Radar brief — 2026-10-05

What the evidence shows

Eight versioned GitHub releases from four tools arrived in the last 36 hours. None of those signals were marked must-know for every daily user; the Copilot sandbox/MCP fixes and Qwen’s agent/MCP drop are still the ones with operational bite. Copilot CLI tags are prereleases. Codex alpha notes are empty. One tracked source reported errors; treat sparse tags as noisy. About 54% of this brief’s mix is GitHub/changelog versus HTML.

New in the last 36 hours

Still relevant this week (not in the 36-hour window)

| Goose | v1.48.0 | Declarative providers (TrustedRouter, OpenCode Zen, Gondola, SayGM, Lynkr, PleumRouter). Z.ai GLM-5.2 → GLM-5.3. Custom provider cost fields. on_failure for PreToolUse hooks. Ninety-eight further changes omitted. | | Kimi Code | @moonshot-ai/kimi-code@0.43.0 | AI session titles always on. Delete session: Ctrl+X then y. loop_control.compaction_max_attempts (default 5). Twenty-eight further changes omitted. |

For developers

• Copilot CLI (prerelease): If you run v1.0.92-4+, expect sandboxed shells not to see GITHUB_TOKEN unless you configure it. Use copilot config instead of hand-editing. If MCP over HTTP+SSE used to freeze, retest. On Entra (v1.0.92-5), pick the account at sign-in and confirm /logout clears it; retest Entra-protected MCP. Ctrl+E (v1.0.92-3) is the local/cloud switch; retired models are gone from the picker.
• Qwen Code 0.25.0: Upgrade if you want workspace-agent collaboration, A2A sharing, Hosted MCP, or Mem0 in the CLI. SDK consumers should take sdk-typescript-v0.1.18 for the 0.25.0 bundle — do not treat the older bundled-CLI lines in that tag as new product behavior.
• Antigravity 1.2.17: On Windows, retest the command sandbox without elevation (Python/Git/npm). Esc on an empty prompt permanently dismisses the current announcement card. Recheck agent views of .tiff files.
• Claude Code: After v2.1.287, if an MCP server dies on connect, add "bareElicitationCapability": true. Mask OTel prompt_text like prompt. On Windows, denying Bash also kills PowerShell — you may have no shell tool. If you resume sessions, prefer v2.1.282+ for the --continue/--resume and extended-thinking fixes. “You should know” is opt-in and telemetry-gated.
• Cline: Re-add custom providers if they showed in the picker but failed at run. If you pin Vultr, re-select the new IDs. Point MCP at one settings path via the CLINE_* env vars.
• Goose 1.53.0: Use the quote-to-composer action and check models.dev-backed metadata (Opus 5.5, GPT-6-sol/luna). ACP-only binary is a separate lean build.
• Crush 0.88.0: You can keep JSON; .crushrc is additive. Bedrock SSO users should expect a refresh prompt when tokens expire.
• Kimi 0.43.0: Titles are no longer experimental. Tune loop_control.compaction_max_attempts if compaction loops fail.

For teams

• Token leakage (Copilot): Treat v1.0.92-4 as a sandbox policy change: ambient GITHUB_TOKEN is withheld by default. Document how (if at all) CI/agent sandboxes opt back in. Pair with v1.0.92-3’s masked Git credentials and network-bypass prompt.
• IdP / MCP (Copilot v1.0.92-5, Claude v2.1.287): Entra multi-account and silent MCP token renew need a test plan. Claude’s 2025-11-25 MCP URL prompts and bareElicitationCapability are rollout flags — inventory MCP configs before forcing the client.
• Qwen hosted surface: v0.25.0 adds private Hosted MCP, hosted tool approvals, durable remote Shell, workspace cold restore, and Mem0 in the CLI. There is an open team proposal to enable workspace-agent collaboration, Hosted MCP, and Mem0 — decide allow/deny before defaulting it org-wide. Release claims no known breaking changes; still pin and pilot.
• Windows least-privilege: Antigravity’s sandbox no longer needs admin; Claude warns that Bash-deny implies no PowerShell. Align endpoint policy so agents are not both over-privileged and accidentally shell-less.
• Telemetry / plugins: Claude Mods and “You should know” change plugin depth and require first-party telemetry for the built-in mod. v2.1.282 surfaces ignored/off telemetry in project settings via claude doctor. Cline’s prompt-like MCP/settings path bugs are fixed — standardize CLINE_MCP_SETTINGS_PATH.
• Model pins: Cline Vultr IDs renamed; Goose/Cline catalogs mention GPT-6.1 Sol / GPT-6-sol. Re-pin defaults; don’t assume old IDs survive.
• JetBrains / Crush config: Kilo Marketplace can install agents/MCP/skills from npm or git refs inside the IDE — gate that like any plugin store. Crush .crushrc source is useful for machine overrides; keep secrets out of the shared file.

What to ignore

• Codex rust-v0.162.0-alpha.13–15: empty bodies. Do not infer features from the tag name.
• Omitted tails (+9, +70, +90, +79, +73, +21, +98, +25, +28): not in evidence; do not invent them.
• Qwen sdk-typescript-v0.1.18 as a feature list: it is a bundle pointer (plus historical 0.23.x memory/compaction notes). Low-confidence / noisy as a product changelog.
• Internal scores, judge: tags, “mustKnow” hints: ranking only; cite the release, not the score.
• Marketing tone in Crush’s notes; the evidence is .crushrc and Bedrock SSO refresh.

Watch next

• Whether Copilot CLI’s sandbox token withhold and Entra MCP renew ship in a non-prerelease.
• Qwen Hosted MCP / workspace-agent rollout vs. the open team proposal.
• Claude Mods blast radius and MCP bareElicitationCapability breakages.
• Goose 1.53.0 models.dev live metadata vs. bundled fallback; ACP-only binary adoption.
• Cline Vultr re-pins and custom-provider regressions.
• Codex alpha.16+ with a real changelog.
• Open proposals: Qwen workspace-agent/Hosted MCP/Mem0 (team); Goose 1.53.0 quote-to-composer (team); Mistral Vibe spawn-from ~/.vibe/agents; Zed per-spawn model; Codex Guardian reviews; Zed GPT-6.1 Sol BYOK; Windsurf Devin/ChatGPT Fusion; xAI Grok CLI harness/TUI.

How to use DevAgentRadar

This brief is a public, evidence-only pass over AI coding assistants: versions and facts from the JSON, not vendor blogs dressed as news. Start with Headline (last 36 hours), then the tables. Developers take the concrete client actions; teams take sandbox, MCP, IdP, and pin decisions. Skip What to ignore. Re-check Watch next and the linked proposals when you change defaults. If a line is not in the tables, it is not in today’s evidence.

Evidence appendix

• New in the last 36 hours: 8 release(s) from 4 tool(s)
• Evidence window: new releases first, then top curated signals (versioned releases preferred)
• Assistants tracked: 29
• Signals in this brief: 40
• Trusted source mix (GitHub/changelog vs HTML): 54%
• Open improvement proposals: 8
• Sources reporting errors: 1

High-signal releases used

• GitHub Copilot CLI v1.0.92-4: Added · Add copilot config subcommands to list, read, set, and remove settings. · Improved · Improve first-run startup by extracting the bundled CLI p — source

• Qwen Code v0.25.0: See the complete change list below. · No known breaking changes. · feat(agents): add local workspace-agent collaboration ([#11206](https://github.com/QwenLM/q — source

• Qwen Code sdk-typescript-v0.1.18: This SDK release bundles CLI version: 0.25.0 · Source: CLI built from source (same branch/ref as SDK) · --- · This SDK release bundles CLI version: 0.24.7 · Sou — source

• Google Antigravity 1.2.17: Added announcement cards above the prompt for model launches, deprecations, and other service notices. · Cards appear one at a time, newest first; press Esc o — source

• GitHub Copilot CLI v1.0.92-5: Improved · Select which account to use after Microsoft Entra sign-in, and let /logout sign out those OAuth sessions. · Fixed · Entra-protected MCP serve — source

• OpenAI Codex CLI rust-v0.162.0-alpha.14 — alpha.14: Release 0.162.0-alpha.14 — source

• OpenAI Codex CLI rust-v0.162.0-alpha.15 — alpha.15: Release 0.162.0-alpha.15 — source

• OpenAI Codex CLI rust-v0.162.0-alpha.13 — alpha.13: Release 0.162.0-alpha.13 — source

• Claude Code v2.1.282: Added a maxProseWidth setting that caps the width of Claude's prose in wide terminals while tables and code blocks keep the full width · Added a startup notic — source

• Goose v1.53.0: Resizable Picture-in-Picture window for MCP Apps #12417 · Fetch model metadata from models.dev live with bundl — source

• Claude Code v2.1.287: Added Claude Mods: plugins may now modify deeper behavior · Added You should know, a built-in mod where a side agent watches your back and flags things you or C — source

• GitHub Copilot CLI v1.0.92-3: Added · Add a pre-conversation Ctrl+E environment picker to switch between local and cloud runs · Fixed · Keyboard, paste, and mouse input now stay orde — source

• Goose v1.48.0: TrustedRouter declarative provider #11422 · OpenCode Zen gateway as a declarative provider [#10939](https://gi — source

• Kilo Code jetbrains/v7.1.7: Fold and unfold large pasted text blocks directly from the prompt input and transcript. · Add a Marketplace page to JetBrains settings for browsing, installing, — source

Open proposals

• Enable workspace-agent collaboration, Hosted MCP, and Mem0 in Qwen Code v0.25.0 (audience: team, P5)
• Spawn agents from ~/.vibe/agents and start plugin-declared MCP servers (audience: team, P5)
• Pass a per-spawn model to Zed spawn_agent and stop restarting subagents (audience: developer, P5)
• Upgrade Goose to v1.53.0 and quote selected conversation text into the composer (audience: team, P5)
• Enable opt-in Guardian reviews and projectless workspace-default sessions (audience: developer, P5)
• Enable GPT-6.1 Sol BYOK and set agent.max_idle_retained_threads in Zed (audience: developer, P4)
• Sign in to Devin Desktop with ChatGPT and set Fusion to GPT-6 Astra + SWE-2 (audience: developer, P3)
• Improve with xAI Grok CLI (Grok Build) c68e39f: Publish harness and TUI open-source (audience: everyone, P2)