Radar brief — 2026-10-20
Kiro Crew 0.9.0 is the change daily Crew users will feel: crewmate profiles (permission, model, schedules), preview dashboards, remote crews as live windows, plus upgrade defaults that rewrite verbosity, panels, and old relay chats. The same 36-hour window also landed Mistral Vi…
What the evidence shows
New GitHub-style tags dominate the high-signal set. Kiro and Tabnine are product changelog/docs HTML (part of the 54% GitHub/changelog vs HTML mix)—treat those rows as changelog text, not GitHub tags. Several notes omit large tails (bodyOmitted); those omitted lines are not inferred below.
/leanstall//unleanstall, clickable approvals/thinking/resume/log-level, /branch, /debug, OSC 7501 status. Shared-only API keys block login MCP connectors (vibe --setup). Admin enable_mcp can block all user-facing MCP ops. Notes omit 85 further changes.enable_auto_approve=false hides YOLO/safety = "yolo" agents and ignores --auto-approve/--yolo/bypass_tool_permissions (per-tool permissions still apply). Compaction knobs (compaction_max_output_tokens 80000, retries, reserve). Experimental subagent wait/interrupt/read; vibe -p waits on leftover subagents; each subagent billed at its own model rates. Notes omit 53 further changes.--disable-client-telemetry; --trust-folder for -p/stdin sessions; copilot plugin install "ghapp://air/install?..."; /share action menu; sandbox honors HTTPS_PROXY/HTTP_PROXY. Hung MCP tool-load no longer stalls sessions for minutes. Gemini enum/empty-tool-result fixes; reasoning-only max-token loops now error out. Notes omit 36 further changes./config//settings can set showReasoning; permission prompts explain escalation. Create-then-cd shells now ask path approval instead of early deny. Local/loopback models no longer block Auto when signed in. Notes omit 2 further changes.decider: "person" (only dialog/host callback can approve); e.isReadOnly on tool.check. /auto-mode-setup; /claude-api managed-agents-secure (compare vs Anthropic guide, no changes). Pro/Max resume warns when an inactive thread would take a noticeable share of the 5-hour limit. Linux sandbox glob-bracket fix; org policy refresh after custom API key. Notes omit 81 further changes.browser_open prompt can remember origin / all-origins always-allow; Auto-Approve lists browser_open. Primary agent can pick which agent (and its edit/bash/MCP rules) an Agent Manager session runs. New Worktree dialog redesigned (base branch, optional branch name). Notes omit 36 further changes./ search in /diff (counts, n/N across files). agy plugin validate now checks hooks/sidecars/component lists and warns on Claude-style top-level "hooks". Human-readable task timers. Gemini 4 Argon now appears in /model and --model with GEMINI_API_KEY. Notes omit 13 further changes.missing field npm).memory.enableManagedAutoMemory (#6941 / #11022). Large omitted tail; low-confidence as a product signal.For developers
- Kiro Crew 0.9.0: After upgrade, open Settings → Chat → Transcript → Response Verbosity if you still want long answers (Ultra is gone; stored Ultra now acts as Answer only). Turn translucent panels back on under Display if you want 0.8 glass. Do not expect to send on old turn-relay peer chats—they open read-only. Use crewmate Profile cards for permission/model/schedule at a glance; watch the composer overflow warning and the Usage tab before large prompts.
- Kiro IDE 1.4.5: With Workflows on, read the step card and Allow/Deny—or type a change in chat instead of letting the plan run. On Linux tarball installs, heed the user-namespace warning rather than debugging a silent fail. Expect MCP config files to be account-locked on next start.
- Kiro CLI 2.32.0: Prefer folder-level write approval over per-file prompts in V3; use workflow plan preview and non-interactive cloud sessions where you already script V3.
- Mistral Vibe 3.0.x: Use the reported compaction threshold in the client before the session silently compact. Try
/branchto fork a resumable session,/debug(or Ctrl+\) for live logs, and/statusfor which credential source is actually in use. If you rely on YOLO, 3.0.1 can hide it under admin config—confirmenable_auto_approvebefore assuming--yolostill works.vibe -pnow waits on leftover subagents;--time-limitinterrupts them. Experimental model catalog is opt-in (experimental_enable_model_catalog). - Copilot CLI v1.0.100: Add
--disable-client-telemetryif you need uploads off;--trust-folderfor one-off-p/piped runs;copilot plugin installonly from verifiedghapp://links you intend./sharewith no args opens the share menu. If MCP tool-load hangs were freezing you for minutes, this is the fix. Treat v1.0.101-1 as prerelease if you want faster resume, clearer permission diagnosis, and the create-then-cd approval fix. - Claude Code v2.1.304: Run
/auto-mode-setupon a real project/session (now also on Bedrock/Vertex/Foundry/gateway and telemetry-disabled sessions). On Pro/Max, take the resume-vs-new-conversation warning seriously against the 5-hour window. Mod authors:decider: "person"ande.isReadOnlychange who can approve asks./claude-api managed-agents-secureis compare-only. - Kilo Code v7.8.15: Set
browser_openalways-allow (origin or all origins) if Integrated Browser prompts are noise; when fanning out via Agent Manager, pick the custom agent so edit/bash/MCP rules follow that agent, not the workspace default. - Zed / Antigravity: Zed v1.24.3 adds Gemini 4 Argon; v1.24.4 is the OpenCode
npmload fix (the 1.25.1-pre note is the same fix plus syntax highlighting). Antigravity 1.4.3 shows Argon withGEMINI_API_KEYand adds/diffsearch plus stricteragy plugin validate. - Tabnine v6.6.12: If you self-host Vertex Gemini 3+, configure thinking level; if Qwen agents died on message order, this CLI fix is the one to take.
For teams
- Lock YOLO and MCP from policy, not hope. Vibe v3.0.1
enable_auto_approve=falsehides auto-approve agents and ignores--auto-approve/--yolo/bypass_tool_permissions. Vibe v3.0.0 adminenable_mcpcan block add/remove/toggle/login/logout/tool registration, including plugin-provided MCP. Pair with/statuscredential-source visibility and shared-only keys that refuse login connectors. - Treat MCP config as a secret file. Kiro 1.4.5 now restricts the MCP config (credentials) to the OS account on macOS/Linux and re-protects older files on startup—roll this through managed desktops and confirm shared-agent hosts are not relying on group-readable MCP JSON.
- Copilot CLI in org images: Ship v1.0.100 for
--disable-client-telemetry, sandbox proxy honor (HTTP(S)_PROXY), managed-plugin activation when policy changes, and hung-MCP session stalls. Gate v1.0.101-1 until it leaves prerelease. Review who may runcopilot plugin install "ghapp://...". - Claude managed agents: Use
/claude-api managed-agents-secureas a no-op audit against Anthropic’s published guide. Confirm org policy refreshes afterANTHROPIC_API_KEY/ “Use custom API key” (fixed in v2.1.304). Decide a resume policy for Pro/Max 5-hour limits so inactive threads are not blindly continued. - Kilo Auto-Approve:
browser_opencan now be always-allowed for an origin or all origins—set the org default; do not leave “all origins” as an individual click-through. Agent Manager sessions can inherit a custom agent’s MCP/edit/bash rules: document which agent is allowed to fan out. - Kiro Crew 0.9.0 rollout: Brief users on verbosity/panel defaults and read-only old relay chats before they think the product is broken. Remote crews as live windows and preview dashboards change what is visible across machines—review that against your data-handling rules.
- Kiro CLI 2.32.0: Folder write approvals and workflow steps with Powers/MCP expand blast radius; require plan preview (also in IDE 1.4.5) in any workflow-enabled org.
Open team-facing proposals on the radar (not releases): path-specific Copilot CLI instructions under .github/instructions; snapshot-isolated child agents from hosted Qwen Code parents.
What to ignore
- OpenHands v1.28.1 — release-please chore: bump agent-server to 1.56.0; no product behavior in the notes.
- OpenAI Codex CLI rust-v0.164.0-alpha.7 — title-only “Release 0.164.0-alpha.7”; no changelog body.
- Augment Code v1.2.0-prerelease.202610191517 — install-script / Node SEA packaging and unsigned macOS
-seametadata, not assistant behavior. - Zed AI v1.25.1-pre — same OpenCode
npmfix already in v1.24.4, plus editor chrome/highlighting; skip unless you are on the pre channel. - Qwen Code sdk-typescript-v0.1.21 as a “CLI 0.25.3 feature drop” — the notes are a stack of SDK-to-CLI pins plus one named memory setting; 89 lines omitted. Do not invent those CLI features from the bundle list.
- Omitted tails on Vibe (+85 / +53), Copilot CLI (+36 / +2), Claude (+81), Kilo (+36), Kiro Crew (+45), Antigravity (+13). Absence from this brief is not absence from the tag.
- Theme counts (
model× 28,security× 25, etc.) are clustering, not extra facts.
Watch next
-
Copilot CLI v1.0.101-1 → stable — resume latency, sandboxed MCP, permission diagnosis, create-then-cd approval.
-
Mistral Vibe 3.0.x omitted bodies — compaction, subagents, MCP, and admin flags are already enough to re-test; the unpublished remainder may still move defaults.
-
Gemini 4 Argon — present in Zed v1.24.3 and un-hidden in Antigravity 1.4.3 with
GEMINI_API_KEY; watch other Google-model pickers. -
Kiro Crew 0.9.0 follow-through — dashboards and remote live windows are labeled preview; verbosity/relay/panel defaults will generate support noise this week.
-
Open proposals (6): Copilot CLI path-specific
.github/instructions(team); Qwen hosted snapshot-isolated child agents (team); Codex CLI 0.163.0/configlive settings (developer); Kimi Code 2.2.0 NotifyUser mid-turn progress (developer); xAI Grok CLI harness/TUI open-source (everyone, P2); OpenCode PR #38252 verification videos (everyone, P2). -
Codex 0.164.0-alpha.7 — wait for a notes-bearing tag before changing pins.
How to use DevAgentRadar
This brief is a public snapshot of versioned evidence, not a vendor roundup. Read Headline for what arrived in the last 36 hours (must-know user-facing changes first), What the evidence shows for the exact assistant/version/signal, then For developers / For teams for actions. What to ignore is load-shedding: empty tags, prerelease packaging, and omitted changelog tails. Watch next is where pins and proposals are still in flight.
Prefer GitHub/changelog rows over HTML docs when both exist; if a cell cites only a changelog page, treat it as that page’s text. Never assume unlisted tools, unlisted versions, or omitted +N more changes. When a release and a proposal disagree, the tagged release is what shipped; proposals are optional follow-ups. Re-read on the next cycle—new isNew signals replace this Headline; older rows drop unless they still change daily use.
Evidence appendix
- New in the last 36 hours: 23 release(s) from 14 tool(s)
- Evidence window: new releases first, then top curated signals (versioned releases preferred)
- Assistants tracked: 29
- Signals in this brief: 40
- Trusted source mix (GitHub/changelog vs HTML): 54%
- Open improvement proposals: 6
- Sources reporting errors: 1
High-signal releases used
-
Mistral Vibe
v3.0.0: The app-server reports each model's compaction threshold, so a client can show how full a session's context is before it compacts. · Desktop can import projects — source -
GitHub Copilot CLI
v1.0.100: 2026-10-19 · Add --disable-client-telemetry flag to turn off client telemetry uploads from the CLI · Add --trust-folder for one-off prompt-mode sessions started — source -
Mistral Vibe
v3.0.1: Newenable_auto_approvesetting: when the admin-managed config sets it tofalse, the auto-approve (YOLO) mode is forbidden — theauto-approveagent (and a — source -
Qwen Code
sdk-typescript-v0.1.21: This SDK release bundles CLI version: 0.25.3 · Source: CLI built from source (same branch/ref as SDK) · --- · This SDK release bundles CLI version: 0.25.2 · Sou — source -
Kilo Code
v7.8.15— (release): #15235c61a974- Le — source -
Claude Code
v2.1.304: Added a transcript line when a plugin that runs first skips one of your mod's hooks, naming the event and the plugin · Addeddecider: "person"to a mod's `too — source -
Google Antigravity
1.4.3: Added/search to the/difffile list and file view: matches are highlighted as you type, the search prompt shows how many matches the diff and each file co — source -
GitHub Copilot CLI
v1.0.101-1: Improved · Resuming a session shows the conversation sooner without waiting for placeholder environment setup · Starting a session with sandboxed MCP server — source -
Zed AI
v1.24.3: Added Gemini 4 Argon to the Google AI models (#65725) — source -
OpenHands
v1.28.1: chore: bump agent-server to 1.56.0 · chore: remove merged PR artifacts · --- · This PR was generated with [Release Please](https://github.com/googleapis/release — source -
Zed AI
v1.25.1-pre: Fixed OpenCode models failing to load with a missing fieldnpmerror. (#65874) · Added HTML syntax highlig — source -
Augment Code
v1.2.0-prerelease.202610191517— auggie-v2 v1.2.0-prerelease.202610191517: Install the latest release (macOS/Linux): · curl -fsSL https://github.com/augmentcode/auggie/releases/latest/download/install.sh | bash · Install a specific ver — source -
Zed AI
v1.24.4: Fixed OpenCode models failing to load with a missing fieldnpmerror. (#65875) — source -
OpenAI Codex CLI
rust-v0.164.0-alpha.7— alpha.7: Release 0.164.0-alpha.7 — source
Open proposals
- Add path-specific Copilot CLI instructions under .github/instructions (audience: team, P5)
- Launch snapshot-isolated child agents from hosted Qwen Code parents (audience: team, P5)
- Open /config in Codex CLI 0.163.0 to search preferences and apply live settings (audience: developer, P5)
- Enable NotifyUser mid-turn progress in Kimi Code 2.2.0 (audience: developer, P5)
- Improve with xAI Grok CLI (Grok Build) c68e39f: Publish harness and TUI open-source (audience: everyone, P2)
- Improve with OpenCode pr-38252-videos: pr-38252-videos PR #38252 verification videos (audience: everyone, P2)
Anonymous · one vote per visitor · re-click to clear. Helps improve digests—not a product ranking.