← All reportsPublic report

cline/cline

Autonomous coding agent as an SDK, IDE extension, or CLI assistant.

67k stars TypeScript View on GitHubprofiled 14d ago
Try GitZoid
400PRs this week
26Contributors
6Deps scanned
1Issues found
01 · Repo overview

How cline is put together

Cline is an autonomous coding agent distributed as a Bun-managed TypeScript monorepo. Shared logic lives in SDK workspace packages under sdk/packages/* (@cline/core, agents, llms, shared, ui), consumed by three delivery surfaces: a terminal CLI (@cline/cli, an OpenTUI/React-based TUI), a local 'Cline Hub' browser dashboard server (@cline/cline-hub), and a VSCode extension (apps/vscode) with a Vite/Tailwind webview UI plus a staged-rollout companion extension (apps/vscode-rollout). Data flow centers on an agentic loop: user prompts and tool calls pass through a hooks system (TaskStart/Resume/Cancel/UserPromptSubmit/PreToolUse/PostToolUse) that executes user-provided scripts from global or workspace hook directories, feeding JSON over stdin/stdout to allow/block actions or inject context. A separate npm-based evals/ workspace provides smoke tests and failure analysis backed by SQLite.

Languages

TypeScriptJavaScriptShell

Frameworks

React 19OpenTUI (@opentui/core, @opentui/react)ViteTailwind CSSesbuildVitestBuf/Protobuf

Datastores

SQLite (better-sqlite3, used in evals/)

Infrastructure

Bun runtime (1.3.13)Node.js >=22npm publish pipeline for @cline/cliVSCode extension marketplace distributionHusky git hooks / lint-staged

Major components

SDK core packages (sdk/packages/*)

Shared agent engine: core task/tool execution, LLM provider abstraction (@cline/llms), multi-agent orchestration (@cline/agents), shared utilities, and UI primitives.

CLI app (apps/cli)

Terminal entry point ('cline' binary) rendering an OpenTUI/React interface, wiring commands, chat-platform adapters, and the agent loop.

Cline Hub (apps/cline-hub)

Local daemon/dashboard server exposing live clients, sessions, streaming chat, and hub restart, with a bundled webview frontend.

VSCode extension (apps/vscode)

IDE integration exposing the agent inside VSCode, using esbuild bundling, Buf-generated protobuf descriptors, and a Vite/Tailwind webview UI.

Rollout extension (apps/vscode-rollout)

Companion VSCode extension implementing cohort-based staged rollout and scoped context for feature delivery.

Hooks system

Executes user-supplied executable scripts from ~/Documents/Cline/Hooks/ or .clinerules/hooks/ at lifecycle points (task start/resume/cancel, prompt submit, pre/post tool use), passing JSON via stdin and accepting cancel/contextModification JSON responses.

Evals framework (evals/)

Standalone npm project running smoke tests and failure-pattern analysis/classification with SQLite storage and tiktoken-based metrics.

Release & publishing tooling

Changesets, version/release scripts (sdk/scripts/version.ts, release.ts), publish guards for npm, and agent skills for publishing CLI/desktop/extension artifacts.

Over the past month, the Cline team has been heavily focused on maturing its desktop app, shipping a steady drumbeat of releases with a redesigned sidebar, voice input, image generation, and onboarding polish. Alongside that, they fixed a long tail of reliability issues across the CLI, VS Code extension, and core runtime — especially around queued prompts surviving aborts and restarts, checkpoint restores, and provider settings persistence. The Hub (their background service) also gained upgrade/drain tooling and disk-safety fixes, while settings pages got repeated cleanup so custom URLs and API keys stop getting lost.

Week by week

2026-08-24A quieter week centered on a major desktop app overhaul of the sidebar, model providers page, and settings.latest6 changes

Feature

Desktop sidebar overhaul

The desktop app's sidebar was redesigned with Pinned, Scheduled, and Tasks sections plus New/Schedule/Customize rows and dialog-based search.

Feature

Redesigned Model Providers page

The desktop Model Providers page was redesigned and voice input moved to its own dedicated settings page.

Feature

Suggested schedule templates

The desktop Schedules page now offers ready-made schedule templates to get users started faster.

Fix

Safer file creation line endings

New files are now created with the platform-native line ending (e.g., CRLF on Windows) instead of always using Unix-style endings.

Fix

Search crash fix

Fixed a bug where searching a codebase containing giant single-line files could crash the whole process.

Fix

Hub disk protection

The Hub's event database is now size-capped so it can no longer fill up the user's disk.

2026-08-17A high-volume week of releases and fixes, headlined by desktop onboarding reskins, feature flags, and Hub drain/upgrade commands.6 changes

Feature

Hub drain and upgrade commands

New commands let you safely drain and upgrade the Hub service, with support for replaying missed work.

Feature

Desktop onboarding refresh

The desktop app's first-run experience was reskinned with an interactive welcome hero graphic and refreshed app icons/branding.

Fix

Custom model capability fix

Fixed a bug where stored capability lists could silently revoke tool calling for custom models.

Fix

Checkpoint restore un-wedged

Sessions now report truthful status so restoring checkpoints in the desktop app no longer gets stuck.

Fix

Hook output handling

PostToolUse hooks now have their output collected and honored, and hook context modifications reach the model correctly.

Fix

CRLF diff view fix

Multi-line edits in Windows-style (CRLF) files now show the proper diff view in VS Code.

2026-08-10Big new capabilities landed: model-driven image generation, microphone transcription in the desktop app, and provider-aware web search tools.6 changes

Feature

Image generation

Cline can now generate images, driven by the model itself.

Feature

Voice input for desktop

The desktop app gained microphone transcription so you can dictate prompts instead of typing.

Feature

Web search tools

Provider-aware web search tools shipped, along with a settings toggle in both the VS Code extension and desktop app.

Fix

Hub update safety

Hub replacements and auto-updates are now deferred until no live sessions or attached CLIs would be interrupted.

Fix

Claude Code provider fixes

The Claude Code provider now anchors sessions to the workspace, loads user settings, and allows edits.

Fix

Streaming markdown flicker

The CLI no longer flashes raw text while streaming markdown output.

2026-08-03A reliability-focused week: queued prompts now survive aborts and hub restarts, plus a wave of desktop usability polish.6 changes

Fix

Durable queued prompts

Queued messages are now preserved across user-initiated aborts, self-aborted turns, and Hub restarts, then drained afterward.

Fix

Session context durability

Session context stays intact through aborts and Hub restarts, including checkpoints picked up when git is initialized mid-session.

Feature

Desktop clipboard images

You can now paste images from your clipboard directly into the desktop composer.

Feature

Non-code folder welcome

The desktop app shows context-aware welcome suggestions and hides git jargon when working in non-git folders.

Fix

Hung MCP server isolation

A hung MCP server can no longer block session creation, and unconfigured servers get a 30-second startup budget.

Fix

Settings persistence fixes

Custom base URLs and API keys edited before provider configs load are now saved instead of lost.

2026-07-27Stable release week with token usage display in the desktop toolbar, checkpoint/undo repairs, and many provider-settings persistence fixes.6 changes

Feature

Token usage display

The desktop app's input toolbar now shows how many tokens your session has used.

Fix

Checkpoints and undo repaired

Checkpoints are created reliably, restoring one rewinds the full workspace, and the CLI /undo command works again.

Fix

Ollama timeout and retries

Ollama's response-start timeout was raised to 5 minutes so slow model cold-starts don't error, and empty responses are retried automatically.

Fix

Settings persistence sweep

Multiple fixes ensure edits to base URLs, API keys, and provider toggles (Qwen, Moonshot, AskSage, etc.) actually persist.

Fix

Commit message generation includes new files

Untracked files are now included when generating commit messages in VS Code.

Docs

ACP editor integration docs

Documentation for ACP editor integration moved to a dedicated Usage page and was added to the CLI overview.

03 · Security check

Dependencies and code review

6 dependencies scanned

Dependency advisories

Security Watch

1 vulnerable package (1 advisories) across 6 scanned dependencies.

criticalcritical · npmfixed in 4.1.0

vitest 4.0.18

1 advisory. Fixed in 4.1.0.

How it can be abusedIf a developer starts Vitest's browser dashboard while running tests on this repo, anyone who can reach that dashboard, such as a malicious website open in the same developer's browser talking to localhost, can read any file on the machine or run arbitrary code. This affects developers and CI machines running tests locally, not end users of Cline itself.

  • criticalGHSA-5xrq-8626-4rwpWhen Vitest UI server is listening, arbitrary file can be read and executed

Code review

No concrete code-level issues confirmed.

Get this report every week for your repos.

GitZoid learns each repo, reports what changed, and flags what needs attention. One flat price for the whole team.

$19 a month, flat · First 10 outputs free · No card required