Radar brief — 2026-09-21

What the evidence shows

Fifteen curated signals across 23 tracked assistants. GitHub/changelog-style sources are only 49% of the mix, so HTML vendor pages (Windsurf, Kiro, Tabnine, Factory) are treated as noisier than tagged GitHub releases. Several GitHub notes omit large tails (bodyOmitted); those omitted lines are not inferred here. One source in the window reported errors.

GitHub-tagged releases (preferred)

HTML changelogs (use with more caution)

Dominant themes in the tagged set: model, cli, mcp, breaking, agent, security, ide.

For developers

• Upgrade Claude Code to v2.1.277 if you use -p, resume, mixed IDE-bundled CLIs, or API keys. Add AGENTS.md only when you intend it as the instruction file in repos without CLAUDE.md; cloud Anthropic hosts listed above still will not pick it up.
• If your Claude apps gateway only egresses through a forward proxy, set CLAUDE_GATEWAY_PROXY_IS_EGRESS_BOUNDARY=1 and, if needed, static headers: on upstreams so the proxy sees the hostname instead of a local DNS lookup.
• Codex: take rust-v0.154.0 for GPT-6-Astra, experimental worktrees, and the pre-trust/sandbox fixes; take rust-v0.155.0 for /voice, Touch ID MCP prompts, and Bedrock command-sourced creds. Treat /voice and worktrees as experimental.
• Goose v1.50.0: switch to GPT-6 Astra where you want it; expect HTTPS-only Snowflake and stricter session-path / subagent / permission behavior.
• OpenCode v1.18.30: GPT-6 stacks should pick up the Astra system prompt; Bedrock DeepSeek users should confirm ARN IDs still resolve.
• Antigravity 1.2.1: use excludeDefaultComponents: true when a custom agent must drop default tools/prompt sections; retest --continue from subdirectories.
• Cline desktop: v0.0.26 PR chip needs gh installed and signed in; v0.0.27 is the auth/sign-out fix. Cline will not submit the PR for you.
• Zed v1.21.0-pre is a prerelease. If you install it, expect agent.prevent_idle_sleep on by default (machines will not idle-sleep during long agent turns). SuperGrok and DeepSeek Flash 4.1 are opt-in model paths, not a reason to standardize yet.
• Factory: turn on streaming replies in the terminal if you want tokens as they arrive; when adding MCP servers, confirm the allowlist entry is created (v0.217.0).

For teams

• Patch Windsurf to v3.10.31 now. Restricted Mode previously missed nested-object workspace settings (CVE-2026-81376). This is the P5 open proposal in this window. Also note ACP is always on in the bundled 3.10.23 notes—remove any runbooks that tell people to toggle it.
• Tabnine v6.6.0: ship the Next.js CVE-2026-64642 fix; stop assuming team managers can invite Admins. Treat CLI + IDE Beta Agent as an explicit org/team enablement (installation admin, then Teams → Features), not a silent rollout. Optional Google-Cloud-egress proxy is off by default.
• Codex / Goose / Claude gateway: MCP is growing real auth UX (OAuth expiry, Touch ID, allowlists, “prefer latest MCP”). Require HTTPS for Goose-Snowflake; review Claude proxy-boundary env vars before putting gateways on a corporate forward proxy.
• Factory org controls: you can now strip Web Search and exception-block models while leaving Allow All for new IDs. Decide that policy before v0.215.0+ hits everyone.
• Kiro V3 cloud sync can load cloud Steering, agents, Skills, Powers, and Hooks into new local CLI sessions without writing local files. That is convenient and a policy hole if local lock-down assumed “no file = no config.”
• Claude AGENTS.md is not on Bedrock, Vertex, or Foundry yet. Do not document it as the enterprise instruction file for those deployments.
• Cline v0.0.27 is the one that makes sign-out stick; if you recycle machines or mix desktop + classic extension credentials, upgrade before auditing access.
• Open team-facing proposals in this window: Windsurf CVE install (P5), Tabnine CLI/IDE beta enablement (P4). Developer-facing: Zed Agent Panel settings (P4). Two Grok CLI prompt/MCP proposals are open but have no matching Grok release in this evidence JSON—do not treat them as shipped.

What to ignore

• Omitted changelog tails (Claude +86, Codex +131 / +147, Zed +39, Cline +36 / +11, and others). Do not invent features behind those cuts.
• Zed v1.21.0-pre as a production standard.
• Kiro v2.21.3 HTML duplicating the v2.21.4 dashboard/sync story.
• Windsurf’s multi-version HTML blob as a single atomic release; pin v3.10.31 for the CVE, and only apply 3.10.27 / 3.10.23 notes if you are actually on those builds.
• Tabnine/Factory/Kiro docs HTML versus GitHub tags—dates and desktop version side-cars are easier to misread.
• OpenCode’s P2 “verification videos” proposal and contributor thank-you noise in v1.18.30.
• The one erroring source in this window: do not amplify a broken fetch into a product claim.
• Marketing phrasing (“smoother,” “steadier,” “cleaner”) with no behavior you can test.

Watch next

• Whether AGENTS.md reaches Bedrock / Vertex / Foundry, and whether other CLIs treat AGENTS.md as a shared convention.
• GPT-6 Astra quality and routing: Codex picker + Bedrock, Goose models, OpenCode Astra prompt—three implementations, no cross-eval in this evidence.
• Codex worktree and /voice leaving experimental; Goose latest-MCP and subagent guards causing server/tool breakage.
• Copy-cat Restricted Mode / nested-settings bugs after CVE-2026-81376.
• Tabnine agent moving from team-gated beta to default; Factory Web Search off-switch adoption.
• MCP auth becoming table stakes: Touch ID, OAuth reconnect copy, allowlist autocomplete that actually allowlists.

How to use DevAgentRadar

DevAgentRadar is a free global radar for AI coding assistants: judgment from versioned evidence, not vendor positioning.

1. Read Headline and What the evidence shows for what actually shipped (prefer GitHub tag URLs in the table).
2. Execute For developers on your own toolchain; execute For teams as org policy, CVE, and enablement work.
3. Skip What to ignore—especially omitted bodies, prereleases, and duplicate HTML.
4. Track Watch next and the 6 open improvement proposals; P5 Windsurf is the only must-patch item in this set.
5. This brief used 15 signals from 23 tracked assistants. If a tool you run is not in the tables, there was no qualifying evidence here—do not backfill from memory or blogs.

Evidence appendix

• Evidence window: top curated signals (versioned releases preferred)
• Assistants tracked: 23
• Signals in this brief: 15
• Trusted source mix (GitHub/changelog vs HTML): 49%
• Open improvement proposals: 6
• Sources reporting errors: 1

High-signal releases used

• Claude Code v2.1.277: Added AGENTS.md support: in a project with no CLAUDE.md, Claude Code reads AGENTS.md instead; change it under "Project instructions" in /config (not yet on Be — source

• OpenAI Codex CLI rust-v0.155.0: Added experimental /voice conversations with live transcripts and microphone controls on supported builds, enabled through /experimental. (#43581, #43651, # — source

• Goose v1.50.0: Support GPT-6 Astra models #11869 · Tool calling for goose-agent [#11627](https://github.com/aaif-goose/goose/ — source

• OpenAI Codex CLI rust-v0.154.0: GPT-6-Astra is now available in the model picker and Amazon Bedrock catalogs. (#42879, #42619) · Experimental worktree support lets you create isolated checkout — source

• Zed AI v1.21.0-pre: This week's release includes faster rendering in syntax-highlighted files and Markdown code blocks, a language server command picker, and a setting that keeps y — source

• Cline desktop-v0.0.26: The composer now shows the current branch's GitHub pull request — PR number, merge status, changed-line totals, and CI checks. · Click through to open it in you — source

• Cline desktop-v0.0.27: An expired Cline sign-in now produces one actionable error instead of two dead ends. · A turn that fails before the runtime takes the prompt was reported twice — source

• Google Antigravity 1.2.1: Added support for excludeDefaultComponents: true in custom agent Markdown frontmatter, allowing custom agents to opt out of default prompt sections and built- — source

• Windsurf v3.10.31: v3.10.31 September 16, 2026 Devin Desktop Restricted Mode blocks restricted workspace settings written in nested object form, not just the dotted form (CVE-2026 — source

• OpenCode v1.18.30: Added the Astra system prompt for GPT-6 models. · Preserved Bedrock DeepSeek model IDs, including ARN-based IDs, so they resolve correctly. (@YeEmrick) · Update — source

• Kiro v2.21.4: 2.21.4 Sep 11, 2026 · 2.21.3 Sep 10, 2026 · 2.21.2 Sep 8, 2026 +1 more Session Dashboard, Configuration Panel, and Cloud Sync Browse and manage local and cloud — source

• Tabnine v6.6.0: v6.6.0 September 15, 2026 Features and Improvements Enterprise Agent: Tabnine CLI, powered by OpenCode : Now available to all customers. · One installer for mac — source

• Factory Droid v0.217.0 — · Desktop v0.174.0 (September 11, 2026): Browser shortcuts, smoother command animations, cleaner retries, and clearer organization controls · Smoother command animations - Long-running commands now — source

• Factory Droid v0.215.0 — · Desktop v0.172.0 (September 8, 2026): Streaming terminal responses, organization Web Search control, unified connector settings, and steadier sessions · Stream responses as they arrive - A new t — source

Open proposals

• Install Windsurf v3.10.31 to close nested Restricted Mode bypass (CVE-2026-81376) (audience: team, P5)
• Enable prevent_idle_sleep, SuperGrok, and DeepSeek Flash 4.1 in Zed Agent Panel (audience: developer, P4)
• Enable Tabnine CLI and IDE Beta Agent under Teams > Features (audience: team, P4)
• Replace <output_efficiency> with <response_guidelines> in Grok CLI prompts (audience: developer, P4)
• Drop legacy managed MCP configs and shadowed platform skills in Grok CLI (audience: developer, P4)
• Improve with OpenCode pr-38252-videos: pr-38252-videos PR #38252 verification videos (audience: everyone, P2)