Radar brief — 2026-09-17

What the evidence shows

Fifteen curated signals across 23 tracked assistants. GitHub-style releases are the load-bearing evidence; the trusted GitHub/changelog mix is only 49%, so HTML vendor pages (Windsurf, Kiro, Tabnine, Factory) are treated as noisier. One source in this window is flagged as error-reporting. Large bodyOmitted tails are not summarized.

GitHub / versioned releases (preferred)

HTML changelogs (noisier; versions bundled or restated)

For developers

• Codex CLI rust-v0.154.0: put GPT-6-Astra in the picker if you are already on Codex/Bedrock. Use --worktree / /worktree for forks so the agent does not dirty the main checkout — it is still experimental. From rust-v0.153.0, set tui.auto_recap = false if auto-recaps are noise; use the plugin CLI only for marketplaces you trust.
• Goose v1.50.0 / OpenCode v1.18.29: same Astra availability story — Goose adds the models; OpenCode only fixes the OAuth filter so gpt-6-astra appears for subscription users. Do not treat OpenCode as a model launch.
• Claude Code v2.1.273: if you front an LLM gateway, opt in with CLAUDE_CODE_GATEWAY_HINT_HEADERS=1 and record compaction / agent-type headers. When MCP dies mid-session, follow the new notice to /mcp instead of assuming auto-reconnect. Remote-control forks now continue as a local background session.
• Zed v1.21.0-pre: turn on SuperGrok and DeepSeek Flash 4.1 only if you accept a prerelease. Leave agent.prevent_idle_sleep on for long agent turns, or disable it if a laptop must sleep.
• Cline Desktop 0.0.26–0.0.27: install and sign in gh if you want the PR/CI row; Cline will not push or open the PR. Upgrade to 0.0.27 before debugging “signed in” auth loops — sign-out and expired tokens were lying.
• Antigravity 1.2.1: add excludeDefaultComponents: true on custom agents that must not inherit default tools. Prefer --continue after this build; older behavior started a new conversation from a subdirectory or crash.
• Kiro V3: /sessions (or kiro-cli chat --sessions) and /config are the new maps of local vs cloud agents/MCP/skills. Enable “Apply your cloud configuration to local sessions” only if you want cloud Steering/Skills/Hooks without writing them into local .kiro.

For teams

• Patch first: install Windsurf v3.10.31 so Restricted Mode cannot be bypassed with nested JSON settings (CVE-2026-81376). This is the P5 team proposal in queue.
• Claude Code org policy actually applies now. Re-roll allowManagedMcpServersOnly, deniedMcpServers, and disableClaudeAiConnectors via MDM / managed-settings.json — they were ignored when server-managed settings were also present. Turning Skills off now moves claude.ai-synced skills to recoverable trash instead of leaving them runnable. Treat the bash permission-checker and bypass-mode rm fixes as security, not polish.
• Goose v1.50.0 is breaking on purpose: Snowflake must be HTTPS; CLI session names bind to a trusted path; permission revocations persist across managers; subagent platform guards are enforced. Update runbooks before the client fleet.
• Codex rust-v0.154.0: startup no longer runs workspace-controlled helpers before trust; macOS sandbox blocks terminal input injection. MCP will surface login on failed OAuth refresh and will not auto-replay rejected tool calls — operators should expect paused work, not silent retries. Windows can share a background Codex server; decide who owns daemon lifecycle/updates. Do not turn on Full Access “skip Guardian for confirmation-only” without an explicit policy (ships in 0.153.0).
• Tabnine v6.6.0: CLI + IDE beta agent stay off until an installation admin enables Agent and a team lead flips Beta agent under Teams → Features. Ship the Next.js CVE-2026-64642 fix; stop expecting team managers to grant Admin via invite. Optional inference proxy is off by default.
• Factory Droid: org managers can strip Web Search (v0.215.0) and block individual models while leaving Allow All for new ones. v0.217.0 stops allowed models failing policy because of an old saved name — re-check allowlists after upgrade.
• Cline / Antigravity / Kiro are local-workflow wins; they are not substitutes for the CVE and MDM patches above.

What to ignore

• Omitted changelog tails (Claude +81, Codex +147 / +95, Zed +39, Cline +36 / +11, and others). Absence from this brief is not absence from the release.
• Zed v1.21.0-pre as production policy. Features are real in the tag; the channel is still prerelease.
• Kiro 2.21.3 as a second launch. It restates the 2.21.4 dashboard/sync story on an HTML patch page.
• Windsurf’s HTML blob as three independent must-do upgrades. Act on 3.10.31 / CVE-2026-81376; 3.10.27 and 3.10.23 are mixed into the same page.
• OpenCode v1.18.29 community doc/quota PRs and Factory/Kiro marketing copy. The OpenCode signal is a model-id filter fix.
• Proposals without a versioned signal in this JSON (Grok CLI prompt/MCP cleanups, OpenCode verification-video PR). They are queue items, not releases.

Watch next

• Whether Codex --worktree stays experimental once people fork Astra sessions.
• Whether Claude’s compaction/agent-type gateway headers get used by real LLM gateways, or stay an opt-in debug surface (CLAUDE_CODE_GATEWAY_HINT_HEADERS=1).
• GPT-6-Astra quality and Bedrock catalog parity vs picker-only availability (Codex, Goose, OpenCode).
• MCP auth patterns converging: Claude disconnect//mcp, Codex OAuth refresh without replay, Goose “prefer latest MCP,” Windsurf Docker MCP / ACP-always-on.
• The 8 open proposals, especially the two P5s: Windsurf 3.10.31 and Codex Astra+worktree. Tabnine agent enablement and Kiro cloud-config-to-local are P4.
• Trusted-source mix recovering above 49%. HTML changelogs that concatenate dates and versions will keep injecting noise.

How to use DevAgentRadar

DevAgentRadar is a public, evidence-ranked radar for AI coding assistants — GitHub releases first, vendor HTML second, marketing never. Read What the evidence shows as the fact table; use For developers and For teams as checklists, not as a recommendation to adopt every assistant. Follow an open proposal only when the audience and version match your fleet. If a row cites bodyOmitted, open the source URL before you ship — this brief does not invent the missing tail. Re-run the radar when a CVE, MDM setting, or model-picker change is in the table; that is the whole product.

Evidence appendix

• Evidence window: top curated signals (versioned releases preferred)
• Assistants tracked: 23
• Signals in this brief: 15
• Trusted source mix (GitHub/changelog vs HTML): 49%
• Open improvement proposals: 8
• Sources reporting errors: 1

High-signal releases used

• Claude Code v2.1.273: Added x-claude-code-request-class, x-claude-code-agent-type, x-claude-code-prev-tool-durations, x-claude-code-compaction and `x-claude-code-context-comp — source

• OpenAI Codex CLI rust-v0.154.0: GPT-6-Astra is now available in the model picker and Amazon Bedrock catalogs. (#42879, #42619) · Experimental worktree support lets you create isolated checkout — source

• Goose v1.50.0: Support GPT-6 Astra models #11869 · Tool calling for goose-agent [#11627](https://github.com/aaif-goose/goose/ — source

• Zed AI v1.21.0-pre: This week's release includes faster rendering in syntax-highlighted files and Markdown code blocks, a language server command picker, and a setting that keeps y — source

• Cline desktop-v0.0.26: The composer now shows the current branch's GitHub pull request — PR number, merge status, changed-line totals, and CI checks. · Click through to open it in you — source

• Cline desktop-v0.0.27: An expired Cline sign-in now produces one actionable error instead of two dead ends. · A turn that fails before the runtime takes the prompt was reported twice — source

• Google Antigravity 1.2.1: Added support for excludeDefaultComponents: true in custom agent Markdown frontmatter, allowing custom agents to opt out of default prompt sections and built- — source

• OpenAI Codex CLI rust-v0.153.0: Vim mode now supports undo with u and redo with Ctrl+R, preserving complete drafts including pasted content and attachments. ([#41941](https://github.com/op — source

• Windsurf v3.10.31: v3.10.31 September 16, 2026 Devin Desktop Restricted Mode blocks restricted workspace settings written in nested object form, not just the dotted form (CVE-2026 — source

• OpenCode v1.18.29: Allow Codex OAuth model filtering to recognize integer GPT versions like gpt-6 · Fixes issue of gpt-6-astra not showing up for openai subscription users · **T — source

• Kiro v2.21.4: 2.21.4 Sep 11, 2026 · 2.21.3 Sep 10, 2026 · 2.21.2 Sep 8, 2026 +1 more Session Dashboard, Configuration Panel, and Cloud Sync Browse and manage local and cloud — source

• Tabnine v6.6.0: v6.6.0 September 15, 2026 Features and Improvements Enterprise Agent: Tabnine CLI, powered by OpenCode : Now available to all customers. · One installer for mac — source

• Factory Droid v0.217.0 — · Desktop v0.174.0 (September 11, 2026): Browser shortcuts, smoother command animations, cleaner retries, and clearer organization controls · Smoother command animations - Long-running commands now — source

• Factory Droid v0.215.0 — · Desktop v0.172.0 (September 8, 2026): Streaming terminal responses, organization Web Search control, unified connector settings, and steadier sessions · Stream responses as they arrive - A new t — source

Open proposals

• Install Windsurf v3.10.31 to close nested Restricted Mode bypass (CVE-2026-81376) (audience: team, P5)
• Switch Codex CLI to GPT-6-Astra and isolated --worktree checkouts (audience: everyone, P5)
• Enable prevent_idle_sleep, SuperGrok, and DeepSeek Flash 4.1 in Zed Agent Panel (audience: developer, P4)
• Enable Tabnine CLI and IDE Beta Agent under Teams > Features (audience: team, P4)
• Enable Apply your cloud configuration to local sessions in Kiro V3 (audience: developer, P4)
• Replace <output_efficiency> with <response_guidelines> in Grok CLI prompts (audience: developer, P4)
• Drop legacy managed MCP configs and shadowed platform skills in Grok CLI (audience: developer, P4)
• Improve with OpenCode pr-38252-videos: pr-38252-videos PR #38252 verification videos (audience: everyone, P2)