Radar brief — 2026-11-06

What the evidence shows

Versioned GitHub releases first. Several notes omit a large tail of changes (bodyOmitted); those omitted items are not inferred here. One tracked source reported errors; treat HTML changelogs as weaker than GitHub tags.

Unversioned / HTML changelogs (weaker than GitHub tags):

• Cursor (Nov 5, 2026 changelog): cloud agents can scaffold, add Postgres, put auth behind Cursor SSO, take secrets, and publish a live link. No version pin in the evidence.
• Kiro (Nov 4): Claude Haiku 5.5 and Kimi K3 are GA across IDE, CLI, Crew, and Web. Haiku 5.5 leaves the Excluded Models indemnity exception; Kimi K3 stays excluded. Restart IDE/CLI, kirocrew restart, or refresh Web.
• Kiro credit pooling: $20/seat/month adds 500 credits to a shared pool; per-user/group/profile caps; extra credits last one year. New profiles get pooling only. Switching from individual seats cannot be undone.
• Factory Droid v1.4.0 / v1.5.0 (docs changelog): loops on Droid Computers; cheaper long-session refresh; New Session only lists org-allowed Environments; compacted/short transcripts load older messages; PR Babysitter template removed.

For developers

• Codex 0.167.0: Run codex agents --no-daemon. Use the session picker to switch backends (drafts persist). If you are on Vertex, enable gcp_setup_wizard. /experimental for OS proxy. Ctrl+L clears the display; Ctrl+T still has history. Do not assume the 125 omitted notes are cosmetic.
• Crush 0.100.0: Subagents are real (named, background, retargetable). Do not turn on Sysadmin mode (ctrl+p or shift+tab) on a machine you care about — the notes say it can run any command. If you use Yolo, explicitly permissions safe / block / unblock before the first unattended run. Prefer in-app GPG/SSH over pasting secrets into the agent.
• Copilot CLI 1.0.106: /code if you want the same session in VS Code. Check whether GPT-6.1 Terra appears under New models. Set Fusion in copilot config only if you intend to pay for that tier. Turn on sandbox extensions before loading untrusted extension processes. copilot -p --plan no longer tells the model to suggest Shift+Tab (interactive-only).
• Antigravity 1.5.1–1.5.2: Recheck scripts that pass --dangerously-skip-permissions — protected commands now prompt, and Enterprise policy can deny outside-workspace access even when skip-permissions is on. macOS users: Option shortcuts work without terminal Alt mapping; set AGY_CLI_MAC_OPTION_AS_ALT=0 if that breaks muscle memory. Reload remote skills with /skills reload. ACP clients can now see every model on the account, not a fixed editor list.
• Zed 1.27.0: Upgrade for Agent Panel memory/CPU on long threads. Commit-message style now copies your last three commits — fix noisy history before relying on it. Treat 1.28.0-pre as preview (ACP, read_file truncation, opt-in git.auto_fetch.enabled).
• Kimi Code 2.5.1: Upgrade if sessions loop on HTTP 400 with dynamic tools.
• Skip for daily work unless you package them: Qwen SDK bundle tag, Codex alpha.7, OpenCode pty 0.5.0, Augment unsigned SEA prerelease, Kilo 7.8.27.

For teams

• Permission defaults moved. Antigravity 1.5.2 is the one to brief security owners today: skip-permissions is narrower; Gemini Enterprise review can override auto-allow and headless will deny. Crush Sysadmin mode is equivalent to unsandboxed root-for-the-agent — keep it off in shared images and decide who may run permissions unblock.
• Copilot CLI: Decide Fusion tier and sandbox-extensions policy before the CLI setting spreads. COPILOT_SESSION_CWD changes how local MCP/LSP configs expand — pin working directories in runbooks.
• Kiro: Haiku 5.5 is now on the indemnified side of Excluded Models; Kimi K3 is not. Credit pooling is $20/seat → 500 shared credits, prorated the first month, irreversible. Set per-user/group/profile caps before migrating.
• Cursor live apps: Org-wide publish path (DB, SSO auth, secrets, public link). Require an explicit “build an app” prompt in cloud agents and a secrets review before first publish. No version number in the evidence — pin whatever build your fleet actually updated to.
• Factory Droid 1.5.0: New Session now hides Environments that org computer policy forbids. If anyone used the PR Babysitter automation template, it is gone; replace it.
• Zed 1.28.0-pre: git.auto_fetch is off by default; enable only where extra remote traffic is acceptable.

What to ignore

• Kilo Code v7.8.27 (“No notable changes”).
• Codex rust-v0.168.0-alpha.7 and OpenCode process-daemon-v0.5.0 — tags without operator notes.
• Qwen sdk-typescript-v0.1.28 as a feature release; it is a stacked CLI-bundle list.
• Augment SEA prerelease install text, including unsigned macOS assets.
• Crush’s marketing voice (“friendly subagents”, “thing of the past”). The Sysadmin/Yolo permission model is the part that matters.
• Treating Cursor’s live-apps post or Kiro HTML notes as versioned GitHub evidence. One source on the radar reported errors; do not promote thin HTML copy over the GitHub rows above.
• Inventing the omitted tails (125 / 83 / 70 / 50 / 44 / 12 / … lines).

Watch next

• Codex 0.168.0 (alpha.7 already tagged, no notes yet) and whether the command center becomes default.
• Crush subagent + Sysadmin fallout: who ships default-deny permission packs.
• Antigravity skip-permissions / Enterprise-deny behavior in CI and --remote-agent.
• Zed 1.28.0-pre → stable, especially ACP and read_file truncation.
• Copilot CLI: GPT-6.1 Terra availability by account, Fusion pricing in real bills.
• Cursor live-apps: a versioned client release, SSO/secret handling, and whether localhost-to-link is on by default.
• Open proposals still on the board: Cline v4.1.26 local/cloud model pin after catalog swap (P4, everyone); xAI Grok CLI harness/TUI publish (P2); OpenCode PR #38252 verification videos (P2).

How to use DevAgentRadar

This brief is a public snapshot of what actually shipped, ranked from release evidence rather than vendor headlines. Prefer the GitHub version rows; treat blogs and unversioned HTML as secondary. If a note says changes were omitted, stop at the listed items. Developers should map each row to one local action (upgrade, flag, or ignore). Teams should map permission, indemnity, pricing, and environment-policy rows to owners before the next fleet bump. Re-read on the next cycle — isNew here is the last 36 hours, not a ranking of quality.

Evidence appendix

• New in the last 36 hours: 21 release(s) from 14 tool(s)
• Evidence window: new releases first, then top curated signals (versioned releases preferred)
• Assistants tracked: 29
• Signals in this brief: 40
• Trusted source mix (GitHub/changelog vs HTML): 54%
• Open improvement proposals: 3
• Sources reporting errors: 1

High-signal releases used

• OpenAI Codex CLI rust-v0.167.0: Open the agent command center with codex agents --no-daemon. · The command center and session picker now mark unread results (#58238, #58239, #58263, #58264). — source

• Crush v0.100.0: This is a big one! Crush can now run a team of subagents, permissions are much more flexible, and you can now do GPG and SSH auth right inside Crush! Read on fo — source

• GitHub Copilot CLI v1.0.106: 2026-11-05 · Rex terminals render inline images using Kitty direct placements. · Add /code command to open the current session in VS Code · Add a Fusion tier se — source

• Zed AI v1.27.0: This week's release includes syntax highlighting for Go 1.27 generic methods, an option to open README files by default, and AI commit messages that follow your — source

• Zed AI v1.28.0-pre: This week's release includes optional automatic Git fetching, a resizable Refs column in the Git Graph, dragging Git Panel files into terminals and editors, and — source

• Google Antigravity 1.5.2: Added skills from the cloud plugins you connected with /plugin to --remote-agent sessions, so they now appear in the / menu and can be typed at the start — source

• Qwen Code sdk-typescript-v0.1.28: This SDK release bundles CLI version: 0.26.8 · Source: CLI built from source (same branch/ref as SDK) · --- · This SDK release bundles CLI version: 0.26.6 · Sou — source

• Google Antigravity 1.5.1: Changed agy acp to offer every model available to your account to every ACP client, where previously only a fixed list of editors were offered models other th — source

• Kimi Code @moonshot-ai/kimi-code@2.5.1: #4687 2af56d2 — source

• Augment Code v1.2.0-prerelease.202611051212 — auggie-v2 v1.2.0-prerelease.202611051212: Install the latest release (macOS/Linux): · curl -fsSL https://github.com/augmentcode/auggie/releases/latest/download/install.sh | bash · Install a specific ver — source

• OpenCode process-daemon-v0.5.0 — process-daemon v0.5.0: opencode-pty 0.5.0 (protocol 8) from packages/process-daemon, published to npm as @opencode/pty@0.5.0. — source

• OpenAI Codex CLI rust-v0.168.0-alpha.7 — alpha.7: Release 0.168.0-alpha.7 — source

• Kilo Code v7.8.27 — (release): No notable changes — source

• Factory Droid v1.4.0 — · Desktop v1.4.0 (November 5, 2026): Loops on Droid Computers, session resume and Windows command fixes, and clearer app panels · Loops on Droid Computers - Loops now run on Droid Computers and — source

Open proposals

• Pin Local and Cloud models after Cline v4.1.26 catalog swap (audience: everyone, P4)
• Improve with xAI Grok CLI (Grok Build) c68e39f: Publish harness and TUI open-source (audience: everyone, P2)
• Improve with OpenCode pr-38252-videos: pr-38252-videos PR #38252 verification videos (audience: everyone, P2)