Radar brief — 2026-09-19

What the evidence shows

GitHub tags are the stronger half of this window (versioned CLIs, concrete behavior). HTML product changelogs are noisier, sometimes bundle several dates, and should not be treated as equivalent. One source in the window reported errors; omitted changelog tails (bodyOmitted) are not inferred below.

GitHub / versioned releases

HTML / docs changelogs (treat as lower confidence)

Open proposals in this window (6): Windsurf CVE install (team, P5); Zed Agent Panel settings (developer, P4); Tabnine CLI/IDE beta enablement (team, P4); two Grok CLI prompt/MCP cleanup items with no matching versioned signal here; an OpenCode verification-video item (P2, everyone).

For developers

• Upgrade Claude Code to v2.1.277 if you hit hung -p/SDK sessions, empty-block resume failures, or mystery logouts from an older IDE-bundled CLI. If the repo already has AGENTS.md and no CLAUDE.md, expect that file to become instructions — confirm in /config. Do not assume this on Bedrock, Vertex, or Foundry.
• Codex: take rust-v0.154.0 then rust-v0.155.0 as a pair. Use GPT-6-Astra from the picker/Bedrock catalog only after 0.154. Treat /worktree and /voice as experimental. On a Mac TUI, expect Touch ID on MCP. If Bedrock auth was brittle, 0.155 can source AWS creds from a configured command.
• Goose v1.50.0 is the other GitHub-backed Astra + tool-calling cut. Snowflake callers must be HTTPS; don’t fight session-name path binding — it is a trust control.
• OpenCode v1.18.29 if gpt-6-astra is missing on an OpenAI subscription: that was an OAuth filter bug, not a model-catalog rumor.
• Cline desktop: 0.0.27 over 0.0.26. Keep 0.0.26’s PR row only if gh is installed, signed in, and origin is GitHub.com; it will not push or open the PR. 0.0.27 is the auth-truthfulness fix.
• Antigravity 1.2.1: set excludeDefaultComponents: true only when you want a custom agent without default tools/prompt; --continue from a subdirectory should resume the workspace conversation instead of forking a blank one.
• Zed v1.21.0-pre only: agent.prevent_idle_sleep is default-on; SuperGrok and DeepSeek Flash 4.1 are in this pre cut, not a stable tag. Don’t roll a whole team onto -pre from this brief.
• Factory: turn on streamed terminal responses in v0.215.0 if you want progressive thinking; v0.217.0 is the MCP allowlist/retry cleanup. These are docs changelog rows, not GitHub tags.

For teams

• Patch Windsurf to v3.10.31 before debating features. Nested-object Restricted Mode settings were not blocked (CVE-2026-81376). This is the only P5 proposal in the window. Don’t stop at 3.10.23/3.10.27 just because the HTML page lists them together.
• Tabnine v6.6.0 is an admin-gated agent launch plus a CVE. Installation admins decide whether the CLI/IDE beta agent exists at all; team leads still have to enable Beta agent. Pair that with the Next.js auth-bypass fix (CVE-2026-64642), the “managers cannot grant Admin” change, and usage-report isolation. Do not assume the IDE beta is on.
• Treat MCP as a permission surface, not a plugin store. Codex 0.154–0.155: OAuth expiry is explicit, rejected tools are not blindly replayed, Mac TUI can require Touch ID. Goose: latest MCP version preferred, approval details made authoritative, revocations persist. Factory 0.217: allowlist autocomplete must actually allowlist. Antigravity: open object schemas stop false-rejecting extra args — review custom tools so “more permissive schema” is intentional.
• Enterprise network path: Claude Code’s egress-boundary flag and upstream headers: map are for forward-proxy gateways, not a reason to disable TLS inspection review. Goose now requires HTTPS to Snowflake.
• Org policy levers that actually changed: Factory can strip Web Search and block named models while leaving Allow All for new ones; policy checks in 0.217 match renamed models. Kiro can apply cloud Steering/agents/Skills/Powers/Hooks to new local V3 sessions without writing .kiro — decide whether that is a feature or a shadow-config channel.
• Cline desktop 0.0.27 is the “sign-out sticks / expired token is signed out” cut. If you run the desktop app beside the classic extension, 0.0.26-era secret re-import is the failure mode they claim to close.

What to ignore

• Any “+N more changes” tail (bodyOmitted up to 147 lines). Those are not extra features you can plan around.

• Kiro 2.21.3 as a separate event. Same dashboard/config/sync story as 2.21.4 on HTML.

• Windsurf’s multi-version blog blob as one release. ACP-always-on, Devin Fusion, and SSH host UI are older notes in the same page, not 3.10.31’s CVE.

• Zed Guild marketing and Factory animation/payment/onboarding polish.

• Grok CLI proposals in this window (<output_efficiency> rename; drop legacy managed MCP configs). They are open tickets, not versioned evidence here.

• OpenCode PR #38252 verification videos (P2). Unrelated to the gpt-6 filter fix in v1.18.29.

• Treating Zed v1.21.0-pre, Cline desktop-v0.0.x, or Factory docs dates as equivalent to Claude/Codex/Goose GitHub tags.

Watch next

• Claude Code AGENTS.md on Bedrock, Vertex, and Foundry — explicitly not in v2.1.277.
• Codex /voice and worktrees leaving experimental; whether Touch ID MCP stays Mac-TUI-only.
• Whether GPT-6 Astra remains a three-client GitHub fact (Codex, Goose, OpenCode) or shows up in a stable Zed tag.
• Tabnine: who actually enables the IDE beta vs CLI-only; any follow-on to CVE-2026-64642.
• Windsurf: confirmation that nested Restricted Mode is closed in real workspaces, not just the changelog sentence.
• Zed 1.21.0 without -pre, if prevent_idle_sleep / SuperGrok / DeepSeek Flash 4.1 survive.
• The two Grok CLI proposals, if a versioned GitHub signal appears.

How to use DevAgentRadar

DevAgentRadar is a public, evidence-first feed of AI coding assistants: 23 assistants tracked, this brief uses 15 curated signals in the current window, 49% GitHub/changelog vs HTML, 6 open improvement proposals, 1 source reporting errors. Prefer a versioned GitHub tag over a marketing page. If a row says changes were omitted, stop there. Use For developers for local upgrades and flags; use For teams for CVE/admin/MCP policy. Open proposals are suggested actions with audience and priority — not shipped releases. Ignore anything not in the evidence, including rumored models and untagged “we heard.”

Evidence appendix

• Evidence window: top curated signals (versioned releases preferred)
• Assistants tracked: 23
• Signals in this brief: 15
• Trusted source mix (GitHub/changelog vs HTML): 49%
• Open improvement proposals: 6
• Sources reporting errors: 1

High-signal releases used

• Claude Code v2.1.277: Added AGENTS.md support: in a project with no CLAUDE.md, Claude Code reads AGENTS.md instead; change it under "Project instructions" in /config (not yet on Be — source

• OpenAI Codex CLI rust-v0.155.0: Added experimental /voice conversations with live transcripts and microphone controls on supported builds, enabled through /experimental. (#43581, #43651, # — source

• Goose v1.50.0: Support GPT-6 Astra models #11869 · Tool calling for goose-agent [#11627](https://github.com/aaif-goose/goose/ — source

• OpenAI Codex CLI rust-v0.154.0: GPT-6-Astra is now available in the model picker and Amazon Bedrock catalogs. (#42879, #42619) · Experimental worktree support lets you create isolated checkout — source

• Zed AI v1.21.0-pre: This week's release includes faster rendering in syntax-highlighted files and Markdown code blocks, a language server command picker, and a setting that keeps y — source

• Cline desktop-v0.0.26: The composer now shows the current branch's GitHub pull request — PR number, merge status, changed-line totals, and CI checks. · Click through to open it in you — source

• Cline desktop-v0.0.27: An expired Cline sign-in now produces one actionable error instead of two dead ends. · A turn that fails before the runtime takes the prompt was reported twice — source

• Google Antigravity 1.2.1: Added support for excludeDefaultComponents: true in custom agent Markdown frontmatter, allowing custom agents to opt out of default prompt sections and built- — source

• Windsurf v3.10.31: v3.10.31 September 16, 2026 Devin Desktop Restricted Mode blocks restricted workspace settings written in nested object form, not just the dotted form (CVE-2026 — source

• OpenCode v1.18.29: Allow Codex OAuth model filtering to recognize integer GPT versions like gpt-6 · Fixes issue of gpt-6-astra not showing up for openai subscription users · **T — source

• Kiro v2.21.4: 2.21.4 Sep 11, 2026 · 2.21.3 Sep 10, 2026 · 2.21.2 Sep 8, 2026 +1 more Session Dashboard, Configuration Panel, and Cloud Sync Browse and manage local and cloud — source

• Tabnine v6.6.0: v6.6.0 September 15, 2026 Features and Improvements Enterprise Agent: Tabnine CLI, powered by OpenCode : Now available to all customers. · One installer for mac — source

• Factory Droid v0.217.0 — · Desktop v0.174.0 (September 11, 2026): Browser shortcuts, smoother command animations, cleaner retries, and clearer organization controls · Smoother command animations - Long-running commands now — source

• Factory Droid v0.215.0 — · Desktop v0.172.0 (September 8, 2026): Streaming terminal responses, organization Web Search control, unified connector settings, and steadier sessions · Stream responses as they arrive - A new t — source

Open proposals

• Install Windsurf v3.10.31 to close nested Restricted Mode bypass (CVE-2026-81376) (audience: team, P5)
• Enable prevent_idle_sleep, SuperGrok, and DeepSeek Flash 4.1 in Zed Agent Panel (audience: developer, P4)
• Enable Tabnine CLI and IDE Beta Agent under Teams > Features (audience: team, P4)
• Replace <output_efficiency> with <response_guidelines> in Grok CLI prompts (audience: developer, P4)
• Drop legacy managed MCP configs and shadowed platform skills in Grok CLI (audience: developer, P4)
• Improve with OpenCode pr-38252-videos: pr-38252-videos PR #38252 verification videos (audience: everyone, P2)