Delegate multi-step planning, implementation proposals, debugging, migrations, or refactors to GLM; it proposes but never executes host tools.

Resolve a difficult technical, systems, debugging, algorithmic, mathematical, or architecture bottleneck with provider-supported reasoning.

Consult GLM for an independent expert explanation, second opinion, architecture advice, or unfamiliar concept—not task execution.

Audit a local PNG, JPEG, JPG, or WEBP screenshot, mockup, or wireframe against an objective using the vision model.

Create, update, retrieve, list, or delete reusable local project contexts. Contexts never include API keys.

Safely inspect an approved local project directory with read-only bounded file metadata, tree, package, and Git-summary information.

Run a bounded, read-only GLM tool-use loop within an approved directory. It cannot write files or run arbitrary commands.

Deterministically route a request to vision, agentic planning, reasoning, or knowledge consultation without recursive MCP calls.

Continue a persisted agentic task using its objective and compact prior summary. It proposes only and does not execute host tools.

Create a persistent, reviewable file-change proposal. This never mutates files or executes commands; explicit matching approval is required for application.

Apply an explicitly approved proposal's scoped file operations, create a rollback checkpoint, and record an audit entry. Commands are not executed.

Restore a proposal checkpoint after an explicit matching approval token. Only restores files in the proposal's working directory.

Reissue a fresh approval ID for the current proposal revision, revoking the previous approval token.

Revoke the current approval token for a proposal without applying mutation.

Plan an approval-gated code change and persist the proposed file operations without mutating the repository.

Propose a scoped patch as reviewable file operations. No files are changed until a later exact approval.

Apply an explicitly approved proposed patch and create a rollback checkpoint.

Inspect a proposed change set together with its audit trail before approval or rollback.

Roll back an applied change set by restoring its checkpoint inside the approved working directory.

Run an allowlisted project validation command after explicit matching approval. Arbitrary shell execution is not supported.

Create an auditable development orchestration plan using the safe development workflow surface. No mutation occurs automatically.

Create an auditable role-specific, dependency-aware development plan/job. It never mutates files without a separate explicit approval workflow.

Inspect a persisted orchestration job and its safe task graph status.

Resume a non-mutating job planning state; mutation remains approval-gated.

Cancel future work in a persisted job while preserving audit state.

Inspect or upsert auditable policy profiles that control writes, commands, network access, and privacy posture.

List or inspect persisted repository memory entries with provenance, confidence, and status metadata.

Create or update repository memory entries. Confirmed facts require explicit provenance; inference must remain marked accordingly.

Create a reusable local workflow definition with validated step dependencies and bounded step types.

Instantiate a reusable workflow as an auditable planning job. It can optionally execute approved command-backed quality gates.

List pending change proposals that still require an exact matching approval before mutation or approved commands.

Inspect a repository or monorepo root for workspace signals, package manifests, and package layout metadata.

Compare a reasoning-oriented GLM answer with an independent knowledge-oriented answer for the same question.

Score likely routing modes for a request without executing the routed tool.

Fetch an external HTTPS reference only when network retrieval is enabled and the target domain is allowlisted.

Export safe persisted bridge state such as workflows, policies, repository memory, and job summaries without secrets or raw source files.

Import safe persisted bridge state from a validated payload. Dry-run is enabled by default.