Skip to content
DevAgentRadarDevAgentRadar
Sign in
Guidance/Daily Briefing
digesteveryonedigestevidenceradarmodelcli11 min read · Sep 16, 2026

Radar brief — 2026-09-16

GPT-6-Astra lands in Codex and Goose while Claude Code, Goose, and Tabnine spend the window on MCP, permissions, and org-policy leaks that were previously easy to ignore.

What the evidence shows

15 curated signals across 23 tracked assistants. GitHub/changelog share of the mix is 49%. Recurring themes: models, CLI, MCP, security, agents, and breaking surface changes.

Claude Codev2.1.273
Key Signal & Impact
Opt-in gateway hint headers (CLAUDE_CODE_GATEWAY_HINT_HEADERS=1) expose request class, agent type, prior tool durations, and compaction state. MCP disconnects now notify when auto-reconnect gives up (/mcp). Remote-control sessions can be forked as a local background session. Fixes close real holes: permission-checker skip of unanalyzable Bash, a bypass-mode rm hidden in a subshell, skills that stayed live after an org turned Skills off, and MDM/managed-settings.json keys (allowManagedMcpServersOnly, deniedMcpServers, disableClaudeAiConnectors) that were ignored when server-managed settings were also present. Auth errors on Bedrock/Vertex/Foundry now name the credential to refresh instead of a generic /login.
OpenAI Codex CLIrust-v0.154.0
Key Signal & Impact
GPT-6-Astra is in the model picker and Amazon Bedrock catalogs. Experimental --worktree / /worktree creates isolated checkouts for new or forked sessions. Inline answers let you reply without losing the main draft. Windows can share a background Codex server. MCP coordinates OAuth refresh and surfaces login challenges without replaying rejected tool calls. Startup delays workspace-controlled helpers until trust; macOS sandbox blocks terminal input injection. Remote resume/fork keep saved permissions; fresh sessions follow server model defaults unless overridden.
Goosev1.50.0
Key Signal & Impact
Adds GPT-6 Astra and tool calling for goose-agent. Security-shaped changes: HTTPS required for Snowflake, CLI session naming bound to a trusted path, tracing honors content-capture opt-out, subagent platform guards, permission revocations preserved across managers, authoritative tool-approval details, prefer latest MCP version.
Clinedesktop-v0.0.27
Key Signal & Impact
Expired Cline sign-in and pre-runtime turn failures now render once, with a fix button (Sign in / Open model settings / CLI). Rejected refresh tokens report signed-out instead of falling back to a dead access token. Sign-out of Cline and Cline Pass now sticks (runtime was re-importing classic-extension credentials).
Zed AIv1.19.0-pre
Key Signal & Impact
Prerelease. Editor work (call hierarchy, Git Panel multi-select, untitled-buffer language detection) plus agent-adjacent items: OpenRouter effort-based reasoning, lower memory use on long Agent sessions, better OpenAI-compatible streaming. Not a production pin.
Clinedesktop-v0.0.26
Key Signal & Impact
Composer shows the current branch’s GitHub PR (number, merge, changed lines, CI) if gh is signed in and origin is GitHub.com. Does not push or open the PR for you. Customize tabs unify Tools/Skills/Rules; Skills can be disabled in-place; sidebar “New Task” becomes “New Session”.
Google Antigravity1.2.1
Key Signal & Impact
Custom agents can set excludeDefaultComponents: true to drop default prompt sections and built-in tools while keeping post-invocation hooks. Transient 502/503/504/per-minute 429 and mid-stream cuts retry in-process with backoff, preserving completed tool outputs. MCP/provider schemas keep open objects instead of rejecting extra args. --continue no longer starts a new conversation from a subdirectory/crash. Remote companion UIs show the CLI session’s signed-in state.
OpenAI Codex CLIrust-v0.153.0
Key Signal & Impact
Vim undo/redo for full drafts; plugin CLI can list/install/remove from remote marketplaces; tui.auto_recap = false disables automatic recaps. TUI reconnects after app-server drops, pausing uncertain submissions. Plus/Team get an earlier usage warning. Full Access skips Guardian reviews for confirmation-only actions.
Windsurfv3.10.27
Key Signal & Impact
HTML changelog, mixed with v3.10.23. Desktop: drag files/selections into the composer again; SSH sessions reopen after reload; Devin Fusion can activate without Claude Fable 5.1 as lead. Earlier notes: SSH remote agent hosts, ACP always on (toggle removed), MCP auth/Docker registry fixes, and removal of several legacy Cascade entry points. Treat as noisier than GitHub tags.
OpenCodev1.18.26
Key Signal & Impact
Claude 5 sessions tolerate stale thinking blocks after prompt/tool changes. Bedrock GPT-5.6 accepts none reasoning effort; Bedrock replay is more reliable. apply_patch no longer emits an empty move path in permission metadata. Azure CLI sign-in asks for the resource name instead of querying management APIs.
Kirov2.21.4
Key Signal & Impact
HTML. V3 session dashboard (/sessions or kiro-cli chat --sessions), /config panel for agents/MCP/Powers/Steering/Skills/Hooks (tagged local vs cloud), and optional apply-cloud-config-to-local-sessions without writing those files into local .kiro.
Tabninev6.6.0
Key Signal & Impact
HTML docs. Enterprise Agent (Tabnine CLI, powered by OpenCode) for all customers; same agent as IDE beta in VS Code/JetBrains, off until install admin + team lead enable it. Agent usage analytics by MCP server/tool. Optional inference proxy outside Google Cloud. Security: CVE-2026-64642 (high, Next.js authorization bypass) patched; team managers can no longer grant Admin via invite/update; usage reports no longer expose another user’s model usage.
Factory Droidv0.217.0
Key Signal & Impact
HTML. MCP allowlist autocomplete now writes a permit entry for the selected server; model policy matching no longer fails on earlier saved names; oversized-request retries and interrupted-reply cleanup. Desktop v0.174.0 is noted on the same page.
Factory Droidv0.215.0
Key Signal & Impact
HTML. Org managers can remove the Web Search tool; model access exceptions can block individual models under Allow All; unified connector settings; streaming terminal replies; BYOK retries can show provider status codes.
Kiro2.21.3
Key Signal & Impact
Overlapping HTML patch of the same V3 dashboard/config/cloud-sync story as v2.21.4. Do not treat as a second independent feature drop.

For developers

  • Pin Claude Code to v2.1.273 if you use MCP, Skills, Bedrock/Vertex/Foundry, or a gateway. After upgrade: if a server dies mid-session, wait for the reconnect-gave-up notice and run /mcp rather than retrying blindly. If you terminate on a gateway, opt in with CLAUDE_CODE_GATEWAY_HINT_HEADERS=1 and log the new x-claude-code-* headers. A P5 upgrade proposal is open for this tag; do not assume omitted changelog lines.
  • Codex CLI rust-v0.154.0: select GPT-6-Astra (including Bedrock catalogs) on a throwaway repo first. Try experimental --worktree / /worktree for forks so the agent cannot smash your dirty tree. Windows: use the shared background server instead of one daemon per session. rust-v0.153.0 is the prior step if you need plugin marketplace CLI, Vim u/Ctrl+R, or tui.auto_recap = false.
  • Goose v1.50.0: switch the picker to GPT-6 Astra only after you confirm Snowflake URLs are HTTPS and session names cannot be pointed at an untrusted path.
  • Antigravity 1.2.1: for custom agents that must not inherit default tools/prompts, set excludeDefaultComponents: true in Markdown frontmatter. Prefer --continue now that subdirectory/crash paths resume the latest non-empty workspace conversation.
  • OpenCode v1.18.26: if Claude 5 sessions were dying after a prompt or tool edit, this is the thinking-block fix. Bedrock GPT-5.6 users can set reasoning effort none. Recheck apply_patch permission prompts for empty move paths.
  • Cline desktop: install through v0.0.27 so sign-out and expired tokens are truthful. Use v0.0.26’s PR row only if gh is installed/signed in and origin is GitHub.com; Cline will not push or submit the PR.
  • Kiro V3: run /sessions and /config before adding more MCP/Skills. A developer P4 proposal exists to enable “Apply your cloud configuration to local sessions”; do that only if you want cloud Steering/agents/Skills/Powers/Hooks in new local CLIs without writing them into .kiro.
  • Zed v1.19.0-pre: preview only (memory on long Agent sessions, OpenRouter effort). Do not standardize a prerelease.

For teams

  • Re-test Claude org policy on v2.1.273. allowManagedMcpServersOnly, deniedMcpServers, and disableClaudeAiConnectors from MDM or managed-settings.json were ignored when server-managed settings were present; that is fixed. Turning Skills off now moves claude.ai-synced skills to recoverable trash instead of leaving them callable. Treat this as a control-plane regression test, not a changelog skim.
  • Goose v1.50.0: verify permission revocations survive manager restarts, subagent platform guards are on, and tracing respects content-capture opt-out before you widen goose-agent tool calling.
  • Codex: review Full Access skipping Guardian for confirmation-only actions (v0.153.0) as an explicit risk acceptance. Keep MCP OAuth refresh (v0.154.0) — it will not auto-replay rejected tools. Confirm macOS sandbox input-injection blocking on developer laptops.
  • Tabnine v6.6.0: patch for CVE-2026-64642 (Next.js authorization bypass). Do not enable CLI/IDE Beta Agent until an installation admin turns the org Agent on and a team lead enables Teams > Features. A P4 team proposal tracks that gate. Confirm team managers can no longer grant Admin via invite, and that usage reports no longer leak another user’s model usage. Optional GCP-outside inference proxy stays off until you ask the account manager.
  • Factory: use org Web Search removal and per-model exceptions (v0.215.0) plus MCP allowlist autocomplete (v0.217.0) as the actual control surface; both notes are HTML docs, so verify in product.
  • Windsurf: a P5 team proposal is open to connect remote agents over SSH from the location selector. Budget change management for ACP always enabled and removed legacy Cascade entry points. Prefer a live client check over the mixed v3.10.27/v3.10.23 HTML page.
  • Antigravity: custom agents that opt out of default tools still keep post-invocation hooks — decide whether that is the isolation you think it is before rolling Markdown agents.

What to ignore

  • Omitted changelog tails (Claude +81, Codex +147/+95, Zed +50, Cline +36/+11, and smaller tails). Absence in this packet is not evidence those bullets are unimportant; it is also not a license to guess them.
  • Zed v1.19.0-pre as a fleet default.
  • Windsurf HTML stitching 3.10.27 and 3.10.23, and Kiro 2.21.3 repeating the 2.21.4 V3 dashboard story.
  • Factory and Tabnine doc pages as if they were GitHub tags. Useful, but lower confidence.
  • Grok CLI prompt/MCP proposals in the open-proposal list — there is no Grok versioned signal in this evidence window. Do not execute them from this brief.
  • OpenCode P2 “verification videos” proposal — process noise relative to the v1.18.26 runtime fixes.
  • Vendor model-name fog: GPT-6-Astra (Codex/Goose) is not Bedrock GPT-5.6 (OpenCode) and not Claude Fable 5.1 (Windsurf). Do not collapse them in rollout notes.

Watch next

  • Whether Codex --worktree stays experimental and whether GPT-6-Astra quality on Bedrock matches the picker listing.
  • Whether Claude’s gateway hint headers become default (today they are opt-in) and whether compaction-related headers correspond to the open “full-window auto-compact” upgrade proposal.
  • Tabnine Agent enablement rate vs. the CVE/admin-gate notes.
  • Windsurf after Cascade entry-point removal and always-on ACP.
  • Goose tool calling for goose-agent under the new subagent/permission guards.
  • Eight open improvement proposals (three P5: Claude 2.1.273 upgrade, Windsurf SSH remote agents, Codex Astra+worktree). The two Grok CLI items need a versioned release before they belong on a radar of this type.
  • The single error-reporting source this window — if it clears, HTML-heavy assistants may move up in confidence.

How to use DevAgentRadar

Use this brief as a filter, not a vendor digest. Prefer the GitHub-tagged rows above HTML changelogs. Act on version + concrete control (MCP allowlists, MDM keys, worktrees, sign-out, CVE) rather than model-picker marketing.

Developers: upgrade the CLI/IDE you already run, then execute one isolation change (worktree, --continue, /mcp, Skills disable). Teams: re-verify org policy on the new tags, then decide which P5 proposals become tickets.

Do not fill omitted bodies from memory. If a proposal cites a behavior that is not in the evidence table, treat the proposal as a hypothesis until the release note is in the packet. Re-read the next brief the same way: 23 assistants tracked, evidence-only, no invented releases.

Evidence appendix

  • Evidence window: top curated signals (versioned releases preferred)
  • Assistants tracked: 23
  • Signals in this brief: 15
  • Trusted source mix (GitHub/changelog vs HTML): 49%
  • Open improvement proposals: 8
  • Sources reporting errors: 1

High-signal releases used

  • Claude Code v2.1.273: Added x-claude-code-request-class, x-claude-code-agent-type, x-claude-code-prev-tool-durations, x-claude-code-compaction and `x-claude-code-context-comp — source

  • OpenAI Codex CLI rust-v0.154.0: GPT-6-Astra is now available in the model picker and Amazon Bedrock catalogs. (#42879, #42619) · Experimental worktree support lets you create isolated checkout — source

  • Goose v1.50.0: Support GPT-6 Astra models #11869 · Tool calling for goose-agent [#11627](https://github.com/aaif-goose/goose/ — source

  • Cline desktop-v0.0.27: An expired Cline sign-in now produces one actionable error instead of two dead ends. · A turn that fails before the runtime takes the prompt was reported twice — source

  • Zed AI v1.19.0-pre: This week's release includes call hierarchy support, multi-select in the Git Panel, automatic language detection for untitled buffers, and project search on typ — source

  • Cline desktop-v0.0.26: The composer now shows the current branch's GitHub pull request — PR number, merge status, changed-line totals, and CI checks. · Click through to open it in you — source

  • Google Antigravity 1.2.1: Added support for excludeDefaultComponents: true in custom agent Markdown frontmatter, allowing custom agents to opt out of default prompt sections and built- — source

  • OpenAI Codex CLI rust-v0.153.0: Vim mode now supports undo with u and redo with Ctrl+R, preserving complete drafts including pasted content and attachments. ([#41941](https://github.com/op — source

  • Windsurf v3.10.27: v3.10.27 September 15, 2026 Devin Desktop Dragging files from the Explorer onto the agent panel, or sending an editor selection to chat, adds them to the compos — source

  • OpenCode v1.18.26: Claude 5 sessions now tolerate stale thinking blocks instead of failing after prompt or tool changes. · Bedrock GPT-5.6 models now accept none reasoning effor — source

  • Kiro v2.21.4: 2.21.4 Sep 11, 2026 · 2.21.3 Sep 10, 2026 · 2.21.2 Sep 8, 2026 +1 more Session Dashboard, Configuration Panel, and Cloud Sync Browse and manage local and cloud — source

  • Tabnine v6.6.0: v6.6.0 September 15, 2026 Features and Improvements Enterprise Agent: Tabnine CLI, powered by OpenCode : Now available to all customers. · One installer for mac — source

  • Factory Droid v0.217.0 — · Desktop v0.174.0 (September 11, 2026): Browser shortcuts, smoother command animations, cleaner retries, and clearer organization controls · Smoother command animations - Long-running commands now — source

  • Factory Droid v0.215.0 — · Desktop v0.172.0 (September 8, 2026): Streaming terminal responses, organization Web Search control, unified connector settings, and steadier sessions · Stream responses as they arrive - A new t — source

Open proposals

Was this guidance useful?

Anonymous · one vote per visitor · re-click to clear. Helps improve digests—not a product ranking.