Skip to content
Guidance/Daily Briefing
digesteveryonedigestevidenceradarclimodel10 min read · Sep 9, 2026

Radar brief — 2026-09-09

CLI agents are shipping provider-routing and permission-hardening in the same week: Goose v1.48.0 adds a wave of declarative OpenAI-compatible providers, Claude Code v2.1.260 closes sandbox/path-rule holes, and Cline’s CLI/SDK pair restores tools that empty model catalogs had si…

What the evidence shows

GitHub/changelog signals are the stronger half of this brief (49% trusted mix). Several HTML changelogs interleave older patches, and one Kiro patch is effectively empty. bodyOmitted counts mean the bullets below are the published highlights, not the full diffs. One tracked source reported errors.

Goosev1.48.0
Key Signal & Impact
Declarative providers land for TrustedRouter, OpenCode Zen, Gondola, SayGM, Lynkr, and PleumRouter. GLM-5.2 is replaced with GLM-5.3. Custom provider cost fields feed cost tracking. GPT-5.6 (sol/terra/luna) can route via AWS Bedrock, with Codex/Responses follow-up. Hooks gain on_failure plus a stable tool_call_id across the tool lifecycle. Tagged breaking; 98 further changes omitted.
Claude Codev2.1.260
Key Signal & Impact
Fullscreen /diff panel beside the conversation. /cost and the status line now explain likely prompt-cache misses. /reload-plugins and text /advisor work in headless/SDK/desktop. Permission fixes: parentheses in paths no longer drop Edit/Write/Read rules; a bad deny regex no longer blocks every edit; zsh assignments no longer auto-approve hidden command substitutions. Tagged breaking on permissions/sandbox/hooks. 66 further changes omitted.
Zed AIv1.19.0-pre
Key Signal & Impact
Prerelease: call hierarchy, Git Panel multi-select, untitled-buffer language detection, OpenRouter effort-based reasoning, better OpenAI-compatible streaming, and lower memory use on long agent sessions. 50 further changes omitted.
Google Antigravity1.1.28
Key Signal & Impact
Agent retries 503 Unavailable much longer with backoff instead of aborting the session. Headless -p exits after the final answer (bound by --print-timeout), prints fatal errors on stderr with error:, and cuts idle latency. Background daemons such as dev servers are left running.
OpenAI Codex CLIrust-v0.153.0
Key Signal & Impact
Vim undo/redo keeps pasted drafts. Plugin CLI can list/install/remove marketplace plugins. tui.auto_recap = false disables automatic recaps. TUI reconnects after app-server drops. Plus/Team users get an earlier half-allowance warning in a ~5-hour window. Full Access skips Guardian reviews for confirmation-only actions. 95 further changes omitted.
OpenAI Codex CLIrust-v0.152.0
Key Signal & Impact
MCP names may include :, @, /, .. Per-tool output_token_limit truncates consistently on resume. App-server thread/shellCommand timeouts can exceed one hour. Automatic approval reviews keep instructions/authorizations across compaction. MCP tools stay available through cache/plugin refreshes. 94 further changes omitted.
Clinecli-v3.0.61
Key Signal & Impact
Stale Hub is no longer used silently: prompt, drain in-flight turns, or leave a wedged Hub alone. Windows binaries are Authenticode-signed. Unreachable remote MCP no longer kills the CLI (10s connect budget). Empty capability catalogs no longer strip tools/images for Dify, SAP AI Core, opencode, and Codex CLI. Langfuse tracing works in released builds.
Clinesdk/sdk/v0.0.82
Key Signal & Impact
Same capability-translator bug: empty/["text"] catalogs had disabled tool calling and vision. One shared translator now serves every producer; Langfuse detection is structural so minified builds actually trace.
OpenCodev1.18.26
Key Signal & Impact
Claude 5 sessions tolerate stale thinking blocks after prompt/tool changes. Bedrock GPT-5.6 accepts none reasoning effort; Bedrock replay is more reliable. apply_patch no longer emits an empty move path in permission metadata.
Kirov2.19.2
Key Signal & Impact
HTML changelog: spec-review mouse support; stream idle watchdog, retries, and a 60-minute streaming timeout (api.streamIdleSoftTimeout / HardTimeout / api.timeout). Page also mixes older IDE permission notes. 8 further changes omitted.
Windsurfv3.9.19
Key Signal & Impact
HTML changelog: Devin Desktop Cascade is removed; Devin Local is the only agent. Migrate with Continue in Devin Local. Location picker is Local / Worktree / Cloud. MCP registry fetches behind corporate proxies are fixed. 5 further changes omitted.
Tabninev6.5.4
Key Signal & Impact
Docs changelog: CLI attribution feedback no longer drops after VS Code diff/external edits. Direct web fetch is default when tools.enableWebFetchTool is on. Page also lists 6.5.3–6.5.1. 7 further changes omitted.
Factory Droidv0.209.0
Key Signal & Impact
/archive or Ctrl+X archives the current session. Unselected sessions default to GPT-5.6 Sol. CLI starts even if org settings load slowly. Desktop companion noted as v0.166.0.
Factory Droidv0.208.1
Key Signal & Impact
Limited-time 60% off GPT and Grok, shown in the model selector.
Kiro2.20.2
Key Signal & Impact
Changelog stub dated Aug 31, 2026 with no listed changes. Treat as noisy.

For developers

  • Upgrade Cline CLI v3.0.61 and SDK v0.0.82 together if you route through Dify, SAP AI Core, opencode, or Codex CLI. Empty capability lists were being treated as “no tools / no images.” Confirm tool calling and image file-reads come back after the shared translator.
  • Goose v1.48.0: if you pin Z.ai, expect GLM-5.3 in place of GLM-5.2. Wire cost fields on custom providers if you care about spend. Use the new on_failure PreToolUse block and the stable tool_call_id when you depend on hook correlation. Do not assume the omitted 98 changes are cosmetic — the release is tagged breaking.
  • Claude Code v2.1.260: turn on /diff in fullscreen to watch uncommitted edits. Use /cost when prompt_cache looks wrong (tool defs, system prompt, or TTL idle). Re-test permission rules that contain () or broken character classes; those rules were previously dropped or could fail every edit. Re-check zsh setups that stuffed command substitutions into REPORTTIME / REPORTMEMORY / DIRSTACKSIZE — they now prompt.
  • Codex rust-v0.152.0 then rust-v0.153.0: set tui.auto_recap = false if recaps are noise; use the plugin CLI for marketplace install/remove; put package-style characters in MCP server names if you need them; set per-tool output_token_limit. Vim users get draft search (/, ?) plus undo/redo that keeps pastes.
  • OpenCode v1.18.26: if Claude 5 sessions died after prompt or tool edits, retry — stale thinking blocks are tolerated. Bedrock GPT-5.6 can send none reasoning effort. Recheck apply_patch permission metadata for empty move paths.
  • Antigravity 1.1.28: for -p / CI, set --print-timeout, parse stderr error: markers, and do not expect the CLI to kill long-lived daemons it started.
  • Factory Droid v0.209.0: /archive (or Ctrl+X) from chat; new sessions with no model now land on GPT-5.6 Sol — pin explicitly if that is not what you want.
  • Zed v1.19.0-pre is a prerelease. Useful if long agent sessions were blowing memory or OpenRouter effort controls were missing; do not treat it as stable.

For teams

  • Treat Claude Code v2.1.260 as a permissions/sandbox patch, not just UX. Path rules with parentheses, uncompilable deny regexes, and zsh auto-approval were security-relevant. Roll it, then re-audit allow/deny lists and sandbox assumptions.
  • Codex Full Access now skips Guardian reviews for confirmation-only actions (v0.153.0). If Guardian is part of your control story, decide whether that skip is acceptable before enabling Full Access. Plus/Team seats also get earlier half-window usage warnings — useful for quota coaching, not a substitute for caps.
  • Cline Hub upgrades are no longer silent. Operators should expect a prompt that names how many sessions a Hub replace would interrupt; a wedged Hub is left running rather than killed. Windows rollout should prefer the Authenticode-signed binaries and the new application-control error text.
  • Goose cost tracking and Bedrock GPT-5.6 routing are team-facing: custom provider cost fields only help if billing metadata is filled in; Bedrock routing is a policy choice, not a default you can ignore if you already constrain providers.
  • Windsurf v3.9.19 removes Cascade from Devin Desktop. Plan a Devin Local migration (Continue in Devin Local) and tell people the location picker is now Local / Worktree / Cloud.
  • Factory Droid: org-level default is now GPT-5.6 Sol; v0.208.1’s 60% GPT/Grok discount is time-limited and selector-visible — treat it as a spend spike/dip, not a permanent price.
  • Open team proposals already on the board: move Cline agent plugins into ~/.agents/plugins and Hub-enable them; pin Cline models after the v3.0.61 Claude Fable 5.1 switch; archive Factory Droid chats and default new sessions to GPT-5.6 Sol.

What to ignore

  • Kiro 2.20.2 — bump with no changes in evidence.
  • Omitted tails (Goose +98, Claude Code +66, Codex +95/+94, Zed +50, and smaller HTML omissions). Do not infer features from those counts.
  • Zed v1.19.0-pre as a production pin.
  • HTML pages that stack older releases (Kiro v2.19.2 mixing 1.0.337 notes; Tabnine 6.5.4 bundling 6.5.3–6.5.1). Prefer the versioned GitHub tags above them.
  • Marketing tone, internal scores, and any assistant not in this evidence window. 23 assistants are tracked; only these 15 signals made the brief.

Watch next

  • Remaining Goose v1.48.0 and Claude Code v2.1.260 diffs, both tagged breaking, especially MCP, hooks, permissions, and compaction.

  • Whether Cline’s capability-translator fix is enough, or teams still need the open pin-after-Claude-Fable-5.1 proposal.

  • Codex plugin-marketplace adoption vs Guardian skip on Full Access.

  • Windsurf Cascade removal fallout in Desktop vs Local/Worktree/Cloud.

  • Developer proposals: Grok CLI prompt tag rename (<output_efficiency><response_guidelines>) and dropping legacy managed MCP configs / shadowed platform skills.

  • OpenCode PR #38252 verification-videos proposal (everyone, lower priority).

  • The one source currently reporting errors — do not promote its claims until a clean changelog appears.

How to use DevAgentRadar

This brief is judgment from the curated evidence window, not a vendor roundup. Prefer the GitHub version tags when an HTML changelog disagrees or is thin. Use For developers as personal upgrade/test actions and For teams as policy, quota, and rollout actions. Ignore omitted bodies and prerelease/empty rows until they show up as complete, versioned signals. Re-check open proposals before you pin models or move plugin paths — those are change requests, not shipped facts.


Evidence appendix

  • Evidence window: top curated signals (versioned releases preferred)
  • Assistants tracked: 23
  • Signals in this brief: 15
  • Trusted source mix (GitHub/changelog vs HTML): 49%
  • Open improvement proposals: 6
  • Sources reporting errors: 1

High-signal releases used

  • Goose v1.48.0: TrustedRouter declarative provider #11422 · OpenCode Zen gateway as a declarative provider [#10939](https://gisource

  • Claude Code v2.1.260: Added a diff panel that opens beside the conversation in fullscreen mode and shows your uncommitted changes as Claude edits; toggle it with /diff · Added a li — source

  • Zed AI v1.19.0-pre: This week's release includes call hierarchy support, multi-select in the Git Panel, automatic language detection for untitled buffers, and project search on typ — source

  • Google Antigravity 1.1.28: Improved resilience to transient model API errors: the agent now retries errors such as 503 Unavailable for much longer with exponential backoff, so a brief s — source

  • OpenAI Codex CLI rust-v0.153.0: Vim mode now supports undo with u and redo with Ctrl+R, preserving complete drafts including pasted content and attachments. ([#41941](https://github.com/opsource

  • OpenAI Codex CLI rust-v0.152.0: Vim mode supports / and ? searches within drafts, highlighted matches, and repeat navigation with n and N. (#41586) · Rate-limit banners offer actions f — source

  • Cline cli-v3.0.61: Cline now handles a running Hub that is older than your CLI. · Instead of quietly talking to a hub executing stale code, you get a prompt showing how many activ — source

  • Cline sdk/sdk/v0.0.82 — SDK v0.0.82: Fixed tool calling being silently disabled for gateway models whose catalog entry declares no capabilities. · Three separate producers built gateway model defin — source

  • OpenCode v1.18.26: Claude 5 sessions now tolerate stale thinking blocks instead of failing after prompt or tool changes. · Bedrock GPT-5.6 models now accept none reasoning effor — source

  • Kiro v2.19.2: 2.19.2 Aug 25, 2026 · 2.19.1 Aug 21, 2026 Spec Review Mouse Support and Automatic Stream Recovery This release brings mouse support to the spec review screen. · — source

  • Windsurf v3.9.19: v3.9.19 September 8, 2026 Devin Desktop Cascade has been removed. · Devin Local is now the only agent available in Devin Desktop. · Use the Continue in Devin Lo — source

  • Tabnine v6.5.4: v6.5.4 August 30, 2026 Bug Fixes Tabnine CLI: Provenance & Attribution : Fixed attribution feedback being dropped after tool inputs were edited via VS Code diff — source

  • Factory Droid v0.209.0 — · Desktop v0.166.0 (September 1, 2026): Session archiving from chat, a new default model, faster startup, and steadier app views · Archive sessions from chat - Archive the current session with /ar — source

  • Factory Droid v0.208.1 — · Desktop v0.165.1 (August 29, 2026): 60% off GPT and Grok models · GPT and Grok discount - GPT and Grok models now bill at 60% off for a limited time, with the discount shown in the model selec — source

Open proposals

Was this guidance useful?

Anonymous · one vote per visitor · re-click to clear. Helps improve digests—not a product ranking.