Radar brief — 2026-11-07

What the evidence shows

GitHub-tagged releases are the receipts. HTML changelogs (Windsurf, Kiro) are included but weaker. Several Copilot notes look duplicated across adjacent tags. One source in the window reported errors; prefer the GitHub tags below over marketing pages. Omitted “+N more changes” blocks are not inferred.

Qwen’s sdk-typescript-v0.1.28 tag is a CLI-bundle rollup, not a product story. Codex rust-v0.168.0-alpha.7 / rust-v0.169.0-alpha.2, Kimi 2.6.0-canary.*, Augment v1.2.0-prerelease.*, and OpenCode process-daemon-v0.5.0 are packaging or empty notes.

For developers

• Crush: Spawn named subagents for parallel work; refer to them by name. Do not turn on Sysadmin mode on a machine you care about until you have pinned permissions safe / block. In-session GPG/SSH is the point — stop pasting secrets into the prompt to unblock auth.
• Codex: Run codex agents --no-daemon. Use the session picker to switch backends (drafts are kept). If you are on Vertex, enable gcp_setup_wizard. Preview local images in supported terminals instead of re-attaching blindly.
• Claude Code: If you sit behind an LLM gateway or disable telemetry/flags, set CLAUDE_CODE_AUTO_MODE_SERVER on purpose (0 keeps the old classifier; 1 forces the server check even with experimental betas disabled). Use permissions.denyInsteadOfPrompting only in flows that must not block. CLAUDE_CODE_DISABLE_MCP_TASK_BACKGROUND if you need MCP tasks to stay in the tool call.
• Antigravity: Re-test any script that used --dangerously-skip-permissions — protected commands now go through checks. Outside-workspace file prompts are per path; don’t click “always allow” as if it were still global. macOS: Option-as-Alt is now the default.
• Qwen Code: Prefer ZIP + daemon install for large Skills; use bulk activation instead of toggling one-by-one. The TypeScript SDK can install from File, Blob, bytes, or a host path and look up receipts after a failed attempt.
• Copilot CLI: /code to jump into VS Code; set Fusion and COPILOT_SESSION_CWD if you launch local MCP/LSP from the CLI. Stay on 1.0.107 for daily use; 1.0.108-1 is a prerelease whose only documented wins are Grok PDFs and MCP-after-/cd.
• OpenCode: Set pool: true on MCP servers you reuse across repos. For CI, opencode run --archived (and -w if you want a worktree) so scripted sessions stay out of the inbox.
• Kiro: Add Pre Compaction hooks if you need to cancel a bad compact (exit 2); Post Compaction output is injected so the agent keeps what the summary dropped.

For teams

• Treat skip-permissions as changed policy, not a flag you already audited. Antigravity 1.5.2 stops auto-approving the protected-command list and will deny out-of-workspace terminal/file access in headless runs when Gemini Enterprise requires review. Claude Code will prompt or deny auto-mode calls that the server cannot check — gateway and “flags off” fleets will see more stops unless you set CLAUDE_CODE_AUTO_MODE_SERVER in managed settings (if you set CLAUDE_CODE_DISABLE_EXPERIMENTAL_BETAS, you must set the server flag too).
• Crush Sysadmin + custom Yolo lists are a fleet risk. Default-deny Sysadmin. If you allow Yolo, check in permissions safe / block the same way you check in linters — do not let each developer invent the danger list.
• Unattended agents: Claude’s permissions.denyInsteadOfPrompting is the knob for terminal/subagent/teammate runs that must not hang on a prompt. Pair it with explicit deny lists, not hope.
• MCP: OpenCode pooling cuts process sprawl but shares a connection — same config only. Copilot 1.0.108-1 (prerelease) finally restarts sandboxed local MCP after /cd; until that ships stable, assume MCP path policy can lag a directory change. Windsurf’s Command Center can toggle MCP per session — useful, also a way to silently disable a server.
• Patch hygiene: Windsurf’s Electron/Chromium bump is the security update in this window. Prefer GitHub tags over the HTML changelog if you pin versions.
• Do not roll Codex 0.168/0.169 alphas, Kimi canary, or Augment prerelease SEA builds into managed images.

What to ignore

• Empty Codex alphas (rust-v0.168.0-alpha.7, rust-v0.169.0-alpha.2).
• Kimi 2.6.0-canary.* (“chore: sync web dist”).
• Augment v1.2.0-prerelease.202611061509 install/SEA packaging notes (unsigned macOS -sea assets).
• Qwen sdk-typescript-v0.1.28 — a stacked CLI-bundle list, not new behavior beyond v0.26.9.
• Copilot v1.0.106 vs v1.0.107 duplicate changelog text.
• OpenCode process-daemon-v0.5.0 (@opencode/pty@0.5.0) with no product changelog.
• Any “+N more changes” / bodyOmitted tails — not in evidence, not in this brief.
• Vendor adjectives (“big one”, “friendly subagents”) — the commands and permission flags are the signal.

Watch next

• Open proposals on the radar: Codex command center (codex agents --no-daemon); Crush named subagents + pinned Yolo permissions safe/block; Cline catalog pin after a reported v4.1.26 swap (proposal only — no Cline release in this evidence); xAI Grok CLI harness/TUI publish; OpenCode PR #38252 verification videos.

• Whether Copilot v1.0.108-1 graduates — the /cd + sandboxed MCP path bug is the one that matters.

• Whether Crush Sysadmin shows up in default keybinds/docs in a way that makes “any command on your system” easy to toggle by accident.

• Codex 0.168/0.169 alphas filling in after 0.167.0’s command center.

• Claude gateway fleets after the auto-mode classifier fallback was removed — expect ticket noise if managed settings were only half-updated.

How to use DevAgentRadar

This brief is a public cut of the radar: shipped tags and changelogs, not launch posts. Anything marked new in the last 36 hours leads; older curated signals only appear when they still change what you should run this week. Read the table first, then the developer vs team actions. Ignore prereleases, duplicate notes, and omitted tails. If a line is not in the evidence table, it is not a release we will assert. Use the open proposals as optional follow-ups, not as facts. Re-check tomorrow — permission flags and skip-permissions semantics are moving faster than model names.

Evidence appendix

• New in the last 36 hours: 27 release(s) from 14 tool(s)
• Evidence window: new releases first, then top curated signals (versioned releases preferred)
• Assistants tracked: 29
• Signals in this brief: 40
• Trusted source mix (GitHub/changelog vs HTML): 54%
• Open improvement proposals: 5
• Sources reporting errors: 1

High-signal releases used

• Qwen Code v0.26.9: See the complete change list below. · No known breaking changes. · Skill ZIP uploads, daemon APIs, TypeScript SDK support, bulk activation, and recovery prote — source

• OpenAI Codex CLI rust-v0.167.0: Open the agent command center with codex agents --no-daemon. · The command center and session picker now mark unread results (#58238, #58239, #58263, #58264). — source

• Crush v0.100.0: This is a big one! Crush can now run a team of subagents, permissions are much more flexible, and you can now do GPG and SSH auth right inside Crush! Read on fo — source

• Claude Code v2.1.319: Changed auto mode with telemetry or feature flags off, including behind LLM gateways: calls the server can't check are asked about or denied, with no fallback t — source

• GitHub Copilot CLI v1.0.107: 2026-11-06 · Rex terminals render inline images using Kitty direct placements. · Add /code command to open the current session in VS Code · Add a Fusion tier se — source

• GitHub Copilot CLI v1.0.106: 2026-11-05 · Rex terminals render inline images using Kitty direct placements. · Add /code command to open the current session in VS Code · Add a Fusion tier se — source

• Google Antigravity 1.5.2: Added skills from the cloud plugins you connected with /plugin to --remote-agent sessions, so they now appear in the / menu and can be typed at the start — source

• Qwen Code sdk-typescript-v0.1.28: This SDK release bundles CLI version: 0.26.8 · Source: CLI built from source (same branch/ref as SDK) · --- · This SDK release bundles CLI version: 0.26.6 · Sou — source

• OpenCode v2.2.6: Shared MCP Connections: Turn on pooling for an MCP server to share one connection across projects with the same setup, so you run fewer processes and start — source

• GitHub Copilot CLI v1.0.108-1: Fixed · PDF attachments on Grok 4.7 and Grok 4.6 fall back to file references instead of failing the turn · With the sandbox on, a running local MCP server — source

• Kimi Code @moonshot-ai/kimi-code@2.5.2: #4728 7b906ea — source

• Windsurf v3.12.17: v3.12.17 November 6, 2026 · In the Agent Command Center, open the ”…” menu in the session header to see its MCP servers, turn one on or off, or re-authenticate. — source

• Kimi Code @moonshot-ai/kimi-code@2.6.0-canary.20261106122412-eb2035f: chore: sync web dist from code-app — source

• Augment Code v1.2.0-prerelease.202611061509 — auggie-v2 v1.2.0-prerelease.202611061509: Install the latest release (macOS/Linux): · curl -fsSL https://github.com/augmentcode/auggie/releases/latest/download/install.sh | bash · Install a specific ver — source

Open proposals

• Open the Codex agent command center with codex agents --no-daemon (audience: developer, P5)
• Spawn named Crush subagents and pin Yolo with permissions safe/block (audience: developer, P4)
• Pin Local and Cloud models after Cline v4.1.26 catalog swap (audience: everyone, P4)
• Improve with xAI Grok CLI (Grok Build) c68e39f: Publish harness and TUI open-source (audience: everyone, P2)
• Improve with OpenCode pr-38252-videos: pr-38252-videos PR #38252 verification videos (audience: everyone, P2)