支援 @ 引用其他任務,並可透過終端機由代理收發與建立任務
在終端機同時推進多項任務時,跨任務調度現在變得像通訊軟體一樣自然。
你可以用 @ 標記其他 Codex 任務來直接引用其內容;也能在終端機中請代理(agent,自動替你執行任務的 AI 助手)讀取特定任務、建立新任務,或向進行中的任務傳送訊息。這讓多工協作時不必手動複製貼上歷史紀錄。
發布日期:2026-08-26
在終端機同時推進多項任務時,跨任務調度現在變得像通訊軟體一樣自然。
你可以用 @ 標記其他 Codex 任務來直接引用其內容;也能在終端機中請代理(agent,自動替你執行任務的 AI 助手)讀取特定任務、建立新任務,或向進行中的任務傳送訊息。這讓多工協作時不必手動複製貼上歷史紀錄。
想從長篇對話中抽出一小段程式碼或重點時,不用再拿滑鼠在終端機裡吃力選取。輸入 /copy 指令後,介面現在會跳出選擇清單。你可以自由挑選要複製整篇完整回覆、各個獨立的程式碼區塊,或是特定的引用區塊。這讓擷取內容變得更加精準俐落。
終端機裡開了一堆任務卻常分不清內容的問題,現在有了更省心的解法。
未手動命名的終端機任務現在會根據對話自動獲得具描述性的標題;當你想重新命名時,輸入 /rename 指令也會依據當前對話主動建議一段可編輯的標題草稿。這讓你在任務清單中能一眼辨識目標,省去手動打字命名的繁瑣步驟。
閱讀包含超連結的回覆時,終端機畫面變得更加乾淨易讀。在支援超連結的終端機環境下,Markdown 格式的連結會直接顯示為可點擊的簡潔文字標籤;而在不支援點擊的其他終端機中,系統則會完整保留原本可見的網址字串。這樣既能保持排版清爽,又確保在任何環境下都不會遺失網址資訊。
你可以把循環切換權限模式的動作綁定到快捷鍵。權限模式(permission mode,決定系統在執行動作時如何處理確認的規則)會隨著這個按鍵依序切換。
當工作需要換一種確認方式時,使用你設定的快捷鍵,即可在可用的權限模式間循環切換;想再換一種就繼續按下去。
Vim 模式裡有多處要做同樣的文字修改時,現在按下 . 就能重複上一個編輯。Vim 模式(以鍵盤指令操作文字的編輯方式)會把剛完成的編輯動作交給 . 重新執行,不必再次逐字輸入相同變更。
這是 Vim 模式中的編輯重複功能。
任務執行途中突然按暫停時,後續的清理與自訂動作現在能自動接手。
系統新增了 Interrupt hook(掛鉤,特定事件發生時被觸發的小程式)。當進行中的頂層對話輪次被中斷時,這項機制可以自動執行命令列指令,或呼叫 MCP(讓 AI 連接外部工具的協定)處理常式進行收尾。這讓中止操作不再只是粗暴中斷,而能妥善保存狀態或釋放佔用的資源。
開啟來源不明的專案時,系統築起了更嚴密的安全防線。未受信任的專案不再能隨意提供專案層級的 AGENTS.md 指示檔,防止惡意專案藉由預先埋設的指令操控 AI 行為。此外,由管理政策所設定的拒絕讀取規則,在使用者中途變更權限後依然會強制生效,不會被意外覆蓋或失效。這確保了敏感檔案在整個操作過程中始終受到保護。
匯出診斷日誌排除故障時,機密資訊的外洩風險現在降得更低。系統強化了應用程式伺服器診斷報告中的 credential(登入憑證,證明身分與權限的密鑰資料)遮蔽處理。這次改進精確涵蓋了服務提供者、身分驗證更新以及 attestation(證明裝置與環境合法性的認證欄位)等關鍵資料。當你分享除錯診斷資訊時,這些敏感欄位會被自動遮蓋。
連接遠端擴充工具時,驗證與啟動流程現在更加穩定順暢。
系統修復了遠端 MCP(讓 AI 連接外部工具的協定)工具的連線問題。程式在查詢遠端 bearer token(驗證存取權限的授權令牌)時不再出錯,也修正了必要伺服器的啟動邏輯。整套調整完整維持了與舊版執行器的相容性,不必擔心升級後舊環境無法運作。
在 Windows 系統上使用特殊使用者名稱或高權限執行時,環境建立不再卡住。以前當使用者的個人資料夾路徑包含非英文字元(Unicode 字元,如中文或特殊符號)時,啟動別名常會失效。此外,在建立 elevated 管理員高權限沙盒環境時也會遭遇設定錯誤。現在這些路徑與權限問題都已修復,確保在各類系統設定下都能順利啟動隔離環境。
在 Unix 系統(如 macOS 或 Linux 等環境)結束程式時,不再因為背景殘留問題而卡死。以前當已脫離的行程依然佔用終端機,或者輸出緩衝區已被塞滿時,結束程式的流程常會陷入無限等待;現在系統會妥善清理這些狀態並順利退出。這讓每次離開工具時都能乾脆俐落。
透過雲端服務租用模型時,長對話與多任務協作變得更穩定。
針對使用 Amazon Bedrock(亞馬遜雲端託管的 AI 模型平台)的使用者,系統修復了長對話的歷史壓縮錯誤;同時也解決了多代理協同作業時的相容性問題。這讓透過雲端模型處理複雜專案時更加流暢。
When running multiple parallel tasks in the terminal, coordinating across workflows is now as natural as using team chat.
You can now use @ mentions to reference other Codex tasks directly in your prompt. You can also ask agents from the terminal to inspect existing tasks, spin up new ones, or dispatch messages to active tasks without manual copy-pasting.
When extracting a specific snippet or excerpt from a long reply, you no longer need to drag your mouse across terminal text. Running /copy now opens an interactive picker menu. You can explicitly choose between copying the full response, individual code blocks, or markdown blockquotes.
When juggling multiple background tasks in your terminal, identifying what each task is doing is now effortless.
Unnamed terminal tasks now automatically receive descriptive titles based on context. Furthermore, running /rename inspects your conversation history and suggests an editable title proposal, saving you from having to type names manually.
Reviewing responses that contain hyperlinks is now much cleaner in your terminal. On supported terminals, Markdown links render as tidy, clickable text labels. In environments without hyperlink support, the full visible URLs remain intact so you can still read and copy them easily.
You can bind cycling through permission modes to a custom shortcut. A permission mode determines how Codex handles confirmation before an action, and the bound key moves through the available modes in sequence.
When your work calls for a different confirmation approach, press the shortcut you configured to cycle to it.
When the same text change is needed in several places in Vim mode, pressing . now repeats your last edit. Vim mode is a keyboard-command way to edit text; . reruns the edit you just completed, so you do not need to type that same change again.
This is the editing-repeat feature for Vim mode.
When cancelling an active turn midway, automated cleanup and custom actions can now take over immediately.
Codex introduces Interrupt hooks. When an active top-level conversation turn is interrupted, these hooks can automatically run shell commands or trigger MCP handlers, allowing your environment to safely persist state or release held resources instead of abruptly terminating.
Opening repositories from unknown sources is now significantly safer. Untrusted projects are no longer allowed to supply project-level AGENTS.md instruction files, preventing malicious repositories from hijacking AI behavior with embedded prompts. Additionally, managed deny-read security rules remain strictly enforced even after interactive permission changes occur during a session.
Exporting diagnostic reports for troubleshooting is now much safer. Codex has expanded credential redaction across app-server diagnostics. Sensitive data is now automatically masked across provider details, authentication refresh flows, and hardware attestation fields. When you share debug output with maintainers, secret tokens and verification payloads will never leak into log files.
Connecting to remote tool extensions is now much more dependable.
Codex has resolved issues with remote MCP server connections. The system now reliably looks up bearer tokens and initializes required servers without failure, all while maintaining full backwards compatibility with older executor environments.
Running Codex on Windows with elevated permissions or special account names is now completely smooth. Previously, if a user profile folder contained non-ASCII Unicode characters (such as accents or non-Latin scripts), launch aliases would often fail. Elevated sandbox environments running with administrator privileges also encountered initialization errors. Both path handling and privilege escalation setups are now resolved.
Exiting Codex on Unix systems like macOS or Linux is now fast and reliable. Previously, shutting down could hang indefinitely if detached background processes still held terminal handles or if output buffers were completely full. The shutdown sequence now cleans up detached processes and flushes full buffers properly.
Running long conversations and multi-agent setups through cloud platforms is now much more reliable.
For developers using Amazon Bedrock models, Codex has fixed errors during conversation compaction when compressing long context windows. Multi-agent compatibility issues have also been resolved, allowing multiple sub-agents to collaborate smoothly.
Reference other Codex tasks with `@` mentions, and ask agents to read, create, or message tasks from the terminal. (#40308, #40315)`/copy` now offers a picker for full responses, individual code blocks, and blockquotes. (#39997)Unnamed terminal tasks receive descriptive titles automatically, and `/rename` suggests an editable title based on the conversation. (#40492, #40495)Markdown links appear as clickable labels in supported terminals, with visible URLs retained elsewhere. (#40471)Bind shortcuts to cycle permission modes, and use `.` in Vim mode to repeat your last edit. (#39873, #40521)Bind shortcuts to cycle permission modes, and use `.` in Vim mode to repeat your last edit. (#39873, #40521)New `Interrupt` hooks can run commands or MCP handlers when an active top-level turn is interrupted. (#40511)Untrusted projects no longer supply project-level `AGENTS.md` instructions, and managed deny-read rules remain enforced after permission changes. (#39837, #40004)Improved credential redaction in app-server diagnostics, including provider, authentication refresh, and attestation fields. (#39993)Fixed remote MCP bearer-token lookup and required-server startup while preserving compatibility with older executors. (#39926, #39952, #39979)Fixed elevated Windows sandbox setup and launch aliases under Unicode user paths. (#39971, #40570)Prevented Unix shutdown hangs caused by detached processes retaining a terminal or full terminal output buffers. (#40460)Fixed conversation compaction and multi-agent compatibility for Amazon Bedrock models. (#39804, #39825)