抵用券到期日一目了然,防詐騙警語更清晰
你的帳號限流抵用券(讓你能突破次數限制的額度)現在會清楚標示種類跟到期日了,而且你能自己挑要先用哪一張。登入時,系統對於裝置驗證碼(device-code,讓你在別台機器登入的代碼)的警告也變得更白話,會教你怎麼看穿並阻止釣魚詐騙。如果你是架設應用伺服器的主人,現在還能在執行中動態提供認證,並把登入成功的人導向專屬網頁。就像百貨公司的禮券不再是一堆糊塗帳,會清楚寫明能換什麼、哪天過期,而且門口的警衛還會主動教你怎麼防範詐騙集團。
發布日期:2026-07-09
你的帳號限流抵用券(讓你能突破次數限制的額度)現在會清楚標示種類跟到期日了,而且你能自己挑要先用哪一張。登入時,系統對於裝置驗證碼(device-code,讓你在別台機器登入的代碼)的警告也變得更白話,會教你怎麼看穿並阻止釣魚詐騙。如果你是架設應用伺服器的主人,現在還能在執行中動態提供認證,並把登入成功的人導向專屬網頁。就像百貨公司的禮券不再是一堆糊塗帳,會清楚寫明能換什麼、哪天過期,而且門口的警衛還會主動教你怎麼防範詐騙集團。
現在讀取檔案這種無害動作不用逐次核准了,新增了 writes 核准模式(只在要寫入時要求核准)。在對話方面,如果你中斷並恢復一個舊的 ChatGPT 對話,結果發現當初用的模型已經退休了,系統現在懂得自動改用你目前選的新模型接力,不會直接當機;另外,Amazon Bedrock 的模型名稱也標示得更清楚了,能一眼看出是哪個 GPT-5.6 家族的版本。最後,如果你選用耗費算力極高的 Ultra 模型,系統會警告你如果同時開太多代理(agent),扣打可能會瞬間燒光。就像圖書館換了新的聰明閘門,只是進去看看書不會被攔,但想把書借走就會要求登記;就算你借到一半圖書館換了新的系統,也會自動幫你轉移紀錄,順便提醒你借太多厚書可能會超重。
遠端執行器(executor,幫你跑程式的背後引擎)現在能大幅提升技能載入速度,因為它懂得一次解決相同目錄下的外掛命名空間;MCP(讓 AI 控制外部工具的協定)工具現在也能直接要求登入認證,不用再去開實驗性開關了。網路部分,負責即時連線的 WebSockets 現在能完美配合你的系統代理伺服器或自訂憑證,保持低延遲又不斷線;而長時間掛網的應用程式,也會自動幫內建的 codex_apps 刷新過期憑證。就像辦公室換了新總機,現在分機號碼一次建檔不用重複查,要找外部顧問也能直接轉接不用再輸入密碼,而且就算公司換了新的防火牆,電話線也一樣暢通無阻。
現在貼上包含控制字元(例如終端機用來換顏色的特殊代碼)的內容時,不會再毀掉畫面排版或搞壞歷史對話了;使用 Intel 晶片 Mac 的用戶也不會在寫程式模式(Code Mode)下莫名當機。如果你是用 pnunen 全域安裝,現在它也能正確認出並使用對的指令來更新。此外,Windows 沙盒(sandbox,隔離的安全執行環境)現在能順利刪除檔案與存取環境;自動審查(/review)挑選分支時在超大專案裡也不再卡卡的,指引更清楚也更專注了。就像你買了一塊防刮玻璃,就算不小心倒了有腐蝕性的藥水(亂碼)也不會把桌子溶穿,同時維修工還順手把門軸上油、把舊電腦的藍屏當機都修好了。
Your rate-limit reset credits (allowances that let you bypass usage caps) now clearly display their type and expiration dates, and you get to pick which one to redeem. During login, device-code (a code used to authenticate from another machine) warnings have been rewritten in plain language to teach you how to spot and stop phishing attempts. For app-server hosts, you can now inject authentication dynamically at runtime and redirect users to a hosted page upon successful login. Like gift certificates at a department store: they no longer just look like a confusing stack of paper, but clearly state what they're good for and when they expire, while the security guard at the door proactively teaches you how to avoid scammers.
Harmless read-only actions no longer require step-by-step permission. A new writes approval mode (which only stops to ask for permission when modifying something) has been added. On the conversation side, if you resume an old ChatGPT thread and its original model has been retired, the system now automatically retries with your currently selected model instead of crashing. Also, Amazon Bedrock model names are now clearly labeled so you can spot their exact GPT-5.6 family variant. Lastly, if you pick the heavy-duty Ultra reasoning model, the system will warn you that running too many concurrent agents might burn through your usage limits instantly. Like a smart new library gate: it lets you walk in and browse the books without stopping you, but asks for your card the moment you try to take one home; and if the library upgrades its checkout system halfway through, it seamlessly ports your records over, while warning you that borrowing too many heavy encyclopedias will quickly max out your weight allowance.
Remote executors (the underlying engines running your code) now significantly speed up skill loading times by resolving plugin namespaces once per root directory. MCP (a protocol letting AI control external tools) tools can now also directly request authentication interactively right out of the box without needing an experimental toggle. On the networking side, Responses WebSockets continue to provide low-latency communication while perfectly respecting your system proxies and custom certificate authorities; long-running app sessions will also automatically refresh expired credentials for the hosted codex_apps connector. Like installing a new office switchboard: extension numbers are mapped out all at once instead of looking them up every time, connecting to external consultants no longer requires punching in experimental access codes, and the phone lines stay crystal clear even if the company installs a strict new firewall.
Pasting text containing terminal control sequences (special characters used to change text color or cursor position) will no longer irreparably corrupt the screen rendering or ruin your resumed conversation history; Intel Mac users will also no longer experience random crashes in Code Mode. If you installed globally using pnunen, it now correctly detects it and uses the right commands for updates. Furthermore, Windows sandbox (an isolated, secure execution environment) sessions can now successfully delete files and access the primary runtime, while the /review branch picker is now drastically faster and more reliable in massive repositories, with clearer instructions. Like buying a spill-proof desk mat so that knocking over a caustic chemical (corrupted text) won't melt a hole through your table, while the maintenance worker also greases the squeaky doors and fixes your old laptop's blue screens.
Usage-limit reset credits now show their type and expiration, and let you choose which credit to redeem. (#30488)
App-server hosts can provide Codex authentication at runtime and redirect successful logins to a hosted page. (#28745, #31274)
Device-code login warnings now explain how to recognize and stop phishing attempts. (#31648)Added a `writes` app-approval mode that allows declared read-only actions while prompting for writes. (#30482)
Selecting Ultra reasoning now warns when high multi-agent concurrency could increase usage quickly. (#31621)
Resumed ChatGPT threads recover when compaction references a retired model by retrying with the currently selected model. (#30319)
Made Amazon Bedrock model names clearly identify their GPT-5.6 family and variant. (#31636)MCP tools can now request authentication interactively without an experimental opt-in. (#28772)
Reduced plugin skill-loading time on remote executors by resolving namespaces once per root. (#31348)
Responses WebSockets continue using the low-latency transport while respecting system proxies and custom certificate authorities. (#31441, #31622)
Long-running app sessions now refresh expired authentication for the hosted `codex_apps` connector. (#31486)Fixed Code Mode crashes in Intel macOS release binaries. (#30953)
Pasted terminal control sequences can no longer corrupt TUI rendering or resumed conversation history. (#31494)
Global pnunen installs are now detected so diagnostics and updates use the correct package manager. (#31503)
Windows sandbox sessions can delete files in writable roots and access the managed primary runtime. (#31138, #31574)
Made the `/review` branch picker faster and more reliable in large repositories. (#31464)
Improved automatic review behavior with clearer instructions and a focused tool set. (#31480)