ZCodium-project / ZCodium

# ZCodium
 An independent security audit fork of ZCode 
 简体中文 | English ·
 Project site 
> This repository is forked from zai-org/ZCode, open-sourced by Zhipu on September 21, 2026. The name follows the same pattern as Chrome → Chromium and VS Code → VSCodium: **ZCode → ZCodium**. Everything here is backed by code and reproducible checks.
## Features
ZCodium keeps the product itself — an AI coding workspace for desktop, browser and terminal — and rebuilds it from the public source with monitoring and telemetry removed and vendor services off by default.
- **One Agent, three interfaces**: the Electron desktop app, the browser workspace and the `zcodium` terminal TUI share the same Agent runtime and sessions; you can also connect to a remote host over SSH, or drive the same desktop agent from your phone's browser.
- **Plans, edits, runs, verifies**: file changes arrive as diffs, terminal commands carry their context, the agent checks its own work by running commands and tests, and a built-in browser plugin drives a real browser for web tasks.
- **Asks before it touches your project**: every edit, command and tool call can require approval — allow once, always in this project, or full access.
- **Multi-agent collaboration and orchestration**: sub-agents, dynamic workflows, skills and scheduled automations.
- **Plugins, skills and MCP**: built-in skills plus a plugin system; official MCP and the plugin marketplace stay off by default, each with its own switch.
- **Bring your own model**: built-in presets for DeepSeek, OpenAI, Anthropic, Moonshot Kimi, MiniMax, Z.AI (GLM), Alibaba, xAI, Xiaomi MiMo and OpenRouter, plus fully custom endpoints (Chat Completions, Responses, Anthropic Messages).
 Approval-first: the agent stops and asks before it edits a file, runs a command or calls a tool. 
## How it compares with upstream
| Item | ZCodium (this repo) | Official client (closed source) | Official open source |
| ------------------------ | ------------------------------------------------------------------------------------ | ------------------------------------------------------------------------- | -------------------------------- |
| Monitoring and telemetry | **All removed** (~26k lines), with regression checks | Everything on by default; the switches never stopped packaging or uploads | Same as the closed-source client |
| Repository upload logic | Removed | Present (until the 2026-09-18 report) | Removed (since 2026-09-21) |
| Historical versions | **Full history and releases kept** for audit trail | Old download links pulled | Old download links pulled |
| Build transparency | **GitHub Actions builds transparently from this repo**; artifacts ship with releases | Vendor binaries, not reproducible | No public build |
| Issues and collaboration | **Open** — issues and discussions welcome | Not open | Closed |
## What ZCodium changes vs. official ZCode
Compared with the upstream open-source release:
- **Vendor services off by default**: account sign-in,