Radar brief — 2026-11-06

What the evidence shows

Versioned GitHub-style signals first. Rows with bodyOmitted are incomplete on purpose — do not assume the missing bullets.

Unversioned HTML (use after the tags above):

For developers

• Codex CLI rust-v0.167.0: Run codex agents --no-daemon. Use the session picker to switch backends and keep drafts. If a chat will not resume, open the transcript and continue from the editable prompt. GCP users: gcp_setup_wizard / “Sign in another way.” Proxy: /experimental. +125 unpublished — read the GitHub tag before assuming the rest.
• Crush v0.100.0: Spawn named subagents and refer to them by name. Pin Yolo with permissions safe, permissions block, permissions unblock instead of hoping the default danger list matches your repo. Treat Sysadmin mode as root. GPG/SSH prompts can stay inside Crush — still do not paste secrets into the chat. +83 unpublished.
• Copilot CLI v1.0.106: /code to jump to VS Code; /settings for the unified dashboard. Set Fusion and Sandbox extensions only if you want them. Export COPILOT_SESSION_CWD when local MCP/LSP configs must expand from the session directory. Check New models for GPT-6.1 Terra; it is account-gated in the notes.
• Antigravity 1.5.2 then 1.5.1: On Mac, Option shortcuts now work without terminal Alt mapping — set AGY_CLI_MAC_OPTION_AS_ALT=0 if that breaks muscle memory. In --remote-agent, /plugin skills show under Remote agent skills. Do not rely on --dangerously-skip-permissions for protected commands or out-of-workspace files. 1.5.1 is the OAuth-header leak fix and the ACP “all models” change — install both.
• Kimi Code 2.5.1 + 2.5.2: Upgrade if you see HTTP 400s on dynamic tools or duplicate MCP tool declarations. Skip the 2.6.0 canary (web dist sync only).
• Cursor live apps: Only if you explicitly tell a cloud agent to build an app; the note says it will ask for secrets when it must reach your systems.
• Kiro: Restart IDE/CLI, kirocrew restart, or refresh Web to pick up Haiku 5.5 / Kimi K3.
• Factory Droid: 1.4.0 is long-session/Loops; 1.5.0 is automations + environment policy. Source is HTML docs, not a GitHub tag.

Open radar proposals that match this evidence (actions, not extra facts): Codex command center; Crush subagents + permissions pin; Copilot CLI Fusion / sandbox extensions / COPILOT_SESSION_CWD.

For teams

• Crush: Sysadmin mode and custom permissions unblock are fleet risk. Decide who may enable them before the v0.100.0 rollout; Yolo is no longer a vendor-fixed denylist.
• Antigravity: Gemini Enterprise review requirements now override skip-permissions and plugin auto-allow. Headless runs deny out-of-workspace command/file access when review is required. Per-path “always allow” in settings.json is the new footgun — inventory it.
• Copilot CLI: Sandbox extensions run extension processes inside the sandbox (opt-in). Entra auth gains MATS telemetry through OneAuth; client opt-out is respected. Fusion is a tier setting — confirm billing/entitlement before enabling org-wide.
• Copilot (org API): Use total_comments_addressed / total_comments_evaluated as an addressed rate, plus total_merged_no_human_change_request_after_review. This measures review handling, not review quality.
• Kiro: Haiku 5.5 is no longer under the Excluded Models indemnity exception; Kimi K3 still is. That is a legal/procurement fact in the changelog, not a quality ranking.
• Cursor live apps: Internal apps get Postgres, Cursor SSO, and a public-ish unique domain. Require an owner, secret handling, and an off-switch before “anyone in the org” ships ops tools this way.
• Factory Droid 1.5.0: New Session only offers policy-allowed Environments and explains failed launches. Shared automations now show Environment names. PR Babysitter is gone from the template gallery — update runbooks.

What to ignore

• Kilo Code v7.8.27 (“No notable changes”), Codex rust-v0.168.0-alpha.7 (empty alpha tag), Kimi 2.6.0-canary (web dist chore).
• Qwen Code sdk-typescript-v0.1.28: high score, low signal — a stacked “bundles CLI version …” list, not a behavior changelog. Tagged breaking in metadata; the body does not say what broke.
• Augment Code prerelease install/SEA notes (unsigned macOS -sea).
• OpenCode process-daemon-v0.5.0: protocol bump with no user-facing notes.
• GitHub Copilot usage-metrics blog unless you own enterprise reporting. +53 omitted and score is the lowest in this set.
• Any story that fills in omitted Crush/Codex/Copilot/Antigravity/Cursor bodies.
• Radar proposals for Cline, xAI Grok CLI, and OpenCode PR videos — they are open tasks, not releases in this evidence.
• The single error-reporting source until it matches a GitHub tag.

Watch next

• Codex 0.168 alphas growing a real changelog (alpha.7 did not).
• Crush’s unpublished remainder: subagent isolation, default permission lists, Sysadmin audit.
• Whether GPT-6.1 Terra actually appears under Copilot CLI New models on your plan.
• Antigravity operators hitting the new skip-permissions / headless-deny behavior in CI.
• Factory Droid: confirm v1.4.0 / v1.5.0 against a GitHub tag if you require signed evidence.
• Kiro Claude Fable 5.1 Preview is only a “next” pointer in the same HTML page — not a release in this JSON.
• Six open proposals on the radar (Copilot CLI Fusion/sandbox/CWD, Codex command center, Crush subagents/permissions, plus three that are not evidenced as ships).

How to use DevAgentRadar

This brief is a public evidence pass, not a vendor roundup. If a line is not in the JSON, it is not news here.

1. Treat isNew GitHub tags as the last 36 hours. HTML changelogs are supporting color.
2. Act from versioned rows (Codex, Crush, Copilot CLI, Antigravity, Kimi). Park empty/prerelease/bundle tags.
3. Developers: one upgrade or flag per tool you already run. Teams: permissions, indemnity, telemetry, and environment policy before a fleet bump.
4. Open proposals are optional checklists tied to those tags — they do not add features.
5. Re-read the GitHub release when bodyOmitted is set; this page will not invent the rest.
6. Ignore marketing tone, unnamed “models dropped,” and any exploit/PoC framing. Judgment follows the tag text.

Evidence appendix

• New in the last 36 hours: 19 release(s) from 13 tool(s)
• Evidence window: new releases first, then top curated signals (versioned releases preferred)
• Assistants tracked: 29
• Signals in this brief: 40
• Trusted source mix (GitHub/changelog vs HTML): 54%
• Open improvement proposals: 6
• Sources reporting errors: 1

High-signal releases used

• OpenAI Codex CLI rust-v0.167.0: Open the agent command center with codex agents --no-daemon. · The command center and session picker now mark unread results (#58238, #58239, #58263, #58264). — source

• Crush v0.100.0: This is a big one! Crush can now run a team of subagents, permissions are much more flexible, and you can now do GPG and SSH auth right inside Crush! Read on fo — source

• GitHub Copilot CLI v1.0.106: 2026-11-05 · Rex terminals render inline images using Kitty direct placements. · Add /code command to open the current session in VS Code · Add a Fusion tier se — source

• Google Antigravity 1.5.2: Added skills from the cloud plugins you connected with /plugin to --remote-agent sessions, so they now appear in the / menu and can be typed at the start — source

• Qwen Code sdk-typescript-v0.1.28: This SDK release bundles CLI version: 0.26.8 · Source: CLI built from source (same branch/ref as SDK) · --- · This SDK release bundles CLI version: 0.26.6 · Sou — source

• Google Antigravity 1.5.1: Changed agy acp to offer every model available to your account to every ACP client, where previously only a fixed list of editors were offered models other th — source

• Kimi Code @moonshot-ai/kimi-code@2.5.1: #4687 2af56d2 — source

• Kimi Code @moonshot-ai/kimi-code@2.5.2: #4728 7b906ea — source

• Kimi Code @moonshot-ai/kimi-code@2.6.0-canary.20261106122412-eb2035f: chore: sync web dist from code-app — source

• Augment Code v1.2.0-prerelease.202611051212 — auggie-v2 v1.2.0-prerelease.202611051212: Install the latest release (macOS/Linux): · curl -fsSL https://github.com/augmentcode/auggie/releases/latest/download/install.sh | bash · Install a specific ver — source

• OpenCode process-daemon-v0.5.0 — process-daemon v0.5.0: opencode-pty 0.5.0 (protocol 8) from packages/process-daemon, published to npm as @opencode/pty@0.5.0. — source

• OpenAI Codex CLI rust-v0.168.0-alpha.7 — alpha.7: Release 0.168.0-alpha.7 — source

• Kilo Code v7.8.27 — (release): No notable changes — source

• Factory Droid v1.4.0 — · Desktop v1.4.0 (November 5, 2026): Loops on Droid Computers, session resume and Windows command fixes, and clearer app panels · Loops on Droid Computers - Loops now run on Droid Computers and — source

Open proposals

• Enable Fusion tier, sandbox extensions, and COPILOT_SESSION_CWD in Copilot CLI 1.0.106 (audience: developer, P5)
• Open the Codex agent command center with codex agents --no-daemon (audience: developer, P5)
• Spawn named Crush subagents and pin Yolo with permissions safe/block (audience: developer, P4)
• Pin Local and Cloud models after Cline v4.1.26 catalog swap (audience: everyone, P4)
• Improve with xAI Grok CLI (Grok Build) c68e39f: Publish harness and TUI open-source (audience: everyone, P2)
• Improve with OpenCode pr-38252-videos: pr-38252-videos PR #38252 verification videos (audience: everyone, P2)