Radar brief — 2026-11-02

What the evidence shows

Today’s isNew signals first. None are marked must-know. GitHub tags beat HTML changelogs when both exist; Kiro’s items are changelog-only. One tracked source reported errors in this window, and several GitHub notes omit dozens of extra commits — treat those as incomplete, not empty.

New in the last 36 hours

Still relevant this week (versioned GitHub preferred; omitted bodies not guessed)

Mistral Vibe v2.26.1, Qwen Code v0.26.3, and Kimi Code 2.2.0 are in the same window (session lock ownership, qwen context-window detection, opt-in NotifyUser) but are secondary to the rows above.

For developers

• Qwen Code v0.26.5: Update if you use Web Shell/Desktop. Expect Generated UI on unless you turn it off; interactive cards become removable context. Use the new paged SQL history for exact command lookup. Watch the status-bar pill for background agent count.
• Copilot CLI v1.0.106-2: Prerelease only. If you hit hung HTTP MCP on startup or duplicated /resume sessions, this is the patch. Keep mcp-config.json as a symlink if that is how you manage it. Screen-reader users should re-test error vs. normal speech.
• Kiro 2.36.0: In an interactive V3 session, run /permissions → Policies. Enable Approve for me only in repos where you want that preset written into the workspace permissions file. If the page says it is unavailable, you still get a prompt per uncovered action.
• Kiro models: Restart the IDE/CLI (kirocrew restart for Crew, refresh Web) so Opus 5.5 / GPT-5.6 Sol leave Experimental. Credit multipliers and windows did not change in this note.
• Codex rust-v0.167.0-alpha.3: Do not plan work from the tag. For real notes stay on rust-v0.166.0: codex queue --resume, GPT-6.1 Terra, codex doctor --network-only.
• OpenCode v2.2.3: To reuse a Claude Code login, install Claude Code, claude auth login, /connect → Claude Agent. Plugin authors must bump to OpenTUI 0.8.0+ before rebuilding.
• Claude Code v2.1.316: Set CLAUDE_CODE_SUBAGENT_EFFORT if subagents should not inherit session effort. If you still use Opus 4.8 fast mode, schedule a move to Opus 5.5 before 30 Nov 2026.
• Kimi Code 2.3.0: Update every skill invocation and docs to <pluginId>:<skillName>. Bare names will miss.

Open developer proposals on the radar: Claude Code subagent effort, Codex queue --resume + GPT-6.1 Terra, Crush --thinking hooks, Cline model pinning after the v4.1.26 catalog swap.

For teams

• Kiro Approve for me is workspace-scoped, not user-global. Review the permissions file in each repo before rolling V3 interactive sessions; deny/ask/allow still override. Pair with the forthcoming org-control changelog Kiro already tees up (“Elevated-Privilege Warning and Organization Controls in V3”) rather than assuming a fleet-wide preset.
• Kiro model GA: Opus 5.5 and GPT-5.6 Sol are production-labeled; the Excluded Models indemnity exception no longer applies. Capacity is called out as more dependable; commercial terms in this note are otherwise unchanged — confirm legal/procurement against that indemnity drop.
• Mistral Vibe v3.0.0: Use managed config enable_mcp if you must block add/remove/toggle/login/tool registration, including plugin-provided servers. Shared-only API keys already refuse connectors that need a user login (vibe --setup).
• Claude Code gateway: Pooled monthly group budgets (pooled_budget) sit on top of per-member limits. managed.policy_mode: layered applies every matching policy, not first-match. Bedrock prompt-attack filters need guardrail.input_tagging. Fast Opus 4.8 dies 30 Nov 2026 with hard error, no fallback.
• Copilot CLI v1.0.100: --disable-client-telemetry for locked-down fleets; --trust-folder for one-off -p/piped runs; managed plugin policy now updates live sessions. Prefer this over chasing the 1.0.106-2 prerelease until it is tagged stable.
• Codex rust-v0.164.0 / v0.166.0: Enterprise MCP can use Codex account grants or secret-bearing OAuth. Approvals persist across resume/fork in 0.166.0 — audit that if your control story assumed a reset.

What to ignore

• Codex rust-v0.167.0-alpha.3 as a product signal. The body is a tag name.
• Inventing the omitted tails (54 / 85 / 132 / 62 / …). Those commits are not in evidence.
• Treating Kiro’s title extras (“Subcommand Approval Rules”, “ACP Engine Setting”) as specified behavior. Only Approve for me is described.
• Running Copilot CLI v1.0.106-2 in production because it is on the radar — it is a prerelease patch train.
• OpenCode v2.2.0 experimental Desktop plugins and Kimi NotifyUser (off by default) unless you opted in.
• Marketing-shaped HTML copy when a GitHub tag exists. Trusted mix this brief is 54% GitHub/changelog vs HTML; Kiro is the main HTML-only new item.
• Crush / Cline / xAI Grok / OpenCode video proposals as if they were shipped releases — they are open proposals, not evidence of a version.

Watch next

• Whether Codex 0.167 gets real notes after alpha.3.
• Claude Code Opus 4.8 fast mode removal on 30 Nov 2026.
• Kiro’s next listed changelog: elevated-privilege warning and organization controls in V3.
• Mistral Vibe v3.0.0 remaining 85 changes, especially anything that matches the high breaking/MCP/permissions tags on that release.
• Copilot CLI 1.0.106-x promoting off prerelease.
• The six open proposals (Claude subagent effort, Codex queue resume, Crush hooks, Cline catalog pin, xAI Grok CLI source, OpenCode PR videos).
• The one source reporting errors in this window — verify any singleton HTML changelog before you change policy.

How to use DevAgentRadar

DevAgentRadar is a public, evidence-first feed of AI coding assistants. It ranks what shipped, not what was announced.

• Today = signals with isNew (last 36 hours). Lead with those; if the set is empty, the brief will say it was quiet.
• Must-know (when present) means “almost every daily user of that tool should care.” It is a ranking hint. Always cite the release, not the hint.
• Prefer versioned GitHub/changelog rows over blogs. If bodyOmitted is set, do not assume the rest is harmless — it is simply unread.
• Use For developers for local CLI/IDE actions; For teams for policy, budget, MCP lock-down, and indemnity.
• Open proposals are suggested follow-ups, not shipped facts. Ignore scores, judge fingerprints, and marketing pages that are not in the evidence table.

Evidence appendix

• New in the last 36 hours: 5 release(s) from 4 tool(s)
• Evidence window: new releases first, then top curated signals (versioned releases preferred)
• Assistants tracked: 29
• Signals in this brief: 40
• Trusted source mix (GitHub/changelog vs HTML): 54%
• Open improvement proposals: 6
• Sources reporting errors: 1

High-signal releases used

• Qwen Code v0.26.5: See the complete change list below. · No known breaking changes. · Adds bounded SQL history queries for Managed local H2 and Hosted MySQL, enabling paged rece — source

• GitHub Copilot CLI v1.0.106-2: Fixed · With --screen-reader, failed and rejected tool calls, errors such as an unknown command, and warnings now begin with "Error:" or "Warning:" instead — source

• OpenAI Codex CLI rust-v0.167.0-alpha.3 — alpha.3: Release 0.167.0-alpha.3 — source

• Kiro 2.36.0 — Approve for Me, Subcommand Approval Rules, and an ACP Engine Setting: October 29, 2026 Approve for Me, Subcommand Approval Rules, and an ACP Engine Setting · 2.36.0 · This release adds Approve for me to interactive V3 sessions. · — source

• Kiro — Generally Available: Claude Opus 5.5, GPT-5.6 Sol: October 30, 2026 Generally Available: Claude Opus 5.5, GPT-5.6 Sol · Claude Opus 5.5 and GPT-5.6 Sol are generally available with full Kiro support. · Expanded — source

• Mistral Vibe v3.0.0: The app-server reports each model's compaction threshold, so a client can show how full a session's context is before it compacts. · Desktop can import projects — source

• GitHub Copilot CLI v1.0.100: 2026-10-19 · Add --disable-client-telemetry flag to turn off client telemetry uploads from the CLI · Add --trust-folder for one-off prompt-mode sessions started — source

• OpenAI Codex CLI rust-v0.166.0: Added keyboard-driven transcript selection with word, line, and page motions, integrated search, and configurable shortcuts. (#57221, #57222, #57223, #57224) · — source

• OpenCode v2.2.3: Use Claude Code in OpenCode: Install Claude Code, run claude auth login, then select Claude Agent in /connect to use your Claude Code login and mode — source

• Mistral Vibe v2.26.1: The app-server reports which process holds a stored session, and pushes a change when that process lets go of it, so a client can show a session open elsewhere — source

• Claude Code v2.1.316: Added CLAUDE_CODE_DISABLE_ULTRATHINK, which turns the ultrathink keyword off · Added pooled group budgets to the Claude apps gateway: one monthly budget tha — source

• Kimi Code @moonshot-ai/kimi-code@2.3.0: #4294 3f80896 — source

• OpenAI Codex CLI rust-v0.164.0: Save reusable prompts and slash commands in ten numbered /presets slots, with a keyboard menu for quick access. (#54380, #54381) · Set model, reasoning effort — source

• Qwen Code v0.26.3: See the complete change list below. · No known breaking changes. · Improves tool call recovery, memory extraction, and context-window detection for qwen model — source

Open proposals

• Set CLAUDE_CODE_SUBAGENT_EFFORT so subagents no longer inherit session effort (audience: developer, P5)
• Resume unloaded Codex threads with codex queue --resume and select GPT-6.1 Terra (audience: developer, P5)
• Re-add Crush models with --thinking and subscribe hooks to session, turn, and permission e (audience: developer, P4)
• Pin Local and Cloud models after Cline v4.1.26 catalog swap (audience: everyone, P4)
• Improve with xAI Grok CLI (Grok Build) c68e39f: Publish harness and TUI open-source (audience: everyone, P2)
• Improve with OpenCode pr-38252-videos: pr-38252-videos PR #38252 verification videos (audience: everyone, P2)