Radar brief — 2026-08-31

What the evidence shows

GitHub/versioned releases (preferred):

HTML / docs changelogs (treat as lower confidence; mixed older patches in the same blob):

Window stats: 15 signals / 23 assistants, 49% GitHub-vs-HTML mix, 8 open proposals, 1 source reporting errors. Large bodyOmitted counts on Goose and both Codex tags mean this brief is not a full changelog.

For developers

• Codex CLI: If you live in the TUI, rust-v0.148.0 → rust-v0.149.0 is the operator upgrade: /export, fork/archive, /cd, codex queue, codex agents, cost in /status, Bedrock as a first-class provider. Confirm resume/fork still has the permission profile you expect (0.149.0 now restores it).
• Claude Code v2.1.248: Practice --restricted on untrusted trees before you need it. Do not assume project settings or bypassPermissions still apply in that mode. Use /doctor if server-managed settings fail (Bedrock/Vertex/custom ANTHROPIC_BASE_URL).
• Goose v1.48.0: Inventory which declarative providers you actually want (TrustedRouter, OpenCode Zen, Gondola, SayGM, Lynkr, PleumRouter). If you were on Z.ai GLM-5.2, you are on GLM-5.3. Wire custom provider cost fields if you care about spend. Re-test PreToolUse hooks for on_failure and stable tool_call_id.
• Antigravity 1.1.21: /voice and status-line cost are the visible wins. Re-check always-proceed — MCP tools and page reads now auto-approve. Script allow-always is narrower (npm run dev ≠ every npm script); recapture permissions if you relied on the old broad grant.
• Cline SDK v0.0.76: Skills now go through the skills tool — expect /my-skill in transcripts, not pasted SKILL.md. Re-verify PreToolUse/PostToolUse if you depended on fire-and-forget hook behavior. Image generation and scheduled tasks are workspace-scoped.
• Zed AI v1.16.1: Gemini 3.6 Flash is in the Google AI list; Git Panel / Mermaid / terminal-auto-open are editor UX, not agent-runtime changes.
• Kiro: Try /spec run for V3 full-screen execution if that workflow is yours; do not treat the mixed 2.19 notes on the same page as 2.20.1 features without checking the page yourself.
• Windsurf: If Agent Command Center feels glued to one folder, v3.8.20 follows the selected space; devin.agentWindow.location splits it. Trust the workspace prompt before local agents run.

For teams

• Default to restricted / restored permission profiles. Claude Code’s --restricted is the clearest “no shell, no WebFetch, no bypass, ignore local settings” switch in this window. Codex 0.149.0 closing the “resume silently drops the permission profile” gap is the matching team risk: old sessions should not inherit today’s looser defaults.
• Review auto-approve + MCP. Antigravity always-proceed now includes MCP and page reads. Goose is tagged MCP/permissions/breaking with 98 omitted items — pin the version, then diff hooks and providers in staging. Factory v0.200.0 keeping MCP auth across reconnects reduces re-prompt fatigue but also means a stolen session stays authorized.
• Make spend visible. Codex /status credits, Antigravity status-line cost, Goose custom provider cost fields, Claude /usage-credits (Enterprise / AWS Marketplace). Factory’s 60% GPT/Grok cut is a limited promo — do not bake it into budgets. OpenCode removed stale Go discount messaging; ignore leftover internal copy.
• Cloud handoff is beta. Cline desktop-v0.0.15-beta.1 /handoff requires a pushed commit and keeps working after the laptop closes. Treat as an experiment: define which repos may leave the machine, and that preflight is mandatory.
• Untrusted workspaces. Windsurf now warns and prompts to trust before local agents. Pair with Claude --restricted for contractor / OSS trees.
• Provider routing is converging on Bedrock. Goose and Codex both advertise GPT-5.6 via Bedrock; OpenCode and Claude diagnose Bedrock/Vertex paths. Standardize AWS profile/region and who is allowed to add “declarative” OpenAI-compatible gateways (Goose’s new provider list is a supply-chain surface).
• Do not roll Tabnine or Kiro from this blob alone. Tabnine v6.5.4’s notes include three prior patches; Kiro’s page mixes 2.20.1 with 2.19.x. Use the GitHub-tagged CLIs above for this cycle.

What to ignore

• The second Kiro 2.20.1 signal (empty title, no body) — duplicate noise.
• Factory Droid v0.208.1 60% GPT/Grok off — marketing, not a capability change.
• OpenCode deleting outdated first-month discount text — cleanup, not a model event.
• Anything behind bodyOmitted (Goose 98, Codex 154+151, Claude 43, Zed 36, etc.). Do not infer extra features.
• HTML pages that concatenate multiple weeks (Kiro, Tabnine, Windsurf).
• Cline Cloud /handoff as production-ready — tagged prerelease.
• One source in this window reported errors; with a 49% HTML mix, prefer GitHub tags when the two disagree.

Watch next

• Whether --restricted / restored permission profiles become the default for CI and untrusted repos, or stay opt-in.
• Bedrock + GPT-5.6 routing spreading beyond Goose and Codex, and whether “declarative OpenAI-compatible provider” remains a wild-west plugin list.
• Cline cloud handoff graduating from desktop-v0.0.15-beta.1, vs. Codex queue/fork/agents covering the same “leave a session running” job locally.
• Hook semantics converging: Goose on_failure / stable tool_call_id, Cline awaiting PostToolUse, Codex async hooks + MCP.
• Open proposals already filed from this radar: register Goose TrustedRouter + OpenCode Zen (team); Kiro /spec run full-screen; Windsurf devin.agentWindow.location; Cline Desktop Windows rules path; Grok CLI prompt/MCP cleanup; Zed DeepSeek reasoning (proposal cites a version not in this evidence — do not treat it as shipped).

How to use DevAgentRadar

DevAgentRadar is a public, evidence-first radar for AI coding assistants: versioned GitHub releases over blogs, actions over slogans. Use For developers as this week’s personal upgrade checklist and For teams as policy (permissions, MCP auto-approve, spend, cloud handoff). Ignore omitted bodies, prereleases, and promo pricing until they show up as versioned product behavior. Track the eight open proposals if you want the next concrete change, not another launch post.

Evidence appendix

• Evidence window: top curated signals (versioned releases preferred)
• Assistants tracked: 23
• Signals in this brief: 15
• Trusted source mix (GitHub/changelog vs HTML): 49%
• Open improvement proposals: 8
• Sources reporting errors: 1

High-signal releases used

• Goose v1.48.0: TrustedRouter declarative provider #11422 · OpenCode Zen gateway as a declarative provider [#10939](https://gi — source

• OpenAI Codex CLI rust-v0.148.0: Export complete TUI conversations to Markdown with /export, either to the clipboard or a new file. (#37358) · Fork sessions with codex exec fork, and archiv — source

• Claude Code v2.1.248: Added --restricted (or CLAUDE_CODE_RESTRICTED=1): removes the built-in tools that run commands or code and WebFetch (unless named in --tools), keeps fil — source

• OpenAI Codex CLI rust-v0.149.0: Added an interactive codex agents dashboard for searching, starting, opening, renaming, and stopping tasks, with configurable shortcuts. (#39094, #39112, #391 — source

• Zed AI v1.16.1: This week's release includes Gemini 3.6 Flash support, collapsible grouped changes and optional stash messages in the Git Panel, zooming and horizontal scrollin — source

• Google Antigravity 1.1.21: Added /voice dictation, which transcribes speech straight into the prompt; press f5 or run /voice to start and stop it, and use the mic-serve subcommand — source

• Cline sdk/sdk/v0.0.76 — SDK v0.0.76: Added model-driven image generation. · Models that support it can generate images during a turn, and generated images are persisted in session history and expor — source

• Cline desktop-v0.0.15-beta.1 — beta.1: Beta: hand off a local session to Cline Cloud with /handoff — the conversation, attached images, and an optional follow-up command move to a cloud workspace t — source

• OpenCode v1.18.22: Removed outdated OpenCode Go first-month discount messaging and pricing. · Fixed OpenCode device login links when servers return relative verification URLs or u — source

• Kiro v2.20.1: 2.20.1 Aug 27, 2026 Full-Screen Spec Task Execution and Preserve Scrollback This release gives V3 spec runs a full-screen task execution view with real-time pro — source

• Windsurf v3.8.20: v3.8.20 August 21, 2026 Devin Desktop The Agent Command Center now follows whichever space is selected instead of being tied to one folder, converts an editor w — source

• Tabnine v6.5.4: v6.5.4 August 30, 2026 Bug Fixes Tabnine CLI: Provenance & Attribution : Fixed attribution feedback being dropped after tool inputs were edited via VS Code diff — source

• Factory Droid v0.200.0 — · Desktop v0.157.0 (August 20, 2026): Background processes report real process IDs, MCP connections stay authenticated across reconnects, and the model list is searchable in the app · **Failed pull — source

• Factory Droid v0.208.1 — · Desktop v0.165.1 (August 29, 2026): 60% off GPT and Grok models · GPT and Grok discount - GPT and Grok models now bill at 60% off for a limited time, with the discount shown in the model selec — source

Open proposals

• Install Cline Desktop v0.0.20 on Windows and move global rules to ~/Cline/Rules (audience: everyone, P5)
• Register TrustedRouter and OpenCode Zen as Goose declarative providers (audience: team, P5)
• Run V3 specs with /spec run in Kiro’s full-screen task view (audience: developer, P4)
• Enable low reasoning effort for DeepSeek V4 Flash and V4 Pro (audience: developer, P4)
• Replace <output_efficiency> with <response_guidelines> in Grok CLI prompts (audience: developer, P4)
• Drop legacy managed MCP configs and shadowed platform skills in Grok CLI (audience: developer, P4)
• Set devin.agentWindow.location to split Agent Command Center into its own window (audience: developer, P3)
• Improve with OpenCode pr-38252-videos: pr-38252-videos PR #38252 verification videos (audience: everyone, P2)