Radar brief — 2026-10-31

What the evidence shows

New GitHub-style releases first. Several HTML changelogs are included later; trusted GitHub/changelog mix for this brief is only 54%, and one source in the window reported errors.

HTML / docs changelogs (treat as noisier than the GitHub tags above):

For developers

• Kimi Code daily users: if agents read large generated files, dumps, or vendored sources, set max_chars under [read] in config.toml now. The new 100k / ~25k-token ceiling will silently truncate work that used to fit.
• Codex CLI: upgrade to rust-v0.166.0 for codex queue --resume, transcript search/selection, and codex doctor --network-only. Check whether GPT-6.1 Terra appears in your bundled / Vertex / Bedrock catalog before changing defaults. Confirm resume/fork still shows the approvals you already accepted.
• OpenCode: v2.2.3 is the Claude Code bridge (claude auth login → Claude Agent in /connect); v2.2.4/v2.2.5 add persistent terminals, experimental artifacts, percentage compaction buffers, and worktree shortcuts. If you maintain @opencode/plugin UIs, bump to OpenTUI 0.8.0 before 2.2.3 — ScrollBox children are facades, not renderables.
• Claude Code: use CLAUDE_CODE_DISABLE_ULTRATHINK and CLAUDE_CODE_SUBAGENT_EFFORT when you need deterministic spend/effort. Turn on permissions.blockWritesOutsideWorkingDirectories if you want Write/Edit refused outside the working tree in every mode. Stop relying on Opus 4.8 fast mode; after 30 Nov 2026 those requests error with no fallback — plan the move to Opus 5.5.
• Crush: let v0.99.0 migrate provider types on load, then re-add models with --thinking always|never|toggleable and --max-attachments. Subscribe hooks to session/turn/permission events; unknown event names now fail closed.
• Vibe: set preserve_api_base = true on split-horizon proxies; use /whoami to see whether the shell, .env, or keyring won. vibe -p --system-prompt-file and --model ALIAS keep one-off runs from rewriting your default. /fork is the new name for /branch.
• Antigravity: use PreInvocation terminate to block secrets before they hit the model, and read finished_reason in JSON output so scripts can tell a timeout from a real answer. Mark plugin API keys "optional": true only for services that actually work unauthenticated.
• Qwen CUA: on Windows, do not enable UIAccess until the worker is signed and trusted on that machine. Leave CUA_DRIVER_RS_COORDINATE_SPACE and MCP_MODEL_PAYLOAD_FILTER off unless you need them.
• Kiro CLI: the elevated-privilege warning is informational. Disable it only with kiro-cli settings app.warnOnElevatedPrivileges false if you intend to run as root/Administrator.

For teams

• Claude Code gateway: pooled_budget is a shared monthly group cap on top of each member’s limit. managed.policy_mode: layered applies every matching policy, not the first hit. Use upstream groups to pin IdP groups (including on failover). On Bedrock, guardrail.input_tagging (and all_messages_and_system) plus guardrail_trace are the controls/audit pair — trace logs the filter that fired, not the matched text.
• Claude Code runtime: blockWritesOutsideWorkingDirectories is the org-wide write fence. Pair it with the idle-compaction behavior in VS Code / Claude Desktop so 200K+ parked chats do not blow cache and then fail. Communicate the Opus 4.8 fast-mode removal date (30 Nov 2026) to anyone on speed SKUs.
• Kimi Code: the read cap is a fleet behavior change. Teams that dump logs or whole modules into context need a documented max_chars override, or agents will start working from truncated files.
• OpenCode: if you run multiple opencode serve processes, schedules are coordinated to fire once — verify that is what you want before enabling. Treat experimental artifacts as local-serving HTML, not a production CMS.
• Windsurf: Cyber Verification Program is now a per-listed-member toggle in Devin Local. Off means ordinary team Anthropic routing and retention — make sure security and legal agree who may switch it.
• Kiro: V3 now enforces org MCP and web-tool policy. The autocomplete desktop app is still being retired on macOS; expect more users to land on standalone CLI after an update check.
• Antigravity: the post-login billing choice (Gemini subscription vs Pay As You Go) is a spend-control moment — do not leave it to whoever happens to sign in first.
• Qwen / Augment packaging: unsigned Windows UIAccess workers and unsigned macOS SEA assets are deployment risks, not “just installers.”

What to ignore

• Augment Code v1.2.0-prerelease.*: install.sh / Node SEA / checksum notes, not a product change worth acting on. macOS -sea is unsigned.
• Omitted tails: Codex (+132), OpenCode 2.2.3 (+55), Claude 2.1.316 (+62) and 2.1.314 (+76), Crush (+62), Vibe (+52), Qwen (+74) — do not infer features from those counts.
• OpenTUI 0.8 internals unless you ship OpenCode plugins.
• Windsurf v3.11.238 if you are not an enterprise admin who listed people for Anthropic’s Cyber Verification Program — that is the entire published note.
• Kiro IDE 1.4.62 HTML page: convenience installer/UX; evidence marks a stale-copy risk. Prefer the CLI 2.35.0/2.35.2 notes for policy and retirement.
• Qwen’s long change list beyond the CUA binaries and the two env flags named in the release body; the tag is also marked prerelease.

Watch next

• Open proposals on the radar: Codex queue --resume + GPT-6.1 Terra (developer, P5); Crush --thinking and session/turn/permission hooks (developer, P4); pin Local/Cloud models after a Cline catalog swap (everyone, P4); xAI Grok CLI harness/TUI (everyone, P2); OpenCode PR #38252 verification videos (everyone, P2). Those Cline/Grok items are follow-ups, not releases in this evidence set.

• Claude Code: Opus 4.8 fast mode hard-errors on 30 Nov 2026 with no fallback.

• Kiro: further macOS autocomplete-desktop → CLI cutover.

• OpenCode: whether Claude Agent login stays a thin auth bridge or becomes the default model path; whether experimental.artifacts ships for real.

• Crush Catwalk v3: whether auto-migrated openai / anthropic types surprise custom providers.

• Codex: real availability of GPT-6.1 Terra on Vertex and Bedrock, not just catalog rows.

How to use DevAgentRadar

This brief is a public cut of the same evidence window the radar uses: new GitHub-style releases first, then other curated signals. It is judgment from those notes, not a vendor roundup.

1. If you use Kimi, Codex, OpenCode, Claude Code, Crush, or Vibe, treat the matching row as an upgrade/config checklist today.
2. If you run a team gateway, Bedrock guardrails, org MCP policy, or pooled spend, start in For teams — those are the controls that change other people’s sessions.
3. Ignore HTML-only one-liners and prerelease packaging unless they match your exact product surface.
4. Open the five proposals if you want the radar to track a follow-up (resume flows, Crush hooks, model pins) instead of waiting for the next noisy changelog.
5. Re-read this page against the next 36-hour window; isNew items here age off, and omitted +N more changes stay unknown until a later tagged release names them.

Evidence appendix

• New in the last 36 hours: 23 release(s) from 14 tool(s)
• Evidence window: new releases first, then top curated signals (versioned releases preferred)
• Assistants tracked: 29
• Signals in this brief: 40
• Trusted source mix (GitHub/changelog vs HTML): 54%
• Open improvement proposals: 5
• Sources reporting errors: 1

High-signal releases used

• OpenAI Codex CLI rust-v0.166.0: Added keyboard-driven transcript selection with word, line, and page motions, integrated search, and configurable shortcuts. (#57221, #57222, #57223, #57224) · — source

• OpenCode v2.2.3: Use Claude Code in OpenCode: Install Claude Code, run claude auth login, then select Claude Agent in /connect to use your Claude Code login and mode — source

• Claude Code v2.1.316: Added CLAUDE_CODE_DISABLE_ULTRATHINK, which turns the ultrathink keyword off · Added pooled group budgets to the Claude apps gateway: one monthly budget tha — source

• Qwen Code cua-driver-rs-v0.27.0 — cua-driver-rs v0.27.0: Qwen CUA Driver prebuilt binaries · (vendored under packages/cua-driver). · macOS: codesigned + notarized universal binary + QwenCuaDriver.app · **Linux — source

• Mistral Vibe v3.0.4: /release-notes (alias /whatsnew) browses the release notes of every Vibe version in a searchable, full-screen view. · Provider option `preserve_api_base = t — source

• Claude Code v2.1.314: Added permissions.blockWritesOutsideWorkingDirectories: Write, Edit and NotebookEdit refuse paths outside the working directories in every permission mode · A — source

• OpenCode v2.2.4: Persistent Desktop Terminals: Desktop terminals now belong to the session, survive server restarts with their scrollback, and stay synchronized with the TUI — source

• OpenCode v2.2.5: Worktree and Shell Mode Shortcuts: Press ⌘⌥O on macOS or Ctrl+Alt+O on Windows and Linux to choose a worktree, and ⌘⌥B or Ctrl+Alt+B to choose its b — source

• Crush v0.99.0: A big one! Crush now runs on Catwalk v3, hooks can see every part of a run, and editors that host Crush get a whole new set of tools to feel right at home. · Cr — source

• Google Antigravity 1.4.11: Added a billing model choice after you sign in with Google Cloud, so you can pick either a Gemini subscription or Pay As You Go. · Added terminationBehavior t — source

• Kimi Code @moonshot-ai/kimi-code@2.4.1: #4553 9140ea0 — source

• Google Antigravity 1.4.12: Added "optional": true for API key providers in a plugin's auth.json, for services that work without a key but raise rate limits with one: when you haven't — source

• Augment Code v1.2.0-prerelease.202610301510 — auggie-v2 v1.2.0-prerelease.202610301510: Install the latest release (macOS/Linux): · curl -fsSL https://github.com/augmentcode/auggie/releases/latest/download/install.sh | bash · Install a specific ver — source

• Windsurf v3.11.238: v3.11.238 October 30, 2026 · Members an enterprise admin has listed for Anthropic’s Cyber Verification Program can now switch the program on or off for themselv — source

Open proposals

• Resume unloaded Codex threads with codex queue --resume and select GPT-6.1 Terra (audience: developer, P5)
• Re-add Crush models with --thinking and subscribe hooks to session, turn, and permission e (audience: developer, P4)
• Pin Local and Cloud models after Cline v4.1.26 catalog swap (audience: everyone, P4)
• Improve with xAI Grok CLI (Grok Build) c68e39f: Publish harness and TUI open-source (audience: everyone, P2)
• Improve with OpenCode pr-38252-videos: pr-38252-videos PR #38252 verification videos (audience: everyone, P2)