Radar brief — 2026-09-18

What the evidence shows

Versioned GitHub releases carry the model and MCP story. HTML changelogs (Windsurf, Kiro, Tabnine, Factory) are noisier, and the trusted-source mix is only 49% GitHub/changelog vs HTML. One source in this window reported errors. Several notes omit large tails (bodyOmitted); those omitted lines are not treated as facts here.

For developers

• Codex: On rust-v0.154.0+, pick GPT-6-Astra if it is in your catalog. Treat --worktree / /worktree as experimental isolated checkouts. On rust-v0.155.0, turn on /experimental only if you want /voice; expect Touch ID prompts on supported Macs for MCP. Do not assume the +131 / +147 omitted lines.
• OpenCode v1.18.29: If gpt-6-astra was missing on an OpenAI subscription, this OAuth filter fix is the reason to upgrade.
• Goose v1.50.0: Same Astra model add, plus tool calling on goose-agent. Snowflake now requires HTTPS; CLI session naming is path-bound — avoid untrusted cwd tricks.
• Claude Code v2.1.273: Set CLAUDE_CODE_GATEWAY_HINT_HEADERS=1 if you front an LLM gateway. Use /mcp when a server drops and reconnect gives up. Re-test Bash/rm flows under permissions.blockReadsOutsideWorkingDirectories; a hidden-rm bypass was fixed.
• Antigravity 1.2.1: For custom agents that should not inherit default tools/prompt sections, set excludeDefaultComponents: true in Markdown frontmatter (hooks still run). Prefer --continue after crashes/subdirs — it now resumes the latest non-empty workspace conversation.
• Zed v1.21.0-pre only: SuperGrok, DeepSeek Flash 4.1, and agent.prevent_idle_sleep are in a pre-release. Keep a machine awake during long agent turns only if you accept pre-release risk.
• Cline desktop: v0.0.26 needs gh signed in for the PR row (it will not push). Upgrade through v0.0.27 if sign-in errors were doubled or sign-out bounced you back in.
• Factory Droid: v0.215.0 streaming is a terminal setting; v0.217.0 MCP allowlist suggestions now write a real allowlist entry — confirm the entry before trusting a new server.
• Open P5/P4 developer proposals on the radar: enable Codex /voice only experimentally; enable Zed sleep/model flags if you are already on the pre; Grok CLI prompt/MCP cleanup proposals have no matching versioned evidence in this brief — do not apply them from marketing copy.

For teams

• Patch now: Windsurf v3.10.31 closes Restricted Mode bypass via nested workspace settings (CVE-2026-81376). Do not leave fleets on notes that only blocked dotted keys.
• Patch now: Tabnine v6.6.0 upgrades Next.js for CVE-2026-64642 (authorization bypass), stops team managers from granting Admin, and stops usage reports from exposing another user’s model usage. CLI + IDE Beta Agent stay off until an installation admin and a team lead enable Agent under Teams > Features.
• Claude Code: MDM / managed-settings.json keys allowManagedMcpServersOnly, deniedMcpServers, and disableClaudeAiConnectors were ignored when server-managed settings were also present — that is fixed in v2.1.273. Org-off Skills now go to recoverable trash instead of lingering. Gateway 403s should name the credential or the gateway admin, not a blind /login.
• Codex / Goose MCP: Codex coordinates OAuth refresh and will not auto-replay rejected tools; v0.155.0 adds Touch ID on local Mac TUI MCP. Goose preserves permission revocations, shows authoritative approval details, and prefers the latest MCP protocol version. Treat MCP reconnect + token expiry as an ops drill, not a user “retry.”
• Factory Droid: Org managers can strip Web Search (v0.215.0) and keep Allow All while blocking named models; v0.217.0 fixes policy checks that failed on older model names — audit the allow/deny list after upgrade.
• Kiro V3: Cloud Configuration Sync can load Steering, custom agents, Skills, Powers, and Hooks into new local CLI sessions without writing ~/.kiro. Decide explicitly whether local machines may inherit cloud config.
• Cline: PR/CI in the composer is read-only and GitHub.com-only; do not confuse it with an automated merge path.

What to ignore

• Omitted tails. Codex +131/+147, Claude Code +81, Zed +39, Cline +36/+11, and similar bodyOmitted counts are not a changelog. Do not infer features from them.
• Kiro 2.21.3 as a separate product event — the HTML patch page largely repeats 2.21.0/2.21.1.
• Windsurf’s multi-version blob. v3.10.31 is the CVE row; v3.10.27/v3.10.23 in the same page are older notes, not today’s unique ship.
• Zed v1.21.0-pre as a fleet default. It is tagged prerelease.
• OpenCode P2 “verification videos” proposal and any Grok CLI prompt/MCP proposals that are not backed by a versioned signal in this JSON.
• Pricing chatter. Only thin tags (Zed SuperGrok, Cline, OpenCode quota-reset thanks line) — not a pricing event.
• Treat the 1 error-reporting source and the 49% HTML mix as a confidence discount on Windsurf/Kiro/Tabnine/Factory wording.

Watch next

• Whether GPT-6-Astra shows up outside Codex, Goose, and OpenCode’s OAuth filter, and whether Bedrock catalogs stay in sync with the local picker (Codex rust-v0.154.0).
• Codex /voice graduating from /experimental, and whether Touch ID MCP becomes the pattern for local tool approval.
• Windsurf Restricted Mode bypass uptake (CVE-2026-81376) and Tabnine CVE-2026-64642 plus Admin-invite lock.
• Claude Code gateway headers (x-claude-code-request-class, compaction/context headers) becoming default for enterprise proxies.
• Goose HTTPS-only Snowflake and trusted-path session names — likely to break non-TLS or cwd-based automation.
• Zed pre → stable for SuperGrok / DeepSeek Flash 4.1 / prevent_idle_sleep.
• Tabnine IDE Beta Agent remaining gated per team vs becoming default with the CLI.
• Seven open proposals, especially the two P5s: Codex voice (developer) and Windsurf CVE install (team).

How to use DevAgentRadar

DevAgentRadar is a public, evidence-first feed of AI coding assistants. Read What the evidence shows as the only claim set — GitHub/version tags over blogs. Use For developers for local CLI/IDE actions and For teams for CVE, MDM, MCP allowlists, and org policy. Skip What to ignore instead of arguing with omitted bodies or HTML duplicates. Track Watch next and the linked proposals as checklists, not as shipped releases. If a vendor post is not in the evidence window, it is not in this brief.

Evidence appendix

• Evidence window: top curated signals (versioned releases preferred)
• Assistants tracked: 23
• Signals in this brief: 15
• Trusted source mix (GitHub/changelog vs HTML): 49%
• Open improvement proposals: 7
• Sources reporting errors: 1

High-signal releases used

• OpenAI Codex CLI rust-v0.155.0: Added experimental /voice conversations with live transcripts and microphone controls on supported builds, enabled through /experimental. (#43581, #43651, # — source

• Claude Code v2.1.273: Added x-claude-code-request-class, x-claude-code-agent-type, x-claude-code-prev-tool-durations, x-claude-code-compaction and `x-claude-code-context-comp — source

• Goose v1.50.0: Support GPT-6 Astra models #11869 · Tool calling for goose-agent [#11627](https://github.com/aaif-goose/goose/ — source

• OpenAI Codex CLI rust-v0.154.0: GPT-6-Astra is now available in the model picker and Amazon Bedrock catalogs. (#42879, #42619) · Experimental worktree support lets you create isolated checkout — source

• Zed AI v1.21.0-pre: This week's release includes faster rendering in syntax-highlighted files and Markdown code blocks, a language server command picker, and a setting that keeps y — source

• Cline desktop-v0.0.26: The composer now shows the current branch's GitHub pull request — PR number, merge status, changed-line totals, and CI checks. · Click through to open it in you — source

• Cline desktop-v0.0.27: An expired Cline sign-in now produces one actionable error instead of two dead ends. · A turn that fails before the runtime takes the prompt was reported twice — source

• Google Antigravity 1.2.1: Added support for excludeDefaultComponents: true in custom agent Markdown frontmatter, allowing custom agents to opt out of default prompt sections and built- — source

• Windsurf v3.10.31: v3.10.31 September 16, 2026 Devin Desktop Restricted Mode blocks restricted workspace settings written in nested object form, not just the dotted form (CVE-2026 — source

• OpenCode v1.18.29: Allow Codex OAuth model filtering to recognize integer GPT versions like gpt-6 · Fixes issue of gpt-6-astra not showing up for openai subscription users · **T — source

• Kiro v2.21.1: 2.21.1 Sep 3, 2026 Session Dashboard, Configuration Panel, and Cloud Sync Browse and manage local and cloud sessions, inspect configured resources, and apply cl — source

• Tabnine v6.6.0: v6.6.0 September 15, 2026 Features and Improvements Enterprise Agent: Tabnine CLI, powered by OpenCode : Now available to all customers. · One installer for mac — source

• Factory Droid v0.217.0 — · Desktop v0.174.0 (September 11, 2026): Browser shortcuts, smoother command animations, cleaner retries, and clearer organization controls · Smoother command animations - Long-running commands now — source

• Factory Droid v0.215.0 — · Desktop v0.172.0 (September 8, 2026): Streaming terminal responses, organization Web Search control, unified connector settings, and steadier sessions · Stream responses as they arrive - A new t — source

Open proposals

• Enable experimental /voice conversations in Codex CLI (audience: developer, P5)
• Install Windsurf v3.10.31 to close nested Restricted Mode bypass (CVE-2026-81376) (audience: team, P5)
• Enable prevent_idle_sleep, SuperGrok, and DeepSeek Flash 4.1 in Zed Agent Panel (audience: developer, P4)
• Enable Tabnine CLI and IDE Beta Agent under Teams > Features (audience: team, P4)
• Replace <output_efficiency> with <response_guidelines> in Grok CLI prompts (audience: developer, P4)
• Drop legacy managed MCP configs and shadowed platform skills in Grok CLI (audience: developer, P4)
• Improve with OpenCode pr-38252-videos: pr-38252-videos PR #38252 verification videos (audience: everyone, P2)