Radar brief — 2026-10-30

What the evidence shows

GitHub-tagged releases dominate the useful signal. HTML changelogs (Factory Droid, Kiro, Windsurf) are thinner. One tracked source reported errors, so this window is not a complete census. Several notes omit a large tail of changes (bodyOmitted); those tails are not inferred below.

For developers

• Codex CLI rust-v0.166.0: Use transcript selection/search in long runs. If you queue work, learn codex queue --resume. On Vertex or Bedrock, check whether GPT-6.1 Terra is actually available to you before switching defaults. Run codex doctor --network-only when WebSocket/config issues show up. Resume/fork should no longer drop approvals, images, or reasoning-token counts.
• Claude Code v2.1.314: Turn on permissions.blockWritesOutsideWorkingDirectories if you want Write/Edit/NotebookEdit confined to working directories in every mode. If an org caps effort, expect a retry at a lower level rather than a stuck “Invalid effort level” loop. claude -p should now exit 1 with an error on startup failure—fix scripts that treated empty success as OK. Bedrock image-heavy threads should compact instead of dying with “Input is too long.”
• OpenCode: Try /goal for reviewer-gated loops; pause/resume/clear as needed. Image generation is now default when an image-capable provider is connected—set experimental.image_generate.model if you care which one. If your code imports @opencode/ai, remove fal / Black Forest Labs / Replicate / Stability entry points; this does not affect the CLI/Desktop/HTTP API.
• Crush v0.99.0: Reload config and confirm the Catwalk v3 migration (openai / openai-compat / anthropic should still load). Update provider add / model add scripts: --type completions|responses|messages, --thinking, --max-attachments. Audit hook names against the known-event list so typos fail closed.
• Goose v1.57.0: HTTP (non-HTTPS) allowlist targets and unvalidated redirects will now block. OpenRouter users with :free / :nitro suffixes should see the base model resolve. Custom-provider vision should follow catalog_provider_id.
• Antigravity: For hooks, return terminationBehavior: "terminate" to stop a turn before the model sees sensitive prompts. In scripts, read finished_reason so a timeout/cancel is not treated as a complete answer. Compaction and subagent identity after /compact are worth a regression pass.
• Qwen CUA on Windows: do not enable UIAccess until the worker is signed and trusted on the machine. Keep MCP_MODEL_PAYLOAD_FILTER off unless you intend to filter MCP payloads.
• Factory Droid / Kiro: quality-of-life only (doctor, MCP action latency, Windows system-wide installer, drag-drop). Prioritize only if those are your daily surfaces.

For teams

• Path and permission policy: Claude’s blockWritesOutsideWorkingDirectories is the clearest new control in this window—decide the org default before agents write outside the repo. Goose’s HTTPS-only allowlist plus redirect validation is a fleet-wide break for any HTTP tool endpoint.
• Gateway and Bedrock: Claude apps gateway can pin upstreams to IdP groups (including failover). Enable Bedrock guardrail_trace to see which filter fired without logging matched text.
• Billing: Antigravity now asks for Gemini subscription vs Pay As You Go after Google Cloud sign-in—document the intended choice so developers do not pick PAYG by accident.
• SDK / embedder break: OpenCode’s provider removals hit library importers of @opencode/ai, not the app. Crush’s Catwalk v3 is auto-migrated, but hosted-editor integrations get new theming and hook surface area—retest any in-product Crush host.
• Cloud agents: Kilo’s JetBrains v7.2.1-rc.1 puts hosted Cloud sessions in Agent Manager with listed hourly compute price. Treat as RC: reconnection and compaction loop fixes are the reason to trial, not to standardize yet.
• Qwen CUA rollouts: macOS is codesigned/notarized; Linux is unsigned; Windows requires local signing/trust. Do not push the Windows worker as-is.
• Open proposals still on the board (not new releases): pin Local/Cloud models after the Cline catalog swap; Vibe 3.0.3 skill live-reload / workdir deny (team); Grok CLI harness publication; OpenCode PR #38252 verification videos.

What to ignore

• Qwen sdk-typescript-v0.1.25 / v0.1.26: visible bodies are CLI-bundle stamps, not a product story. High omitted-change counts, low demonstrated impact.
• Kilo v7.8.25: npm user-agent preservation only.
• OpenCode process-daemon-v0.4.0: PTY protocol bump for @opencode/pty consumers, not general users.
• Augment v1.2.0-prerelease.*: packaging/SEA notes; macOS -sea is unsigned here.
• Windsurf v3.11.231: one Devin Local Allow/Reject consistency fix.
• Omitted tails: Codex (+132), Claude (+76), Qwen CUA (+74), Crush (+62), OpenCode 2.2.1 (+43) are not characterized beyond the listed bullets.
• HTML-only notes (Factory Droid, Kiro, Windsurf) are weaker than GitHub tags. One source in this window reported errors.

Watch next

• Whether GPT-6.1 Terra in Codex catalogs is selectable in your Vertex/Bedrock accounts, and whether the omitted Codex tail includes further model or sandbox changes.
• OpenCode default image generation plus remaining @opencode/ai import breakages after the 2.2.1 provider purge.
• Crush Catwalk v3 hook coverage in real host editors (typo-fail on unknown events will surface quickly).
• Claude idle compaction at 200K+ tokens: quality of the reused summary after cache expiry.
• Goose allowlist false positives on HTTPS redirects.
• Antigravity PreInvocation terminate as a secret-prompt gate, and whether finished_reason lands in CI wrappers.
• Qwen Windows UIAccess signing and MCP_MODEL_PAYLOAD_FILTER default-off behavior in managed environments.
• Resolution of the four open proposals, especially Cline model pinning (P4, everyone) and Vibe workdir deny (P5, team).

How to use DevAgentRadar

This brief is a public, evidence-first cut of what coding assistants actually shipped—not a vendor roundup. New (last 36 hours) is the news; older items appear only when they still change how you should work this week. Prefer GitHub/changelog version tags over marketing pages. If a row says changes were omitted, assume we did not see them. Developers should act on flags, commands, and breakages in their own toolchain; teams should act on permission, gateway, billing, and fleet-default changes. Ignore prerelease packaging noise and single-line HTML patches unless that surface is yours. Re-read the next brief for follow-through on omitted tails, catalog models, and the open proposals.

Evidence appendix

• New in the last 36 hours: 25 release(s) from 14 tool(s)
• Evidence window: new releases first, then top curated signals (versioned releases preferred)
• Assistants tracked: 29
• Signals in this brief: 40
• Trusted source mix (GitHub/changelog vs HTML): 54%
• Open improvement proposals: 4
• Sources reporting errors: 1

High-signal releases used

• OpenAI Codex CLI rust-v0.166.0: Added keyboard-driven transcript selection with word, line, and page motions, integrated search, and configurable shortcuts. (#57221, #57222, #57223, #57224) · — source

• Qwen Code cua-driver-rs-v0.27.0 — cua-driver-rs v0.27.0: Qwen CUA Driver prebuilt binaries · (vendored under packages/cua-driver). · macOS: codesigned + notarized universal binary + QwenCuaDriver.app · **Linux — source

• Qwen Code sdk-typescript-v0.1.25: This SDK release bundles CLI version: 0.26.3 · Source: CLI built from source (same branch/ref as SDK) · --- · This SDK release bundles CLI version: 0.26.2 · Sou — source

• Qwen Code sdk-typescript-v0.1.26: This SDK release bundles CLI version: 0.26.4 · Source: CLI built from source (same branch/ref as SDK) · --- · This SDK release bundles CLI version: 0.26.3 · Sou — source

• Claude Code v2.1.314: Added permissions.blockWritesOutsideWorkingDirectories: Write, Edit and NotebookEdit refuse paths outside the working directories in every permission mode · A — source

• OpenCode v2.2.1: Keep Working Toward a Goal: Run /goal <objective> in the TUI or Desktop to let the session continue until a reviewer confirms the objective is met. · Use — source

• Crush v0.99.0: A big one! Crush now runs on Catwalk v3, hooks can see every part of a run, and editors that host Crush get a whole new set of tools to feel right at home. · Cr — source

• Goose v1.57.0: Allowlist: require HTTPS and validate redirects, block on policy failure #12619 · Allow callers to supply Goos — source

• Google Antigravity 1.4.11: Added a billing model choice after you sign in with Google Cloud, so you can pick either a Gemini subscription or Pay As You Go. · Added terminationBehavior t — source

• Kilo Code jetbrains/v7.2.1-rc.1: Added hosted Kilo Cloud sessions to Agent Manager. · Cloud workspaces now share the same editor chrome as local and worktree sessions, including session rows, d — source

• OpenCode v2.2.2: Image Generation by Default: When a connected provider supports image models, agents can now use experimental_image_generate without additional configurat — source

• Google Antigravity 1.4.10: Improved streaming of agent replies: lines that scroll off the top of the screen are now scrolled into your terminal's scrollback instead of repainting the whol — source

• Kilo Code v7.8.25 — (pre-release): #15274 57d4c30 Than — source

• Augment Code v1.2.0-prerelease.202610291513 — auggie-v2 v1.2.0-prerelease.202610291513: Install the latest release (macOS/Linux): · curl -fsSL https://github.com/augmentcode/auggie/releases/latest/download/install.sh | bash · Install a specific ver — source

Open proposals

• Enable skill live-reload, post_agent match, and workdir deny in Vibe 3.0.3 (audience: team, P5)
• Pin Local and Cloud models after Cline v4.1.26 catalog swap (audience: everyone, P4)
• Improve with xAI Grok CLI (Grok Build) c68e39f: Publish harness and TUI open-source (audience: everyone, P2)
• Improve with OpenCode pr-38252-videos: pr-38252-videos PR #38252 verification videos (audience: everyone, P2)