Skip to content
DevAgentRadarDevAgentRadar
Sign in
Guidance/Daily Briefing
digesteveryonedigestevidenceradarmodelcli11 min read · Oct 28, 2026

Radar brief — 2026-10-28

Codex CLI rust-v0.165.0 is the must-know drop: Vertex AI (model_provider = "gcp"), GPT-6.1 Terra in the catalogs, memory v2 on for fresh profiles, and a marketplace Git URL check that no longer lets Git talk to a different host than the one that was allowed. Around it, Copilot A…

What the evidence shows

22 new releases from 13 tools in the last 36 hours. GitHub/changelog sources are only about 54% of the mix; Factory Droid and Windsurf arrive via HTML changelogs, Copilot’s GA note via a blog. Several GitHub notes omit dozens of extra bullets (bodyOmitted) — those are not reconstructed below. One tracked source is reporting errors.

OpenAI Codex CLIrust-v0.165.0
Key Signal & Impact
Built-in Vertex AI; GPT-6.1 Terra in catalogs; session picker filter + command-center grouping; reasoning-effort changes on by default; memory v2 default for new profiles (with import from other agents); marketplace URL check closed so Git cannot follow a different host; remote MCP requests cancelled when the local future is dropped.
GitHub CopilotGA announcement (blog, 2026-10-26)
Key Signal & Impact
Assisted permissions generally available in CLI, Copilot app, and VS Code: an LLM auto-allows clearly safe command / path / URL requests; everything else still needs you. Enterprises can block Allow All, disable Assisted, and set the default mode.
GitHub Copilot CLIv1.0.104
Key Signal & Impact
Fusion sessions start on Auto and honor fusionTier; Assisted Permissions no longer need experimental mode; interactive/SDK Autopilot keep waiting on background tasks (-p --autopilot still uses COPILOT_TASK_WAIT_TIMEOUT_SECONDS); missing Auto prefs fall back instead of failing the turn.
GitHub Copilot CLIv1.0.105
Key Signal & Impact
/model can select Fusion High or Max from a long-context session.
OpenCodev2.2.0
Key Signal & Impact
Experimental desktop plugins (create / install / share); desktop refresh; plugin session-instruction entries that survive compaction without busting the prompt cache; experimental image + decision APIs; Todo tool restored in desktop (opt-in). Tagged breaking; 79 further changes omitted.
Mistral Vibev3.0.3
Key Signal & Impact
On-disk skill edits apply without /reload; footer shows model + thinking level; post_agent hooks gain match (including "main"); outside_workdir = "deny" returns a tool error instead of prompting; unused config keys warn, or refuse start with strict_config / VIBE_STRICT_CONFIG=1; vibe config schema dumps settings. 76 further changes omitted.
Claude Codev2.1.311
Key Signal & Impact
Self-hosted runner can hold an idle session (--hold-idle-file, --max-hold-min); long CLAUDE.md list items no longer freeze startup/edits; interrupt no longer waits out MCP resource reads or skill downloads; >200K-token standard-context turns compact instead of dying on “Usage credits required for 1M context”; late MCP connect works for subagents; SubagentStop no longer fires ~twice a minute. 87 further changes omitted.
Claude Codev2.1.312
Key Signal & Impact
oidc.user_id_claim for gateways (e.g. Entra oid); VS Code sign-in now keeps fetching managed settings/org policy; Write will not overwrite a huge CLAUDE.md/rules/@-file after seeing only the start; skills with paths: survive a Bash cd; invalid command names no longer wipe the whole command set. 43 further changes omitted.
Google Antigravity1.4.9
Key Signal & Impact
Native image paste / drag-drop (including SSH + X11/Wayland); plugin Discover tab matches marketplace sections; agy plugin validate enforces kebab-case names and logo paths (--strict fails).
Google Antigravity1.4.8
Key Signal & Impact
Faster /diff (background untracked + older turns); [ / ] jump turns; binaries and >1 MB untracked files listed, not slurped; Auto-mode sandbox review gets 10s per check so it asks less often.
Windsurfv3.11.228
Key Signal & Impact
Remote-SSH/WSL Agent Window uses remote folders and opens remote file links; Agent→IDE status bar no longer vanishes; “Devin for Cloud” team setting removed (Cloud offer follows account access); local sessions list after a prior “Failed to list sessions” update.
Factory Droidv0.250.0 / Desktop v0.207.0
Key Signal & Impact
Transcript/PR/Slack UX: long messages collapse; session shows PR draft/open/merged/closed; Slack channels only for new code changes; fewer false refusals of safe commands. HTML changelog.
Factory Droidv0.251.0 / Desktop v0.208.0
Key Signal & Impact
Admins pick marketplace plugins from registered marketplaces; session/composer rendering; self-hosted GitHub/GitLab no longer drop when two token refreshes overlap. HTML changelog.
Kilo Codev7.8.20 (pre-release)
Key Signal & Impact
Agent Manager worktrees can pick the base branch; zod bump for a memory-exhaustion advisory; auto-compaction no longer starts far too early or loops on unknown context size.

For developers

  • Codex (rust-v0.165.0): If you run on GCP, set model_provider = "gcp". New profiles get memory v2 — import external-agent memories if you still keep notes in another tool. Expect reasoning-effort changes mid-thread. Treat marketplace Git URLs as newly strict; if a clone fails, check the host, not just the path. Alpha rust-v0.166.0-alpha.5 is a tag with no changelog body — stay on 0.165.0 unless you are dogfooding.
  • Copilot CLI: /permissions → assisted (no experimental flag). Fusion now boots on Auto; if High/Max was greyed out in a long session, v1.0.105 is the fix. Interactive Autopilot will sit on background tasks; only -p --autopilot still dies at COPILOT_TASK_WAIT_TIMEOUT_SECONDS.
  • OpenCode v2.2.0: Desktop plugins and the image/decision APIs are experimental. Prefer ctx.session.instructions.entry.* over rewriting the system prompt so you do not bust cache or lose text on compact. Re-enable the desktop Todo tool only if you want it. Do not assume the omitted 79 bullets are safe; read the GitHub notes before upgrading a daily driver. v1.19.5 only unhangs failed TUI worker requests on the 1.x line.
  • Mistral Vibe v3.0.3: Drop skills on disk and keep working — no /reload. Scope in the / menu tells you project vs user vs vibe. Set outside_workdir = "deny" if you want a hard wall instead of a prompt. Run vibe config schema and consider strict_config = true so misspelt keys fail at start, not mid-session.
  • Claude Code v2.1.311 + v2.1.312: Upgrade if you hit startup freezes on huge CLAUDE.md items, stuck interrupts behind MCP/skills, Write eating a large rules file, or skills vanishing after cd. Standard-context chats that crossed ~200K tokens should compact and continue instead of demanding 1M-context credits. Do not trust effort labels in the spinner/OTel/transcript until this pair of releases — they could name a level the model had not applied yet.
  • Antigravity 1.4.8–1.4.9: Paste screenshots with the terminal’s own shortcut; install wl-clipboard on Wayland if the CLI names it. Use /diff [ ] and treat >1 MB untracked files as listed-only. Validate plugin names as lowercase kebab-case before you try to publish.
  • Windsurf v3.11.228: Remote-SSH/WSL users should confirm the Agent Window folder picker and citation links now stay on the remote side.
  • Kilo v7.8.20 is a pre-release: useful if compaction was firing early; do not treat it as stable.

For teams

  • Copilot permissions (policy, not a personal toggle): Assisted is GA. Enterprise-managed settings can block Allow All while leaving Assisted on, disable Assisted entirely, and choose the default mode for new sessions. If the default is banned, sessions fall back to manual approval. Roll this with a written default — “clearly safe” is model-classified, not a static allowlist.
  • Codex security: The marketplace URL-validation gap is the team-relevant fix in rust-v0.165.0. Pair it with the new Vertex provider so GCP traffic is an explicit gcp provider, not a one-off config fork. Fresh TUI sessions now honor the server’s default approval reviewer when nobody overrode it.
  • Mistral Vibe: outside_workdir = "deny" (global or per tool) keeps the agent moving after a refusal. strict_config / VIBE_STRICT_CONFIG=1 is the CI-friendly way to reject unknown keys (non-boolean values like 2 are rejected too).
  • Claude Code in orgs: oidc.user_id_claim matters if Entra (or similar) does not uniquely identify people with sub. The VS Code sign-in bug that dropped managed settings and org policy for the rest of the session is fixed in v2.1.312 — pin that before you debug “policy vanished.” Self-hosted runner idle hold (--hold-idle-file, --max-hold-min) is for hosts that still report leftover processes.
  • Windsurf: The “Devin for Cloud” team setting is gone; Cloud availability is account-gated in both Agent Window and IDE mode. Tell org admins so they do not hunt a removed toggle.
  • Factory Droid: Admins pick plugins from registered marketplaces instead of typing names (v0.251.0). Self-hosted GitHub/GitLab token-refresh races were disconnecting connections. Source is an HTML changelog, not a GitHub tag body.
  • Kilo: The zod bump addresses a memory-exhaustion advisory in the VS Code extension — still a pre-release.
  • Open proposal (team, P5): Remove the unpublished OpenCode GitHub Action and migrate @opencode/ai imports — relevant if you jump to OpenCode v2.2.0.

What to ignore

  • Qwen Code sdk-typescript-v0.1.24: A stack of “this SDK bundles CLI 0.26.2 … 0.23.2” lines, not a product changelog. 91 extra lines omitted.
  • Augment Code v1.2.0-prerelease.202610271512: Install-script and unsigned -sea binary notes, not assistant behavior.
  • Codex rust-v0.166.0-alpha.5: Title-only “Release 0.166.0-alpha.5”.
  • Omitted bodies: Mistral (+76), OpenCode v2.2.0 (+79), Claude v2.1.311 (+87) / v2.1.312 (+43), Copilot blog (+18). Do not plan from guessed leftovers.
  • Factory Droid / Windsurf / Copilot blog: Useful, but HTML/blog — prefer the GitHub tags above when they overlap.
  • OpenCode v1.19.5: One TUI hang fix; not the v2.2.0 story.
  • Noise: 1 source is reporting errors; 54% GitHub/changelog mix means you should click through before you pin.

Watch next

  • OpenCode v2.2.0 desktop-plugin and breaking surface — and whether teams execute the unpublished GitHub Action / @opencode/ai import proposal.
  • Codex 0.166 alphas growing a real changelog; Vertex + Terra + memory v2 behavior in mixed worktree setups.
  • Copilot Fusion Auto/High/Max plus Assisted Permissions defaults once enterprise policies land.
  • Claude compaction vs 1M-credit messaging, and whether CLAUDE.md/paths: skill fixes hold after cd and auto-compact.
  • Antigravity plugin --strict publish failures (name/logo) as marketplaces get used.
  • Still-open radar proposals: pin Cline v4.1.26 local/cloud models after the catalog swap (everyone, P4); Grok CLI harness/TUI (P2); OpenCode PR #38252 verification videos (P2).

How to use DevAgentRadar

This brief is a public cut of the same evidence window the radar scores: new (last 36 hours) first, then versioned GitHub-style signals over blogs. mustKnow is a ranking hint that the item affects almost every daily user of that tool — always cite the release, not the badge. Ignore omitted bodies, prerelease tags with empty notes, and SDK “bundles CLI x.y.z” dumps. Developers should pin from the version column and the concrete flags above; teams should treat permissions, OIDC, marketplace URL checks, and removed settings as policy changes. Re-read tomorrow: 22 releases is a noisy day, and several of the highest-impact notes still have large omitted tails.

Evidence appendix

  • New in the last 36 hours: 22 release(s) from 13 tool(s)
  • Evidence window: new releases first, then top curated signals (versioned releases preferred)
  • Assistants tracked: 29
  • Signals in this brief: 40
  • Trusted source mix (GitHub/changelog vs HTML): 54%
  • Open improvement proposals: 4
  • Sources reporting errors: 1

High-signal releases used

  • Mistral Vibe v3.0.3: Skills added or edited on disk are picked up by running sessions without /reload · The footer shows the active model and its thinking level next to the token — source

  • OpenCode v2.2.0: Create, install and share Desktop plugins (experimental) ([#55246](https://github.com/anomalyco/opencode/pull/5 — source

  • Claude Code v2.1.311: Added --hold-idle-file and --max-hold-min to self-hosted-runner, to keep an idle session while your host reports processes it left running · Added a tip f — source

  • OpenAI Codex CLI rust-v0.165.0: Added a built-in Google Cloud Vertex AI provider, configured with model_provider = "gcp". (#56265) · Added GPT-6.1 Terra to the model catalogs. (#57337) · Add — source

  • GitHub Copilot CLI v1.0.104: 2026-10-27 · Managed model "fusion" now starts sessions on Auto and applies fusionTier settings · Interactive and SDK Autopilot sessions keep waiting for attach — source

  • Qwen Code sdk-typescript-v0.1.24: This SDK release bundles CLI version: 0.26.2 · Source: CLI built from source (same branch/ref as SDK) · --- · This SDK release bundles CLI version: 0.26.1 · Sou — source

  • Google Antigravity 1.4.9: Added image pasting through your terminal's own paste shortcut, such as Cmd+V or Ctrl+Shift+V with only an image copied, and by dragging image files into th — source

  • Google Antigravity 1.4.8: Added [ and ] to the Per Turn tab in /diff to jump to the first file of the previous or next turn, wrapping around at either end, in both the file list — source

  • Claude Code v2.1.312: Added oidc.user_id_claim to the Claude apps gateway, to identify people by an id_token claim other than sub, such as Microsoft Entra ID's oid · Added clic — source

  • Kilo Code v7.8.20 — (pre-release): #15482 ab43c7d - Le — source

  • GitHub Copilot CLI v1.0.105: 2026-10-27 · Selecting Copilot Fusion High or Max in /model now works from long-context sessions — source

  • Factory Droid v0.250.0 — · Desktop v0.207.0 (October 27, 2026): Collapsible long messages, pull request state on sessions, Slack fixes, and CLI and app fixes · Long message collapsing - A long message you sent now starts — source

  • OpenCode v1.19.5: Failed TUI worker requests now return an error instead of leaving the caller hanging. (@Nowaker) · Thank you to 1 community contributor: · @Nowaker: · fix(o — source

  • Augment Code v1.2.0-prerelease.202610271512 — auggie-v2 v1.2.0-prerelease.202610271512: Install the latest release (macOS/Linux): · curl -fsSL https://github.com/augmentcode/auggie/releases/latest/download/install.sh | bash · Install a specific ver — source

Open proposals

Was this guidance useful?

Anonymous · one vote per visitor · re-click to clear. Helps improve digests—not a product ranking.