan-mode items above.

What to ignore

  • Marketing gloss around “agent platforms” without version pins — this brief only trusts the listed tags/changelogs.
  • Gemini CLI nightly/preview caretaker/Firestore/Pub/Sub stacks (v0.56.0-nightly, v0.54.0-preview.0) for production decisions; use v0.54.0 stable signals instead.
  • Zed v1.15.0-pre as a fleet default.
  • xAI Grok commit a5589e9 as a release train marker — fine for directional sandbox/UX notes, weak for version gates.
  • Internal score noise and duplicate “+N more changes” tails without the concrete bullets above.
  • Older open proposals still aimed at Codex 0.144/0.145 and Cline 4.0.7 when 0.146–0.147 and Cline 4.1.4 / desktop-0.0.8 already supersede much of that surface.

Watch next

  • Follow-ups to Goose GHSA-r5pp-p5r8-466r (patched minors, config migrations off dangerous core.fsmonitor paths).
  • Whether Codex --approve-for-me and cyber-model auto-review defaults tighten further after rust-v0.146.1.
  • Claude Code self-hosted runner adoption limits and plugin-archive pinning in real Team/Enterprise tenants.
  • Cline plan-mode hard-blocks under pressure (do teams route around via raw shell providers?).
  • Antigravity Business sign-in + admin control coverage beyond 1.1.10.
  • Promotion of Zed git.diff_base work from pre → stable.
  • Gemini CLI caretaker agent path graduating out of nightly-only.
  • Closure or refresh of the eight open improvement proposals against the newer Codex/Cline/OpenCode/Goose versions in this brief.

How to use DevAgentRadar

  • Read What the evidence shows first — every row is a citable version + impact, not a vendor pitch.
  • Developers: apply the concrete CLI/IDE actions in For developers on your own machines today.
  • Teams: turn For teams into policy (approve-modes, plan-mode, self-hosted runners, GHSA patch SLAs, enterprise auth).
  • Skip What to ignore sources when setting version floors.
  • Use Watch next as the backlog for the next evidence window; compare new GitHub tags against this table before rolling agents fleet-wide.
  • Prefer GitHub/changelog primary links in the evidence over secondary blogs when you verify a bump.

Evidence appendix

  • Evidence window: top curated signals (versioned releases preferred)
  • Assistants tracked: 22
  • Signals in this brief: 16
  • Trusted source mix (GitHub/changelog vs HTML): 55%
  • Open improvement proposals: 8
  • Sources reporting errors: 0

High-signal releases used

  • Claude Code v2.1.224: Added self-hosted environments: claude self-hosted-runner turns your own machines or containers into a place Claude Code web, mobile, and desktop sessions can — source

  • OpenAI Codex CLI rust-v0.147.0: Install portable Agent Plugins and search across local, personal, workspace, and remote plugin catalogs. (#36544, #36409, #36919, #36796) · Organize conversatio — source

  • OpenAI Codex CLI rust-v0.146.0: Name new sessions with /new or /clear, pin important threads, and switch between side conversations without closing them. (#34605, #34840, #35011) · Support — source

  • Zed AI v1.15.0-pre: This week's release includes a new git.diff_base setting for choosing whether editor gutters, file-status colors, and git: diff show uncommitted changes aga — source

  • Google Antigravity 1.1.10: Added Business sign-in for Gemini Enterprise accounts, so you can authenticate with a Google Cloud project under Google Cloud terms, use a license seat allocate — source

  • Cline desktop-v0.0.8: Edit any earlier message in a conversation — the app forks the session at that point, rewinds the workspace to that run's checkpoint, and re-runs from your edit — source

  • Goose v1.44.0: Arbitrary command execution in goose CLI via goose review (via git core.fsmonitor config) - [GHSA-r5pp-p5r8-466r](https://github.com/aaif-goose/goose/security — source

  • Cline v4.1.4: Recognize Chutes as a provider. · Show skills alongside workflows in the slash command menu, and disambiguate commands that share a name instead of letting one — source

  • Cline sdk/sdk/v0.0.67 — SDK v0.0.67: Reasoning controls (effort, budget, on/off) are now driven by the models.dev catalog and normalized once before provider encoding, so requests match what each p — source

  • OpenAI Codex CLI rust-v0.146.1: Apply safer automatic-review defaults for cyber-capable models and explain permission changes in the terminal interface. (#37057) · #37057 [0.146] Backport safe — source

  • Gemini CLI v0.56.0-nightly.20260808.gcf22ac7e8: Reclassifying Capacity Exhaustion as Terminal Error · feat(caretaker): update Firestore schema with error, and pr_number fields · feat(caretaker-triage): prompt — source

  • Gemini CLI v0.54.0: Changelog for v0.53.0-preview.0 · Changelog for v0.52.0 · chore(release): bump version to 0.54.0-nightly.20260722.gf743ab579 · fix(caretaker): sanitize and wrap — source

  • OpenCode v1.18.5: Improve Claude adaptive thinking handling across more response shapes. · Avoid OpenAI Responses phase handling that could break some conversations. · Preserve g — source

  • Gemini CLI v0.54.0-preview.0: Changelog for v0.53.0-preview.0 · Changelog for v0.52.0 · chore(release): bump version to 0.54.0-nightly.20260722.gf743ab579 · fix(caretaker): sanitize and wrap — source

Open proposals

Was this guidance useful?

Anonymous · one vote per visitor · re-click to clear. Helps improve digests—not a product ranking.