Radar brief — 2026-08-29

What the evidence shows

This brief covers 14 signals across 23 tracked assistants. The trusted-source mix is 49% GitHub/changelog vs HTML. Eight open improvement proposals sit behind the evidence. One source is reporting errors. Themes cluster on cli, model, agent, then mcp, security, ide, breaking, and pricing.

Prefer the GitHub tags below. Several high-weight notes omit large tails (bodyOmitted of 98, 154, 151, 43, 36) — do not treat those rows as complete changelogs. HTML/docs rows (Kiro, Windsurf, Factory Droid) are noisier.

GitHub-tagged releases (preferred)

HTML / docs changelogs (noisier)

For developers

• Codex: If you are on the Rust CLI, take rust-v0.148.0 then rust-v0.149.0 as a pair. Practice /export, codex exec fork, /cd//pwd//cwd, and codex queue. Use /status for thread cost where the workspace is eligible. If you fork or resume, verify the restored permission profile — 0.149 stops silently falling back to whatever is default now. Turn on codex doctor after proxy/EDR pain. SDK users can pass exact CLI config overrides and select max or ultra reasoning.
• Goose v1.48.0: Inventory new declarative providers before adding them (TrustedRouter, OpenCode Zen, Gondola, SayGM, Lynkr, PleumRouter). If you were on Z.ai GLM-5.2, expect GLM-5.3. Wire PreToolUse on_failure and the stable tool_call_id if you debug hook/tool traces. Use custom provider cost fields if you already juggle multi-provider spend. Do not assume you have read the full release — 98 items are omitted.
• Claude Code v2.1.248: Try --restricted (or CLAUDE_CODE_RESTRICTED=1) on untrusted trees. Allow only the tools you need via --tools. Set experimental.cacheTtl in agent frontmatter when subagent TTL is unset. Use /doctor//status when server-managed settings fail to load (Bedrock/Vertex/third-party/ANTHROPIC_BASE_URL). If /web-setup warns about missing GitHub workflow scope, fix the token before pushing a huge repo.
• Antigravity 1.1.21: /voice / f5 for dictation; mic-serve only if you actually want a remote CLI to hear a local mic. Put the new cost field on a custom status line. Re-read always-proceed: it now auto-approves MCP tools and page reads. When allowing npm run dev-style commands, confirm the pin is the script name, not every script.
• Cline: Windows users can install desktop-v0.0.20 (signed x64, auto-update). After upgrade, look for schedules in ~/.cline/schedules, not chat folders. SDK v0.0.76: skills arrive through the skills tool (transcripts will look different); do not rely on fire-and-forget PostToolUse — hooks are awaited and can cancel. Image-capable models can persist generated images in the session.
• Zed AI v1.16.1: Gemini 3.6 Flash is in the Google AI list. Turn off automatic Terminal Panel open if new workspaces feel noisy. Collapse grouped Git changes when the panel is dense.
• Kiro v2.20.1: Run V3 specs with /spec run if you want the full-screen task view and scope picker. Enable Preserve scrollback if resize/overflow was wiping history. Treat mixed 2.19.1 stream-recovery notes in the same HTML page as possible prior patches, not proven 2.20.1 content.
• Windsurf v3.8.20: Set devin.agentWindow.location if you want Agent Command Center in its own window. Trust the workspace explicitly when the sidebar warns, or local agents stay off. On Windows, install Devin CLI from Desktop so devin tracks the app.
• Factory Droid v0.200.0: Use model-list search; expect a confirm when a Git pull fails instead of a silent tree fix; keep the real background PID if you need to kill a job. Ignore v0.208.1 except as a limited GPT/Grok price tag.

For teams

• Default to restricted / trusted-workspace paths in shared and CI contexts. Claude’s --restricted is the clearest lockdown switch in this window: no shell/code/WebFetch unless named, no bypassPermissions, settings files ignored. Windsurf now warns on untrusted workspaces before local agents run — make “trust this folder” an explicit onboarding step, not a click-through.
• Re-audit MCP and permission modes this week, not next quarter. Antigravity’s always-proceed expanding to MCP + page reads is a blast-radius change. Codex 0.148 lets hooks call MCP asynchronously; 0.149 restores the permission profile on resume/fork. Goose adds more declarative/OpenAI-compatible providers plus PreToolUse failure handling. If your policy assumed “resume = current org default” or “always-proceed = shell only,” that assumption is stale.
• Bedrock / GPT-5.6 routing is showing up in more than one CLI. Goose v1.48.0 and Codex rust-v0.148.0 both document AWS Bedrock + GPT-5.6 routing. Align provider allowlists, logging, and cost attribution (Goose custom cost fields; Codex /status credits) before developers point production repos at a new route.
• Cline Desktop on Windows is now a real fleet target (signed installer, auto-update, USERPROFILE MCP path). Move global rules/schedules with the product: agent schedules consolidate under ~/.cline/schedules. SDK 0.0.76 changes skill expansion and hook delivery — teams with PreToolUse/PostToolUse automation should regression-test before rolling the SDK.
• Enterprise spend and runner identity: Claude /usage-credits (AWS Marketplace / self-serve Enterprise / trials) and self-hosted runner --client-label; Windsurf Enterprise ACU request link. Use labels and credit requests as process, not as a substitute for permission policy.
• Git safety: Factory Droid now confirms before fixing a failed pull by changing the working tree. That is the right default for shared repos; do not disable it to “keep agents fast.”
• Open team-facing proposals already filed from this evidence: register TrustedRouter / OpenCode Zen on Goose; install Cline Desktop v0.0.20 and move global rules; split Windsurf’s Agent Command Center with devin.agentWindow.location.

What to ignore

• The second Kiro 2.20.1 signal (changelog fragment with no body). Same version, no extra facts.
• Factory Droid v0.208.1 “60% off GPT and Grok” and OpenCode v1.18.22 deleting old Go-discount marketing. Pricing copy is not capability evidence.
• Omitted tails. Goose (+98), Codex 0.148 (+154) and 0.149 (+151), Claude (+43), Zed (+36) are truncated. Do not invent the missing bullets, and do not assume “tagged breaking” has a fully listed break.
• Kiro HTML structure. The v2.20.1 page inlines 2.19.x “Improvements / Fixes / Patches” narrative. Stream-recovery and mouse-in-review may be real, but they are not cleanly version-scoped in this evidence.
• Open proposals that are not in the JSON releases: DeepSeek V4 reasoning on a Zed v1.17.2 that is not in this window; Grok CLI prompt/MCP cleanup; Tabnine 6.5.3 org repos. Those are backlog pointers, not shipped facts.
• One source is reporting errors. Until it is identified in a later window, do not overweight a single HTML changelog.

Watch next

• Whether GPT-5.6 on Bedrock stays a Goose/Codex routing note or shows up in more assistants’ versioned tags.
• Hook × MCP × permissions: Goose on_failure / stable tool_call_id, Codex async hooks + MCP, Cline awaited PostToolUse, Antigravity always-proceed MCP auto-approve. This is the likely next break for sandboxes.
• Restricted-mode adoption vs. developer escape hatches (--tools, allow-always script pins, restored permission profiles on fork).
• Multi-session ops becoming CLI-native: Codex agents dashboard + queue, Claude SendMessage/ListAgents, Cline schedules, Kiro full-screen /spec run.
• Remaining 8 open proposals, especially ones that still lack a GitHub tag in this brief (Zed DeepSeek effort, Grok CLI MCP/skills, Tabnine org repos).
• The error-reporting source (1) — confirm whether it is an HTML changelog scrape or a real product incident.

How to use DevAgentRadar

DevAgentRadar ranks versioned evidence (GitHub releases first) so you can decide what to install, what to policy, and what to ignore — without vendor landing pages. Read What the evidence shows as the fact table; use For developers as a personal upgrade checklist and For teams as a permissions/MCP/spend review. Treat HTML/docs rows and promotional version notes as leads, not as proof. When bodyOmitted is set, stop at the listed facts. Track the linked open proposals for concrete follow-ups, and come back on the next window for anything this brief explicitly refused to invent.

Evidence appendix

• Evidence window: top curated signals (versioned releases preferred)
• Assistants tracked: 23
• Signals in this brief: 14
• Trusted source mix (GitHub/changelog vs HTML): 49%
• Open improvement proposals: 8
• Sources reporting errors: 1

High-signal releases used

• Goose v1.48.0: TrustedRouter declarative provider #11422 · OpenCode Zen gateway as a declarative provider [#10939](https://gi — source

• OpenAI Codex CLI rust-v0.148.0: Export complete TUI conversations to Markdown with /export, either to the clipboard or a new file. (#37358) · Fork sessions with codex exec fork, and archiv — source

• Claude Code v2.1.248: Added --restricted (or CLAUDE_CODE_RESTRICTED=1): removes the built-in tools that run commands or code and WebFetch (unless named in --tools), keeps fil — source

• OpenAI Codex CLI rust-v0.149.0: Added an interactive codex agents dashboard for searching, starting, opening, renaming, and stopping tasks, with configurable shortcuts. (#39094, #39112, #391 — source

• Zed AI v1.16.1: This week's release includes Gemini 3.6 Flash support, collapsible grouped changes and optional stash messages in the Git Panel, zooming and horizontal scrollin — source

• Google Antigravity 1.1.21: Added /voice dictation, which transcribes speech straight into the prompt; press f5 or run /voice to start and stop it, and use the mic-serve subcommand — source

• Cline desktop-v0.0.20: Cline Desktop now ships on Windows: releases include a code-signed x64 installer, and installed apps auto-update on the same feed macOS does · Windows shell fix — source

• Cline sdk/sdk/v0.0.76 — SDK v0.0.76: Added model-driven image generation. · Models that support it can generate images during a turn, and generated images are persisted in session history and expor — source

• OpenCode v1.18.22: Removed outdated OpenCode Go first-month discount messaging and pricing. · Fixed OpenCode device login links when servers return relative verification URLs or u — source

• Kiro v2.20.1: 2.20.1 Aug 27, 2026 Full-Screen Spec Task Execution and Preserve Scrollback This release gives V3 spec runs a full-screen task execution view with real-time pro — source

• Windsurf v3.8.20: v3.8.20 August 21, 2026 Devin Desktop The Agent Command Center now follows whichever space is selected instead of being tied to one folder, converts an editor w — source

• Factory Droid v0.200.0 — · Desktop v0.157.0 (August 20, 2026): Background processes report real process IDs, MCP connections stay authenticated across reconnects, and the model list is searchable in the app · **Failed pull — source

• Factory Droid v0.208.1 — · Desktop v0.165.1 (August 29, 2026): 60% off GPT and Grok models · GPT and Grok discount - GPT and Grok models now bill at 60% off for a limited time, with the discount shown in the model selec — source

• Kiro 2.20.1 — Aug 27, 2026: 2.20.1 Aug 27, 2026 — source

Open proposals

• Install Cline Desktop v0.0.20 on Windows and move global rules to ~/Cline/Rules (audience: everyone, P5)
• Register TrustedRouter and OpenCode Zen as Goose declarative providers (audience: team, P5)
• Run V3 specs with /spec run in Kiro’s full-screen task view (audience: developer, P4)
• Enable low reasoning effort for DeepSeek V4 Flash and V4 Pro (audience: developer, P4)
• Replace <output_efficiency> with <response_guidelines> in Grok CLI prompts (audience: developer, P4)
• Drop legacy managed MCP configs and shadowed platform skills in Grok CLI (audience: developer, P4)
• Upgrade Tabnine to 6.5.3 and add organization-level repositories (audience: team, P3)
• Set devin.agentWindow.location to split Agent Command Center into its own window (audience: developer, P3)