AI News & Tools
Products

ZCode uploads repository history despite UI toggles, Tokenstead reports

Tokenstead reports that Z.ai’s GLM coding agent ZCode uploads entire workspaces to Aliyun OSS, including Git history, LFS cache and reflogs. It says interface toggles do not stop the uploads and that Z.ai holds the only key; these remain claims from the reporting outlet.

·Primary sources shown for every item

Key points

  1. The reported upload includes full workspaces and repository history, rather than only current source files.
  2. Tokenstead identifies Aliyun OSS as the upload destination.
  3. The outlet says UI toggles fail to stop uploads and Z.ai holds the only key.

Why it matters

Repository owners need to assess which historical files and cached objects a coding agent transfers. If confirmed, the reported behavior would make the visible controls insufficient for enforcing a team’s upload preferences.

What to watch

Look for a response from Z.ai, reproducible network tests, and documentation explaining upload controls, key ownership and deletion.

Sources