Radar brief — 2026-09-09
CLI agents are shipping provider-routing and permission-hardening in the same week: Goose v1.48.0 adds a wave of declarative OpenAI-compatible providers, Claude Code v2.1.260 closes sandbox/path-rule holes, and Cline’s CLI/SDK pair restores tools that empty model catalogs had si…
What the evidence shows
GitHub/changelog signals are the stronger half of this brief (49% trusted mix). Several HTML changelogs interleave older patches, and one Kiro patch is effectively empty. bodyOmitted counts mean the bullets below are the published highlights, not the full diffs. One tracked source reported errors.
on_failure plus a stable tool_call_id across the tool lifecycle. Tagged breaking; 98 further changes omitted./diff panel beside the conversation. /cost and the status line now explain likely prompt-cache misses. /reload-plugins and text /advisor work in headless/SDK/desktop. Permission fixes: parentheses in paths no longer drop Edit/Write/Read rules; a bad deny regex no longer blocks every edit; zsh assignments no longer auto-approve hidden command substitutions. Tagged breaking on permissions/sandbox/hooks. 66 further changes omitted.503 Unavailable much longer with backoff instead of aborting the session. Headless -p exits after the final answer (bound by --print-timeout), prints fatal errors on stderr with error:, and cuts idle latency. Background daemons such as dev servers are left running.tui.auto_recap = false disables automatic recaps. TUI reconnects after app-server drops. Plus/Team users get an earlier half-allowance warning in a ~5-hour window. Full Access skips Guardian reviews for confirmation-only actions. 95 further changes omitted.:, @, /, .. Per-tool output_token_limit truncates consistently on resume. App-server thread/shellCommand timeouts can exceed one hour. Automatic approval reviews keep instructions/authorizations across compaction. MCP tools stay available through cache/plugin refreshes. 94 further changes omitted.["text"] catalogs had disabled tool calling and vision. One shared translator now serves every producer; Langfuse detection is structural so minified builds actually trace.none reasoning effort; Bedrock replay is more reliable. apply_patch no longer emits an empty move path in permission metadata.api.streamIdleSoftTimeout / HardTimeout / api.timeout). Page also mixes older IDE permission notes. 8 further changes omitted.tools.enableWebFetchTool is on. Page also lists 6.5.3–6.5.1. 7 further changes omitted./archive or Ctrl+X archives the current session. Unselected sessions default to GPT-5.6 Sol. CLI starts even if org settings load slowly. Desktop companion noted as v0.166.0.For developers
- Upgrade Cline CLI v3.0.61 and SDK v0.0.82 together if you route through Dify, SAP AI Core, opencode, or Codex CLI. Empty capability lists were being treated as “no tools / no images.” Confirm tool calling and image file-reads come back after the shared translator.
- Goose v1.48.0: if you pin Z.ai, expect GLM-5.3 in place of GLM-5.2. Wire cost fields on custom providers if you care about spend. Use the new
on_failurePreToolUse block and the stabletool_call_idwhen you depend on hook correlation. Do not assume the omitted 98 changes are cosmetic — the release is tagged breaking. - Claude Code v2.1.260: turn on
/diffin fullscreen to watch uncommitted edits. Use/costwhenprompt_cachelooks wrong (tool defs, system prompt, or TTL idle). Re-test permission rules that contain()or broken character classes; those rules were previously dropped or could fail every edit. Re-check zsh setups that stuffed command substitutions intoREPORTTIME/REPORTMEMORY/DIRSTACKSIZE— they now prompt. - Codex rust-v0.152.0 then rust-v0.153.0: set
tui.auto_recap = falseif recaps are noise; use the plugin CLI for marketplace install/remove; put package-style characters in MCP server names if you need them; set per-tooloutput_token_limit. Vim users get draft search (/,?) plus undo/redo that keeps pastes. - OpenCode v1.18.26: if Claude 5 sessions died after prompt or tool edits, retry — stale thinking blocks are tolerated. Bedrock GPT-5.6 can send
nonereasoning effort. Recheckapply_patchpermission metadata for empty move paths. - Antigravity 1.1.28: for
-p/ CI, set--print-timeout, parse stderrerror:markers, and do not expect the CLI to kill long-lived daemons it started. - Factory Droid v0.209.0:
/archive(or Ctrl+X) from chat; new sessions with no model now land on GPT-5.6 Sol — pin explicitly if that is not what you want. - Zed v1.19.0-pre is a prerelease. Useful if long agent sessions were blowing memory or OpenRouter effort controls were missing; do not treat it as stable.
For teams
- Treat Claude Code v2.1.260 as a permissions/sandbox patch, not just UX. Path rules with parentheses, uncompilable deny regexes, and zsh auto-approval were security-relevant. Roll it, then re-audit allow/deny lists and sandbox assumptions.
- Codex Full Access now skips Guardian reviews for confirmation-only actions (v0.153.0). If Guardian is part of your control story, decide whether that skip is acceptable before enabling Full Access. Plus/Team seats also get earlier half-window usage warnings — useful for quota coaching, not a substitute for caps.
- Cline Hub upgrades are no longer silent. Operators should expect a prompt that names how many sessions a Hub replace would interrupt; a wedged Hub is left running rather than killed. Windows rollout should prefer the Authenticode-signed binaries and the new application-control error text.
- Goose cost tracking and Bedrock GPT-5.6 routing are team-facing: custom provider cost fields only help if billing metadata is filled in; Bedrock routing is a policy choice, not a default you can ignore if you already constrain providers.
- Windsurf v3.9.19 removes Cascade from Devin Desktop. Plan a Devin Local migration (Continue in Devin Local) and tell people the location picker is now Local / Worktree / Cloud.
- Factory Droid: org-level default is now GPT-5.6 Sol; v0.208.1’s 60% GPT/Grok discount is time-limited and selector-visible — treat it as a spend spike/dip, not a permanent price.
- Open team proposals already on the board: move Cline agent plugins into
~/.agents/pluginsand Hub-enable them; pin Cline models after the v3.0.61 Claude Fable 5.1 switch; archive Factory Droid chats and default new sessions to GPT-5.6 Sol.
What to ignore
- Kiro 2.20.2 — bump with no changes in evidence.
- Omitted tails (Goose +98, Claude Code +66, Codex +95/+94, Zed +50, and smaller HTML omissions). Do not infer features from those counts.
- Zed v1.19.0-pre as a production pin.
- HTML pages that stack older releases (Kiro v2.19.2 mixing 1.0.337 notes; Tabnine 6.5.4 bundling 6.5.3–6.5.1). Prefer the versioned GitHub tags above them.
- Marketing tone, internal scores, and any assistant not in this evidence window. 23 assistants are tracked; only these 15 signals made the brief.
Watch next
-
Remaining Goose v1.48.0 and Claude Code v2.1.260 diffs, both tagged breaking, especially MCP, hooks, permissions, and compaction.
-
Whether Cline’s capability-translator fix is enough, or teams still need the open pin-after-Claude-Fable-5.1 proposal.
-
Codex plugin-marketplace adoption vs Guardian skip on Full Access.
-
Windsurf Cascade removal fallout in Desktop vs Local/Worktree/Cloud.
-
Developer proposals: Grok CLI prompt tag rename (
<output_efficiency>→<response_guidelines>) and dropping legacy managed MCP configs / shadowed platform skills. -
OpenCode PR #38252 verification-videos proposal (everyone, lower priority).
-
The one source currently reporting errors — do not promote its claims until a clean changelog appears.
How to use DevAgentRadar
This brief is judgment from the curated evidence window, not a vendor roundup. Prefer the GitHub version tags when an HTML changelog disagrees or is thin. Use For developers as personal upgrade/test actions and For teams as policy, quota, and rollout actions. Ignore omitted bodies and prerelease/empty rows until they show up as complete, versioned signals. Re-check open proposals before you pin models or move plugin paths — those are change requests, not shipped facts.
Evidence appendix
- Evidence window: top curated signals (versioned releases preferred)
- Assistants tracked: 23
- Signals in this brief: 15
- Trusted source mix (GitHub/changelog vs HTML): 49%
- Open improvement proposals: 6
- Sources reporting errors: 1
High-signal releases used
-
Goose
v1.48.0: TrustedRouter declarative provider #11422 · OpenCode Zen gateway as a declarative provider [#10939](https://gi — source -
Claude Code
v2.1.260: Added a diff panel that opens beside the conversation in fullscreen mode and shows your uncommitted changes as Claude edits; toggle it with/diff· Added a li — source -
Zed AI
v1.19.0-pre: This week's release includes call hierarchy support, multi-select in the Git Panel, automatic language detection for untitled buffers, and project search on typ — source -
Google Antigravity
1.1.28: Improved resilience to transient model API errors: the agent now retries errors such as503 Unavailablefor much longer with exponential backoff, so a brief s — source -
OpenAI Codex CLI
rust-v0.153.0: Vim mode now supports undo withuand redo withCtrl+R, preserving complete drafts including pasted content and attachments. ([#41941](https://github.com/op — source -
OpenAI Codex CLI
rust-v0.152.0: Vim mode supports/and?searches within drafts, highlighted matches, and repeat navigation withnandN. (#41586) · Rate-limit banners offer actions f — source -
Cline
cli-v3.0.61: Cline now handles a running Hub that is older than your CLI. · Instead of quietly talking to a hub executing stale code, you get a prompt showing how many activ — source -
Cline
sdk/sdk/v0.0.82— SDK v0.0.82: Fixed tool calling being silently disabled for gateway models whose catalog entry declares no capabilities. · Three separate producers built gateway model defin — source -
OpenCode
v1.18.26: Claude 5 sessions now tolerate stale thinking blocks instead of failing after prompt or tool changes. · Bedrock GPT-5.6 models now acceptnonereasoning effor — source -
Kiro
v2.19.2: 2.19.2 Aug 25, 2026 · 2.19.1 Aug 21, 2026 Spec Review Mouse Support and Automatic Stream Recovery This release brings mouse support to the spec review screen. · — source -
Windsurf
v3.9.19: v3.9.19 September 8, 2026 Devin Desktop Cascade has been removed. · Devin Local is now the only agent available in Devin Desktop. · Use the Continue in Devin Lo — source -
Tabnine
v6.5.4: v6.5.4 August 30, 2026 Bug Fixes Tabnine CLI: Provenance & Attribution : Fixed attribution feedback being dropped after tool inputs were edited via VS Code diff — source -
Factory Droid
v0.209.0— · Desktop v0.166.0 (September 1, 2026): Session archiving from chat, a new default model, faster startup, and steadier app views · Archive sessions from chat - Archive the current session with /ar — source -
Factory Droid
v0.208.1— · Desktop v0.165.1 (August 29, 2026): 60% off GPT and Grok models · GPT and Grok discount - GPT and Grok models now bill at 60% off for a limited time, with the discount shown in the model selec — source
Open proposals
- Move Agent Plugins into ~/.agents/plugins and Hub-enable them in Settings → Customize (audience: team, P5)
- Pin Cline models after the v3.0.61 switch to Claude Fable 5.1 (audience: everyone, P4)
- Replace <output_efficiency> with <response_guidelines> in Grok CLI prompts (audience: developer, P4)
- Drop legacy managed MCP configs and shadowed platform skills in Grok CLI (audience: developer, P4)
- Archive Factory Droid chats with /archive and default new sessions to GPT-5.6 Sol (audience: team, P3)
- Improve with OpenCode pr-38252-videos: pr-38252-videos PR #38252 verification videos (audience: everyone, P2)
Anonymous · one vote per visitor · re-click to clear. Helps improve digests—not a product ranking.