Radar brief — 2026-09-24

What the evidence shows

Fifteen curated signals across 23 tracked assistants. Versioned GitHub releases carry the weight; the 49% GitHub/changelog mix means nearly half of this window is HTML docs/changelogs (Windsurf, Kiro, Tabnine, Factory). One source reported errors. Several notes omit large tails (bodyOmitted); those tails are not inferred below.

Dominant themes in this window: model, cli, agent, then mcp and security. Six signals are tagged breaking.

For developers

• Upgrade Codex in two hops if you skipped 0.155.0: voice moved from /experimental to default in rust-v0.156.0. Set /voice settings or use F8 before a noisy standup. Opt into /tui on next launch; expect worktrees on unless you turn them off. Use /usage when token and plugin spend is unclear. Keep --no-daemon in your pocket if the background server fights tmux/SSH.
• Adopt AGENTS.md only where Claude Code actually reads it. v2.1.277 uses it when CLAUDE.md is absent, via /config → Project instructions. Do not assume Bedrock, Vertex, or Foundry. Update anyway: -p / Agent SDK hangs now error and exit 1; empty assistant text blocks no longer poison --resume; two CLI builds on one machine no longer log you out.
• Treat Cline plugins as user-global, not repo-local. Skills resolve as plugin-name:skill-name from ~/.agents/plugins/*. Opening a repo will not start its .agents/plugins MCP servers. SDK users must pass agentPluginPaths for extra roots. Rely on the new 3× retry only for unstreamed transient provider deaths—including forwarded 429s.
• Goose: if auto-compact is set to 100%, compaction is now disabled. Pair gateways only from the operator allowlist. Prefer the declared MCP version; HTTP retries are in.
• Antigravity: switch /config verbosity to medium for long explore turns. Sandbox bypass prompts should drop; if they do not, the agent is leaving artifact/scratch dirs.
• Zed: v1.21.0-pre only. agent.prevent_idle_sleep is on by default—expect laptops to stay awake during long agent turns. SuperGrok and DeepSeek Flash 4.1 are in the Agent Panel, not a stable editor release.
• OpenCode v1.18.32: do not expect Bedrock image hoist on models other than Claude, Nova, and Llama 4. Grok 4.7 / DeepSeek V4.1 Flash are Zen (and Grok 4.7 also Go) catalog entries, not a new agent runtime.
• Kiro: /fullscreen for TUI/Lite; put thinking/effort in /model (V2 /effort is legacy). Do not plan against 272K for GPT-5.6 Sol/Terra/Luna—the note says 1M in IDE, CLI, and Web.
• Factory: you can stop a live subagent and fork from the session list. New sessions default to medium autonomy if you never chose one—set it explicitly. Droid Shield should block fewer safe Git commands.

For teams

• Patch security before features. Windsurf v3.10.31 closes CVE-2026-81376 (Restricted Mode bypass via nested workspace settings). Tabnine v6.6.0 closes CVE-2026-64642 and stops team managers from granting Admin via invite/update. Fleet those two even if you ignore Desktop/voice work.
• Codify plugin and MCP load paths. Cline’s hub loader is the clearest policy in this window: user-global plugins yes, workspace plugins no unless you opt in. Mirror that in review: a cloned repo must not start MCP. Goose adds an operator allowlist for gateway pairing. Codex 0.155.0 adds Touch ID for local MCP; 0.156.0 recovers MCP OAuth after provider 503s—verify SSO/proxy paths, not just localhost.
• Claude Code gateways: set CLAUDE_GATEWAY_PROXY_IS_EGRESS_BOUNDARY=1 when the app gateway’s only egress is a forward proxy (hostname handed to the proxy, no local DNS). Use the new upstream headers: map for the proxy you actually run. Pin a single CLI version per machine; mixed IDE-bundled CLIs caused surprise logouts.
• Tabnine / OpenCode: the enterprise CLI is OpenCode-powered and on for all customers; the IDE agent stays off until an installation admin and a team lead enable Beta agent. Turn on MCP-by-tool analytics on the Agent Usage page before a broad rollout. Optional inference proxy for non-PSC Google Cloud is off by default—engage the account manager, do not assume it.
• Autonomy and cloud defaults: Factory sessions now start at medium autonomy; Kiro V3 can open a cloud session before a repo is connected. Both are productivity wins and audit gaps—set org defaults and require /repo (or equivalent) before secrets or production branches.
• Do not treat HTML notes as GitHub-grade. Windsurf’s page mixes 3.10.31 with 3.10.27 and 3.10.23 (SSH, Fusion, ACP-always-on). Kiro 2.23.1 is a patch page that mostly describes 2.23.0. Factory desktop versions are bundled into CLI tags. Roll with a changelog owner, not a blog scrape.
• Breaking tags on Codex, Claude Code, Goose, Zed pre, and Windsurf: canary one team, then fleet. Six of fifteen signals claim a break; the omitted change tails are where the rest of the breaks likely hide.

What to ignore

• Omitted tails. Codex omits 128 and 131 changes; Claude Code 86; Cline SDK 68; others 5–39. Do not invent them.
• In-release marketing. Cline’s one-time Desktop URL notice (CLINE_DISABLE_CLINE_PASS_NOTICE=1 still kills it). Zed Guild promo. Windsurf “Download” chrome.
• Prerelease and HTML as fleet truth. Zed v1.21.0-pre. Kiro/Tabnine/Factory/Windsurf HTML. One source in this brief reported errors—do not overfit a single docs page.
• Tiny model catalog diffs (OpenCode Zen docs, Zed DeepSeek Flash 4.1, Kiro 1M context) unless those models are already in your allowlist. They are not a new assistant.
• Open proposals are not releases. Three proposals sit in the queue (see Watch next); they are not vendor shipping evidence.

Watch next

• Claude Code AGENTS.md on Bedrock, Vertex, and Foundry—explicitly missing today.
• Codex voice-default and worktree-default fallout (tmux/SSH clipboard was already a fix target; 128 omitted items remain).
• Cline Desktop vs CLI/SDK hub plugins: whether agentPluginPaths stays the only workspace escape hatch.
• Zed v1.21.0 stable vs this -pre (idle-sleep default, SuperGrok).
• Whether Goose EUrouter / operator allowlists become the pattern for regional inference.
• Open proposals: Grok CLI response_guidelines swap (developer, P4); drop legacy managed MCP configs and shadowed platform skills in Grok CLI (developer, P4); OpenCode PR #38252 verification videos (everyone, P2).

How to use DevAgentRadar

DevAgentRadar is a public, evidence-first feed—not a vendor scoreboard. Read What the evidence shows as the only fact table; if a version is not in that table, it is not in this brief. Developers should pin the named versions and run the concrete commands above. Teams should fleet CVEs, plugin load paths, and breaking tags first, then optional UI (voice, fullscreen, Desktop). Prefer GitHub release tags over HTML changelogs; when bodyOmitted is set, stop at the listed bullets. Track the three open proposals as product pressure, not as shipped behavior. Re-check the next brief before you treat a prerelease or a mixed HTML changelog as policy.

Evidence appendix

• Evidence window: top curated signals (versioned releases preferred)
• Assistants tracked: 23
• Signals in this brief: 15
• Trusted source mix (GitHub/changelog vs HTML): 49%
• Open improvement proposals: 3
• Sources reporting errors: 1

High-signal releases used

• OpenAI Codex CLI rust-v0.156.0: Choose an optional fullscreen UI with /tui for your next launch, including transcript search, mouse selection, and right-click copying. (#46732, #46734, #4688 — source

• Claude Code v2.1.277: Added AGENTS.md support: in a project with no CLAUDE.md, Claude Code reads AGENTS.md instead; change it under "Project instructions" in /config (not yet on Be — source

• OpenAI Codex CLI rust-v0.155.0: Added experimental /voice conversations with live transcripts and microphone controls on supported builds, enabled through /experimental. (#43581, #43651, # — source

• Goose v1.51.0: Route Desktop to state-machine loop via ACP prompt meta #11247 · EUrouter as a declarative provider [#11619](h — source

• Zed AI v1.21.0-pre: This week's release includes faster rendering in syntax-highlighted files and Markdown code blocks, a language server command picker, and a setting that keeps y — source

• Google Antigravity 1.2.10: Added medium verbosity mode to /config, between high and low, which groups related tool calls and thoughts into concise summaries (such as `Explored N f — source

• Cline cli-v3.0.62: Introducing Cline Desktop: a native app for working with open-weight models, with task import from Claude Code and Codex, scheduled runs, web search and voice i — source

• Cline sdk/sdk/v0.0.83 — Hub-managed Agent Plugins. · Packages under ~/.agents/plugins/* on the hub host are discovered and validated from their root plugin.json; valid skills under — source

• Windsurf v3.10.31: v3.10.31 September 16, 2026 Devin Desktop Restricted Mode blocks restricted workspace settings written in nested object form, not just the dotted form (CVE-2026 — source

• OpenCode v1.18.32: Fixed Bedrock image attachments so they are only hoisted for Claude, Nova, and Llama 4 models. · Fixed Together AI streaming usage reporting. · **Thank you to 1 — source

• Kiro v2.22.1: 2.22.1 Sep 17, 2026 Fullscreen Chat and Streamlined Sessions Expand chat to a dedicated terminal screen, browse a streamlined V3 session dashboard, and keep lon — source

• Tabnine v6.6.0: v6.6.0 September 15, 2026 Features and Improvements Enterprise Agent: Tabnine CLI, powered by OpenCode : Now available to all customers. · One installer for mac — source

• Factory Droid v0.225.0 — · Desktop v0.182.0 (September 22, 2026): Default app file opening, subagent controls, Droid Shield accuracy, and desktop sign-in and menu fixes · Open files in default app - You can now open a sess — source

• Factory Droid v0.223.0 — · Desktop v0.180.0 (September 19, 2026): Session forking, PyCharm, Databricks connector, streaming chat tables, and custom model credential fixes · Fork sessions from sidebar - You can now fork a s — source

Open proposals

• Replace <output_efficiency> with <response_guidelines> in Grok CLI prompts (audience: developer, P4)
• Drop legacy managed MCP configs and shadowed platform skills in Grok CLI (audience: developer, P4)
• Improve with OpenCode pr-38252-videos: pr-38252-videos PR #38252 verification videos (audience: everyone, P2)