Cline launches open-source SDK for custom AI coding agents

// 2h agoOPENSOURCE RELEASE

Cline launches open-source SDK for custom AI coding agents

The popular open-source AI coding assistant, Cline, has released its core TypeScript runtime as a standalone, embeddable SDK. It features a plugin architecture, native subagents, and Model Context Protocol (MCP) support, enabling developers to build custom agents outside the VS Code ecosystem.

// ANALYSIS

Extracting the runtime from the IDE extension is a major milestone for the open-source agent ecosystem, offering a flexible, headless alternative to walled-garden platforms.

–The headless architecture allows the agent to run in CI/CD pipelines, CLI tools, or background cron jobs.
–Model flexibility (bring-your-own-key) prevents vendor lock-in, letting teams easily swap between Claude, OpenAI, or local models via Ollama.
–Deep MCP integration makes it trivial to connect custom agents to enterprise systems, databases, and local tools.
–Native subagent support enables complex orchestration for multi-step tasks without having to rebuild the core execution loop.

// TAGS

cline-sdkclinecoding-agentai-codingmcpsdkdevtoolopen-source

DISCOVERED

2h ago

2026-05-15

PUBLISHED

7h ago

2026-05-15

RELEVANCE

9/ 10

// KEEP READING

More AI developer news from the feed

EXPLORE FULL FEED

SECURITY7m ago

Mini Shai-Hulud worm hits Guardrails AI

Guardrails AI version 0.10.1 was compromised in a sophisticated supply chain attack using hijacked OIDC tokens to bypass registry security. The malicious package exfiltrates cloud credentials and includes a destructive "dead-man's switch" that wipes user home directories if compromised tokens are revoked. This incident marks a significant escalation in autonomous worm-based threats targeting the AI developer ecosystem.

SECURITY7m ago

OpenSearch npm package hit by supply chain worm

The OpenSearch JavaScript client versions 3.5.3 through 3.8.0 were compromised in the sophisticated "Mini Shai-Hulud" supply chain attack. Orchestrated by the TeamPCP group, the worm hijacks legitimate GitHub Actions pipelines to steal OIDC tokens and includes a retaliatory wiper routine that destroys a developer's home directory if credentials are revoked.

SECURITY7m ago

OpenAI rotates certificates after TanStack breach

OpenAI is rotating code-signing certificates for its desktop applications following a supply chain attack on the TanStack ecosystem that compromised employee devices. macOS users must update ChatGPT and Codex by June 12, 2026, to ensure continued service and security.