Radar brief — 2026-08-09

What the evidence shows

High-signal, versioned GitHub releases this window cluster on agent packaging, MCP/auth, sandbox/approval defaults, and session durability. Trusted mix is ~55% GitHub/changelog; HTML-only notes are called out below.

For developers

• Codex CLI: Try Agent Plugins catalogs and skill import from Cursor/Claude on rust-v0.147.0; use --approve-for-me only after reading the rust-v0.146.1 safer cyber-model defaults.
• Claude Code: If you need non-git plugin distribution, test archive + SHA-256 pinning on v2.1.224; set ANTHROPIC_BEDROCK_REGION_PREFIX when cross-region Bedrock profiles matter.
• Cline: Desktop v0.0.8 rewind/edit-earlier-message is the practical “time travel” workflow — verify checkpoints after compaction and resume before relying on it mid-refactor. Extension v4.1.7 restores reviewable “View Changes” on completion rows.
• Goose v1.45.0: Use provider switch/tab-complete on model, point GOOSE_DOCS_ROOT for offline/air-gapped setups, and adopt structured compaction summaries if you run long agents.
• OpenCode v1.18.5: Worth the bump if you hit Claude thinking-shape breaks, Mistral cache drift, or stale server terminal transport.
• Windsurf v3.6.27: Install if behind corporate TLS inspection (Windows cert store) or if you care about symlink-write redirection hardening on Local tools.
• Zed / Gemini nightlies: Treat v1.15.0-pre and Gemini nightlies/previews as exploratory; pin stable Gemini v0.54.0 if you only need the HTTPS + session-fallback fixes.

For teams

• Enterprise auth & residency: Antigravity 1.1.10 Business sign-in maps Gemini Enterprise seats, regions, and admin controls — evaluate before broad rollout. Claude Code self-hosted runners (Team/Enterprise) move session compute onto your machines/containers; define image hardening and network egress first.
• Plugin supply chain: Codex plugin manifests/marketplaces (incl. Bedrock & Claude Code) and Claude archive HTTPS installs change how skills land in developer environments. Require pinned hashes (Claude SHA-256) and an internal allowlist for plugin catalogs.
• Approval policy: Codex --approve-for-me plus the cyber-model auto-review backport (rust-v0.146.1) should be gated by role; default to reviewed/safer profiles on security-sensitive repos.
• MCP at work: Cline v4.1.7 pre-registered OAuth clients unblock remote MCP where dynamic registration is disabled — align with IdP app registrations.
• Session integrity: Cline SDK v0.0.72 abort/queue durability and desktop atomic restores reduce half-applied agent states in shared workspaces; standardize on checkpoint-backed review (“View Changes”) in PR norms.
• Endpoint hardening: Windsurf’s refuse-write-through-symlink and cert-store fix are concrete controls for managed Windows fleets and Devin Local.

What to ignore

• Gemini CLI caretaker/nightly churn (v0.56.0-nightly.*, stacked preview changelogs): interesting for Google’s internal triage agent direction, noisy for day-to-day coding assistant selection.
• Zed v1.15.0-pre: real editor quality-of-life, but prerelease — don’t set team baselines on it yet.
• xAI Grok monorepo sync commits without semver: useful breadcrumbs (worktree/skills/OOM), weak for fleet pin policies.
• Open proposals at P5 (older Codex 0.144/0.145, Cline 4.0.7, Goose 1.44.0, Zed 1.13.0-pre, etc.): backlog hygiene, not this brief’s action front.
• Marketing gloss generally — this window’s weight is in GitHub release notes and concrete flags (--approve-for-me, self-hosted runner, SHA-256 archive pins).

Watch next

• Codex Plugin ecosystem adoption vs Claude archive + self-hosted runner (who becomes the default skill distribution path).
• Whether Codex keeps tightening cyber-capable model approval defaults beyond rust-v0.146.1.
• Cline desktop checkpoint/rewind stability under multi-root and long-compaction sessions.
• Antigravity Enterprise admin-control surface area (what features org policy can actually lock).
• Goose air-gap docs + compaction templates in regulated networks.
• Windsurf/Devin Local symlink and cert fixes landing as pattern across other agent file tools.
• Resolution of open improve/review proposals once they move off P5.

How to use DevAgentRadar

• Read What the evidence shows first — versioned rows only; no invented releases.
• Developers: pick one assistant you already use, apply a single concrete action (flag, pin, or workflow) from that row this week.
• Teams: translate plugin, approval, MCP OAuth, and self-hosted signals into allowlists and policy before wide upgrade.
• Ignore prerelease/nightly and low-semver commit noise unless you are actively dogfooding.
• Re-check GitHub release tags cited here before fleet pins; prefer changelog evidence over secondary blogs.
• Use open proposals as a backlog signal, not as current recommendations, until priority moves.

Evidence appendix

• Evidence window: top curated signals (versioned releases preferred)
• Assistants tracked: 22
• Signals in this brief: 16
• Trusted source mix (GitHub/changelog vs HTML): 55%
• Open improvement proposals: 8
• Sources reporting errors: 0

High-signal releases used

• Claude Code v2.1.224: Added self-hosted environments: claude self-hosted-runner turns your own machines or containers into a place Claude Code web, mobile, and desktop sessions can — source

• OpenAI Codex CLI rust-v0.147.0: Install portable Agent Plugins and search across local, personal, workspace, and remote plugin catalogs. (#36544, #36409, #36919, #36796) · Organize conversatio — source

• OpenAI Codex CLI rust-v0.146.0: Name new sessions with /new or /clear, pin important threads, and switch between side conversations without closing them. (#34605, #34840, #35011) · Support — source

• Zed AI v1.15.0-pre: This week's release includes a new git.diff_base setting for choosing whether editor gutters, file-status colors, and git: diff show uncommitted changes aga — source

• Google Antigravity 1.1.10: Added Business sign-in for Gemini Enterprise accounts, so you can authenticate with a Google Cloud project under Google Cloud terms, use a license seat allocate — source

• Cline desktop-v0.0.8: Edit any earlier message in a conversation — the app forks the session at that point, rewinds the workspace to that run's checkpoint, and re-runs from your edit — source

• Cline v4.1.7: Restore the "View Changes" button on completion rows, backed by SDK checkpoints, so you can review everything a task touched from the completion card. · Bring b — source

• Cline sdk/sdk/v0.0.72 — SDK v0.0.72: Prompts queued during a turn now survive being interrupted: they are preserved across user-initiated aborts, drained after a turn aborts itself, and edits made — source

• OpenAI Codex CLI rust-v0.146.1: Apply safer automatic-review defaults for cyber-capable models and explain permission changes in the terminal interface. (#37057) · #37057 [0.146] Backport safe — source

• Goose v1.45.0: Stable agent event message identity #10716 · Tab completion and switch provider for model command [#10585](h — source

• Gemini CLI v0.56.0-nightly.20260808.gcf22ac7e8: Reclassifying Capacity Exhaustion as Terminal Error · feat(caretaker): update Firestore schema with error, and pr_number fields · feat(caretaker-triage): prompt — source

• OpenCode v1.18.5: Improve Claude adaptive thinking handling across more response shapes. · Avoid OpenAI Responses phase handling that could break some conversations. · Preserve g — source

• Gemini CLI v0.54.0-preview.0: Changelog for v0.53.0-preview.0 · Changelog for v0.52.0 · chore(release): bump version to 0.54.0-nightly.20260722.gf743ab579 · fix(caretaker): sanitize and wrap — source

• Gemini CLI v0.54.0: Changelog for v0.53.0-preview.0 · Changelog for v0.52.0 · chore(release): bump version to 0.54.0-nightly.20260722.gf743ab579 · fix(caretaker): sanitize and wrap — source

Open proposals

• Improve with OpenAI Codex CLI rust-v0.145.0: rust-v0.145.0 0.145.0 (audience: team, P5)

• Improve with Cline v4.0.7: v4.0.7 (audience: team, P5)

• Improve with xAI Grok CLI (Grok Build) 8adf901: Synced from monorepo (audience: team, P5)

• Improve with OpenCode pr-38252-videos: pr-38252-videos PR #38252 verification videos (audience: everyone, P5)

• Improve with OpenAI Codex CLI rust-v0.144.6: rust-v0.144.6 0.144.6 (audience: developer, P5)

• Review breaking changes in Zed AI v1.13.0-pre (audience: team, P5)

• Improve with OpenCode v1.18.5: v1.18.5 (audience: team, P5)

• Improve with Goose v1.44.0: v1.44.0 (audience: team, P5)