Codex 0.144.1

撞到用量上限時拿到的重置點數（usage-limit reset credits，官方補償或活動送的「把額度計時器歸零」券），現在看得到每張的種類和到期日，兌換時還能自己挑要用哪一張。以前只能盲兌，可能把效期還長的先花掉、快過期的反而放到作廢；現在像皮夾裡的折價券終於印上了面額和效期，先用哪張自己精打細算。

外掛（plugin，幫 Codex 加裝新技能的擴充包）生態這次大開門：遠端外掛預設直接可用，不用再自己開開關；型錄列出的資訊變豐富、看得到遠端和本機各是什麼版本，還能從 npm（JavaScript 世界最大的套件市集）來源安裝。就像手機從「只能裝原廠預載的 App」升級成「應用商店直接開張」。

在公司網路後面用不了 Codex 的人有救了：登入和 API 流量現在會乖乖走 macOS 和 Windows 的系統代理（system proxy，公司統一管制對外連線的中繼站）設定，連 PAC 和 WPAD（讓電腦自動找到該走哪個代理的設定檔機制）這種自動配置都支援。就像新來的同事終於學會走公司大門的訪客登記流程，不再翻牆進來被警衛擋。

應用核准（app approval，決定外接應用哪些動作要先徵求你同意的規則）多了一種 writes 模式：標明是唯讀的動作直接放行，要動手寫入時才跳出來問你。以前粒度太粗、要嘛全問要嘛全放；現在像圖書館的規矩——隨便翻書不用登記，要在書上畫線才需要館員蓋章。

選 Ultra 推理（最高強度的思考等級，答得更深、但吃額度也快）時，如果你同時開著多代理高併發（很多隻代理一起跑），Codex 現在會先警告你：這樣開下去用量會衝很快。就像租車行在你一口氣租五台跑車時提醒一句「油錢會很可觀喔」，讓你衝之前心裡有數。

MCP 工具（Model Context Protocol，外接工具的插座標準）需要登入驗證時，現在會當場跳出來問你，不用再先去設定裡打開實驗性開關。以前工具卡在「需要登入」就整個停擺，你還得知道有那個隱藏開關才救得回來；現在像店員遇到需要會員卡的商品，直接在櫃檯問你「要現在辦嗎」，不用先回家翻說明書。

用裝置代碼登入（device-code login，在另一台裝置輸入一組代碼來授權登入的方式）時，畫面現在多了一段警語，教你辨認並擋下釣魚（phishing，壞人假冒官方、騙你把登入代碼交出去的詐術）。登入機制本身沒變，變的是多了一位站在 ATM 旁提醒「不要照電話指示轉帳」的警察。

The usage-limit reset credits you get around usage caps (vouchers from goodwill grants or promos that zero out your quota timer) now show their type and expiration, and you choose which one to redeem. Redemption used to be blind, so you could spend a long-lived credit while an expiring one quietly went to waste; now it's like the coupons in your wallet finally printing their value and expiry date, so you decide which to use first.

The plugin ecosystem (add-on packs that teach Codex new skills) just flung its doors open: remote plugins are enabled by default with no switch to flip, catalog rows show richer info including remote and local versions, and you can install from npm sources (the JavaScript world's biggest package marketplace). It's like a phone going from "factory-preloaded apps only" to "the app store is open."

If Codex never worked behind your corporate network, relief is here: authentication and API traffic now duly route through macOS and Windows system proxies (the relay your company uses to control outbound connections), including PAC and WPAD auto-configuration (the mechanisms that let a computer discover which proxy to use). Like a new hire finally learning to sign in at the front desk instead of climbing the fence and getting stopped by security.

App approvals (the rules deciding which actions an external app must clear with you first) gain a writes mode: actions declared read-only sail through, and you're only prompted when something wants to write. The old granularity was all-or-nothing — ask about everything or nothing; now it works like a library: browse any book freely, but the librarian's stamp is only needed if you want to mark one up.

When you pick Ultra reasoning (the highest thinking tier — deeper answers, faster quota burn) while running high multi-agent concurrency (many agents at once), Codex now warns you that usage could spike quickly. Like a rental agency reminding you, as you rent five sports cars at once, that the fuel bill will be considerable — so you commit with your eyes open.

When an MCP tool (Model Context Protocol, the socket standard for plugging in outside tools) needs you to authenticate, it now just asks on the spot — no more flipping an experimental opt-in first. Tools used to stall at "authentication required," recoverable only if you knew about the hidden switch; now it's like a cashier asking "want to sign up for the membership now?" right at the counter, instead of sending you home to read the fine print.

Device-code login (authorizing a sign-in by typing a code on another device) now shows a warning that teaches you to recognize and stop phishing (the con where someone poses as the official site to trick your login code out of you). The mechanism itself didn't change — there's just now a police officer standing by the ATM reminding you not to wire money to strangers on the phone.