惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

Project Zero
Project Zero
GbyAI
GbyAI
Y
Y Combinator Blog
Google DeepMind News
Google DeepMind News
小众软件
小众软件
The GitHub Blog
The GitHub Blog
阮一峰的网络日志
阮一峰的网络日志
J
Java Code Geeks
WordPress大学
WordPress大学
Microsoft Security Blog
Microsoft Security Blog
IT之家
IT之家
F
Fortinet All Blogs
博客园 - 【当耐特】
H
Hackread – Cybersecurity News, Data Breaches, AI and More
P
Proofpoint News Feed
Schneier on Security
Schneier on Security
C
Cybersecurity and Infrastructure Security Agency CISA
L
LINUX DO - 热门话题
Spread Privacy
Spread Privacy
O
OpenAI News
V
V2EX
博客园 - 三生石上(FineUI控件)
AI
AI
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
Stack Overflow Blog
Stack Overflow Blog
P
Privacy International News Feed
Microsoft Azure Blog
Microsoft Azure Blog
Blog — PlanetScale
Blog — PlanetScale
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
Jina AI
Jina AI
H
Help Net Security
L
LINUX DO - 最新话题
Application and Cybersecurity Blog
Application and Cybersecurity Blog
T
Tenable Blog
K
KPMG report finds enterprise disconnect between AI and its ROI | CIO
Cisco Talos Blog
Cisco Talos Blog
cs.CV updates on arXiv.org
cs.CV updates on arXiv.org
博客园 - 叶小钗
V
Vulnerabilities – Threatpost
C
Cisco Blogs
D
Darknet – Hacking Tools, Hacker News & Cyber Security
酷 壳 – CoolShell
酷 壳 – CoolShell
Hacker News: Ask HN
Hacker News: Ask HN
S
Security @ Cisco Blogs
S
Securelist
T
The Blog of Author Tim Ferriss
Apple Machine Learning Research
Apple Machine Learning Research
美团技术团队
雷峰网
雷峰网
V2EX - 技术
V2EX - 技术

DEV Community

Authentication Security Deep Dive: From Brute Force to Salted Hashing (With Java Examples) Why AI Systems Don’t Fail — They Drift Spilling beans for how i learn for exam😁"Reinforcement Learning Cheat Sheet" I Replaced Chrome with Safari for AI Browser Automation. Here's What Broke (and What Finally Worked) How Python Borrows Other People's Work The $40 Architecture: Processing 1 Billion API Requests with 99.99% Uptime Vibe Coding: A Workflow Guide (From Zero to SaaS) Most webhook security guides protect the wrong side. The scary part is delivery. Headless CMS for TanStack Start: Build a Blog with Cosmic EU Age Verification App "Hacked in 2 Minutes" — What Actually Happened Comfy Cloud’s delete function does not actually remove files Running AI Models on GPU Cloud Servers: A Beginner Guide Event-driven media intelligence with AWS Step Functions and Bedrock I scored 500 AI prompts across 8 quality dimensions — here's what broke How to Call Google Gemini API from Next.js (Free Tier, No Backend Needed) The Portal Protocol: Reclaiming Human Connection in the Age of AI How to Fix Your Team's Scattered Knowledge Problem With a Self-Hosted Forum Intro to tc Cloud Functors: A Graph-First Mental Model for the Modern Cloud Designing Multi-Tenant Backends With Both Ownership and Team Access I Built a Neumorphic CSS Library with 77+ Components — Here's What I Learned PostgreSQL Performance Optimization: Why Connection Pooling Is Critical at Scale Cómo construí un SaaS multi-rubro para gestionar expensas en Argentina con FastAPI + Vue 3 🚀 I Built an Ethical Hacking Scanner Tool – Open Source Project I Replaced /usage and /context in Claude Code With a Single Statusline A Pythonic Way to Handle Emails (IMAP/SMTP) with Auto-Discovery and AI-Ready Design I Collected 8.9 Million Polymarket Price Points — Here's What I Found About How Markets Really Move EcoTrack AI — Carbon Footprint Tracker & Dashboard Everyone's Using AI. No One Agrees How. 5 self-hosted ebook managers worth trying in 2026 Building Your First AI Agent with LangChain: From Chatbot to Autonomous Assistant Common SOC 2 Failures (Real World) Stop Vibe-Checking Your AI App: A Practical Guide to Evals How to Use SonarQube and SonarScanner Locally to Level Up Your Code Quality Your Next To-Do App Is Dead — I Replaced Mine with an OpenClaw AI Sign a Nostr event in 60 lines of Python using coincurve — no nostr-sdk, no nbxplorer, no rust toolchain ITGC Audit Explained Like You’re in Big 4 Patch Tuesday abril 2026: Microsoft parcha 163 vulnerabilidades y un zero-day en SharePoint Stop scraping everything: a better way to track competitor price changes Listing on MCPize + the Official MCP Registry while routing payments OUTSIDE the marketplace — how I kept 100% of my x402 revenue Building an AI-Powered Risk Intelligence System Using Serverless Architecture Why We Ripped Function Overloading Out of Our AI Toolchain Testing AI-Generated Code: How to Actually Know If It Works SaaS Churn Is Killing Your Business. Here Is What to Do About It (Without a Support Team) The Speed of AI Is No Longer Linear - And Self-Improving Models Are Why How to Implement RBAC for MCP Tools: A Practical Guide for Engineering Teams From Standard Quote to Persuasive Proposal: AI Automation for Arborists I built a CLI that scaffolds complete multi-tenant SaaS apps Axios CVE-2025–62718: The Silent SSRF Bug That Could Be Hiding in Your Node.js App Right Now The dashboard that ended our friendship Data Pipelines Explained Simply (and How to Build Them with Python) The Hidden Cost of AI Systems Nobody Talks About. undefined vs undeclared, and how typeof behaves Switching from file-based jobs to NATS/Kafka in Rust without changing code io_uring Adventures: Rust Servers That Love Syscalls Why Agentic AI is Killing the Traditional Database The POUR principles of web accessibility for developers and designers Quantum Neural Network 3D — A Deep Dive into Interactive WebGL Visualization How To Install Caveman In Codex On macOS And Windows Automation Pipeline Reliability: Why Your Workflow Breaks When Nobody Is Watching I Built an 'Open World' AI Coding Agent — It Works From ANY Folder From Freelancing to Product: A Tech Service Company's SaaS Transformation China's AI Giants: Adding Tencent Hunyuan & ByteDance Doubao to AI University (74 Providers) On the Vibe Coders and Their Lies clerk: Auto-Summarize Your Claude Code Sessions AI Weekly — 2026/04/10–04/17 | The Model Lockdown Is Here, but the Toolchain Is the Real Battleground AI 週報 — 2026/04/10–2026/04/17 模型封鎖潮來了,但工具鏈才是真戰場 Maybe this is how Open-Source apps are born... 🚀 Fine-Tune LLMs with LoRA and QLoRA: 2026 Guide tRPC v11 + Next.js App Router: End-to-End Type Safety Without the Boilerplate ShadCN UI in 2026: Why I Stopped Installing Component Libraries and Started Owning My Components SaaS Billing in React Server Components: Stripe + Supabase Without a Single `useEffect` Join our DEV Weekend Challenge — $1,000 in Prizes Across TEN winners! Submissions Due April 20 at 6:59 AM UTC. Implementing FSRS Spaced Repetition in Flutter + Supabase — Adding Memory Science to an AI Learning App "I Texted My Localhost From the Train — Claude Code Fixed the Bug Before I Got Home" I Built a Sales Prep AI and It Went Deeper Than Expected Design to Code #2: One JSON, Eleven Outputs Solving the 100M-Row Problem: A Summary Table Pattern for High-Volume Push Notification Logs Flutter Web With Wasm: What Actually Changes For Developers I Built 50 Royalty-Free Soundtracks for My Side Project in a Weekend Using AI Music Generation The Vibe Coding Security Checklist: 7 Things to Check Before You Ship Stop Letting Googlebot Guess Fix Your React App's SEO Right Desconstruindo o Streaming do LinkedIn: Como Criar um Engine de Extração de Vídeo de Alta Performance com HLS e FFmpeg (EDA Part-1) EDA (Exploratory Data Analysis) Explained With Real Life — Why Looking at Your Data Is the Most Important Step in Machine Learning Brand Relationship Management at Scale: Our 4-Touch Outreach System for 200+ Brands Why String.fromEnvironment() Might Return an Empty String in Dart JGuardrails 1.0.0 — Hardening Java LLM Apps Against Jailbreaks, Toxicity, and Prompt Injection Plan and Schedule a Full Week of Threads Content From One Claude Conversation Coding Cat Oran Ep3, Five Tables Changed Everything Updated: BFF Pattern I'm done watching freelancers get buried by 200 proposals. So I'm building the alternative. This is my first post BFS Algorithm in Java Step by Step Tutorial with Examples Tracking LLM Pricing Monthly: An Open Dataset for 22 AI Models How We Measure Content ROI on a Comparison Site: Revenue Attribution Without Perfect Data Introducing Nova AI Ops: The AI-Native Operating System for SRE Teams I built a free desktop video downloader for Windows — Grabbit How Talkie OCR Helps Vision-Impaired & Dyslexic Users Read the World Around Them VRCFaceTracking安装和iPhone面捕配置教程,有bug Even CrowdStrike Can't See Your Agents The Automation Gold Rush: What n8n Workflows and Claude Are Opening Up for Developers Right Now
GLM-5.2: Z.ai Ships 1M-Token Coding Model With Zero Benchmarks
Anup Karanjkar · 2026-06-15 · via DEV Community

Z.ai shipped GLM-5.2 on June 13, 2026 and published exactly zero benchmark numbers. No SWE-bench Verified. No LiveCodeBench. No HumanEval. No AIDER polyglot scores. The model went live across every GLM Coding Plan tier — Lite, Pro, Max, Team — with a usable 1-million-token context window, a new dual thinking-effort system, and 131,072 max output tokens per response. Third-party evals are pending. That's the full picture as of June 15, 2026.

The benchmark silence is deliberate. Zhipu has been burned before by releasing numbers that competitors then picked apart. This time they're shipping the model first, letting developers run it on their own codebases, and releasing the standalone API and MIT open weights next week — around June 16–20. By the time those land, the community will have its own results.

Whether that strategy helps or hurts adoption is a separate question. What matters right now: GLM-5.2 is live, the context window is real, and the setup is three config lines. Here's everything you need to know.

Architecture: What Changed From GLM-5.1

GLM-5.2 runs on the same 744-billion-parameter Mixture-of-Experts foundation as GLM-5.1. Zhipu did not rebuild the architecture — they fine-tuned it toward coding tasks and extended the context window significantly. The numbers:

| Total parameters | 744B MoE | 744B MoE |

| Context window | 200,000 tokens | 1,000,000 tokens |

| Max output tokens | ~26,000 | 131,072 |

| Thinking-effort levels | Single (default) | High, Max |

| Benchmarks published | SWE-bench Pro (verified) | None at launch |

| Open weights | MIT (released) | MIT (arriving ~June 16–20) |

The 1M-token context window is the headline change. GLM-5.1 shipped with 200K tokens — already competitive with the Claude Sonnet tier. GLM-5.2's 1M puts it alongside Claude Opus 4.8 and Gemini 3.1 Ultra on context length, though raw context size and the ability to reason well across a million tokens are different things. That second part is what the community benchmarks will tell us.

The 131,072 output token limit is also meaningful. Most coding tasks are bounded by input (reading a large codebase) rather than output, but generating complete multi-file refactors or long test suites in a single pass becomes viable at that output ceiling. GLM-5.1's ~26,000 output limit was the bottleneck on those tasks.

Thinking-Effort Levels: High vs. Max

GLM-5.2 introduces a two-tier reasoning system: High and Max. Zhipu has not published latency or cost comparisons between the two tiers, which makes it hard to give a definitive recommendation. What they've said:

High — Default for most coding tasks. Uses structured chain-of-thought before responding. Equivalent in behavior to the reasoning budget on other models, but capped at a lower token count. Zhipu recommends it for routine code generation, refactoring, and bug fixes.

Max — Extended reasoning. Uses more tokens on the internal chain-of-thought before producing output. Recommended for architectural decisions, complex debugging across large codebases, and multi-step agentic tasks where correctness trumps speed.

The practical implication: start on High for your daily driver. Switch to Max when you're debugging a non-obvious issue or planning a large refactor. Neither mode changes the pricing tier on the Coding Plan — both count as a single prompt against your weekly allowance.

What 1M Tokens Actually Unlocks

A rough token count guide for developers:

  • A 400-file Next.js codebase — approximately 200,000–400,000 tokens depending on file size

  • A full monorepo with tests and config — 500,000–900,000 tokens

  • A large legacy Java service with Javadoc — can hit 1M+ on its own

Until GLM-5.2, no model on a sub-$30/month coding plan could hold an entire mid-size codebase in context. The typical workaround was chunking: send files in batches, summarize state between calls, manage context windows manually. That's real engineering overhead that disappears when the context limit is removed as the binding constraint.

The catch, and it's real: does the model reason well across all 1M tokens? Context length and context utilization are different things. Several frontier models have demonstrated that retrieval quality degrades significantly past 128K tokens, even when context is nominally larger. Without published benchmark data, we don't know where GLM-5.2's effective reasoning ceiling sits. The community will figure this out in the next two weeks.

Coding Agent Integrations: Setup Guide

GLM-5.2 ships with an OpenAI-compatible API endpoint, which means any tool that supports custom model providers can use it. The Coding Plan API endpoint is already live for subscribers — the public API lands next week.

Claude Code Setup

Three changes to your .claude/settings.json:

{
  "env": {
    "ANTHROPIC_DEFAULT_SONNET_MODEL": "glm-5.2[1m]",
    "ANTHROPIC_BASE_URL": "https://api.z.ai/v1",
    "ANTHROPIC_API_KEY": "YOUR_Z_AI_CODING_PLAN_KEY",
    "CLAUDE_CODE_AUTO_COMPACT_WINDOW": "1000000"
  }
}

The glm-5.2[1m] model ID enables the full 1M-token context. Without the [1m] suffix, Z.ai routes requests to a smaller context variant. The CLAUDE_CODE_AUTO_COMPACT_WINDOW bump prevents Claude Code from triggering its auto-compact heuristic prematurely — without it, Claude Code would compact at its default threshold and waste the context advantage.

One important note: Claude Code sends Anthropic-formatted messages. Z.ai's endpoint handles the translation, but tool-use formatting differences can surface on complex agentic tasks. If you see unexpected tool call failures, check whether Z.ai's message format translation is handling your specific tool schema correctly.

Cline Setup

# In Cline settings (VS Code):
Provider: OpenAI Compatible
Base URL: https://api.z.ai/v1
API Key: YOUR_Z_AI_CODING_PLAN_KEY
Model: glm-5.2[1m]
Max Tokens: 131072

OpenClaw / OpenCode / Roo Code

All three tools use the same OpenAI-compatible config pattern. Add a provider entry:

providers:
  z-ai:
    base_url: https://api.z.ai/v1
    api_key: YOUR_Z_AI_CODING_PLAN_KEY
    default_model: glm-5.2[1m]

Then reference z-ai/glm-5.2[1m] in your routing rules. You can also use our AI Model Cost Calculator to compare the effective cost-per-prompt across these tools before committing.

Pricing: The Coding Plan Tiers

GLM-5.2 is not token-priced — it uses prompt-based pricing through the Coding Plan. That's unusual, and worth understanding before you build on top of it.

Tier Price Prompts/Week Best For

| Lite | ~$18/month | ~400 | Individual developers, exploration |

| Pro | ~$45/month | ~2,000 | Full-time professional use |

| Max | ~$95/month | ~8,000 | Heavy agentic workloads |

| Team | Custom | Custom | Shared team access |

Prompt-based pricing is predictable but can be limiting. A single complex agentic task that makes 40 tool calls counts as 40 prompts — the Lite tier's 400 weekly prompts burns through quickly if you're running multi-step agents. For that use case, Pro or Max makes more economic sense.

The comparison that matters: Kimi K2.7-Code at $0.75/M tokens via OpenRouter, versus GLM-5.2 at ~$18/month on Lite. If you're running fewer than 400 prompts a week on small-to-medium tasks, the flat rate wins. If you're running token-heavy 1M-context jobs repeatedly, you want to model this carefully. Use the AI Prompt Cost Calculator to run the numbers for your specific usage pattern.

MIT Open Weights: What to Expect Next Week

Z.ai confirmed that MIT-licensed open weights for GLM-5.2 arrive around June 16–20. That's meaningful for three groups:

Self-hosters — If you have the infrastructure to run a 744B MoE model (the memory footprint is substantial — expect similar requirements to Kimi K2.7-Code's 340GB checkpoint plus KV cache overhead for long-context inference), self-hosting removes the per-prompt cost floor entirely.

Fine-tuners — MIT license with no training restriction means you can fine-tune GLM-5.2 for domain-specific tasks — legal code review, financial analysis, proprietary frameworks — and redistribute the fine-tune. This is more permissive than Moonshot's modified MIT license on K2.7-Code, which prohibits training competing foundation models.

Researchers — Open weights enable independent benchmark runs. Expect SWE-bench Verified and LiveCodeBench numbers from the community within days of weights landing. Those results will either validate the "no benchmarks at launch" gamble or explain it.

When to Use GLM-5.2 Today (and When to Wait)

Use GLM-5.2 now if your primary bottleneck is context window size — specifically, if you're working on a codebase that exceeds 200K tokens and you've been managing context manually. The 5x jump in context length is a real workflow improvement even without benchmark validation. You can verify context utilization yourself in 30 minutes by loading your codebase and asking GLM-5.2 to describe relationships between files that are far apart in the token sequence.

Wait if you need independent benchmark validation before switching production pipelines. The MIT weights and third-party SWE-bench results should arrive by June 20. Two weeks of patience gets you actual data on GLM-5.2's coding accuracy — which matters more than context size for most generation tasks.

Don't use GLM-5.2 as your only model for high-stakes code. The benchmark gap is real right now: Kimi K2.7-Code has MCPMark scores, Claude Opus 4.8 has SWE-bench numbers, GPT-5.5 has published evals. GLM-5.2 has a 1M-token context window and a week-old launch. For a two-model architecture that pairs a validated coder with GLM-5.2 for large-context retrieval tasks, read our Kimi K2.7-Code developer guide for the routing pattern.

The Benchmark-Free Gambit

Zhipu's decision to ship without benchmarks is a calculated risk. The benefit: no number to attack. When Kimi K2.7-Code launched with MCPMark numbers, the immediate community response was to find tasks where the benchmark didn't hold. Benchmarks are both a marketing asset and a liability.

The cost: every developer who wants to evaluate GLM-5.2 seriously has to run their own tests instead of reading a table. That raises the adoption friction, particularly for teams with procurement processes that require published evals.

Z.ai is betting that the 1M context window is compelling enough to drive experimentation on its own — and that independent benchmark results will land faster and carry more credibility than vendor-published numbers. That's a defensible position. It's also a test of whether the model is good enough to sell itself in the first two weeks.

The open weights will answer that question. In the meantime, run it on your codebase. Check whether the 1M-token context retrieves relationships correctly. Check whether Max thinking-effort outperforms High on your specific debugging tasks. Those are the data points that determine whether GLM-5.2 earns a slot in your production routing config — not vendor slides.

Every AI development tool mentioned in this post is backed by the resources at wowhow.cloud — including templates, MCP starter kits, and developer tools built for the multi-model workflow era. Pay once, ship forever.

Originally published at wowhow.cloud