Codex 0.154.0

開發時想嘗試最新一代模型？現在進入模型挑選器（model picker，供切換不同 AI 版本的選單）即可直接選用 GPT-6-Astra。這項更新也同步推送到 Amazon Bedrock 的服務目錄中。若你正打算將既有專案遷移過來，內建的 OpenAI Docs 技能也已全面更新，針對 GPT-6-Astra 提供專門的轉移步驟、相容性說明與提示詞撰寫指引。

無論你透過本機選單還是雲端目錄調用，都能直接對照指引順利切換。

你想同時處理多條開發分支又不想弄亂現有目錄？Codex 新增了實驗性的工作樹（worktree，Git 讓同一專案平行開多份副本的功能）支援。

現在只要在啟動時加上 --worktree 旗標，或在對話中輸入 /worktree 指令，就能為全新或分支衍生出的工作階段建立彼此隔離的簽出目錄。建立之後，你還能隨心瀏覽所有存在的工作樹，並重新續接先前的工作進度。

請 Codex 寫程式的同時，你不再需要被動等待它停下才能互動。當它在背景持續運作並向你提出疑問時，現在能直接在行內（inline，直接在當前內容中插入顯示）彈出提問並即時作答。

你可以直接點選介面給出的建議選項，也能自行輸入自訂文字回答。更重要的是，這項互動完全不會清空或影響你原本在輸入框中打到一半的主草稿，確保思緒與進度雙軌推進。

在 Windows 環境上使用 Codex，多個工作階段現在能共用同一個背景運行的伺服器，不必每個終端機視窗各自啟動一份。這次更新同步引入了守護行程（daemon，在背景持續默默提供服務的常駐程式）生命週期管理指令，讓你能查詢狀態、啟動或終止背景伺服器，同時還納入了託管更新機制，確保背景服務能平順接收後續升級。

習慣 Vim 鍵盤操作的開發者，在編輯草稿時手感將更加俐落。這次更新為 Vim 模式補上了經典的 R 取代模式，讓你可以直接覆蓋游標處的字元。進行文字替換時，你能按鍵復原（undo，回復到修改前的文字），也能利用小數點鍵重複執行上一次的取代動作。針對舊型終端機，更新也改善了 Escape 鍵的訊號處理，讓跳離編輯模式的操作更可靠，避免按鍵延遲或失靈。

將對話產生的程式碼或說明貼到其他文書軟體時，排版不再被打亂成純文字了。現在從 Codex 複製回覆內容，貼入支援富文字（rich-text，包含粗體、標題與程式碼區塊等排版樣式）的應用程式時，會完整保留原本的格式外觀。與此同時，命令列工具的 /copy 指令也迎來功能強化，除了複製回覆本身，現在還能單獨複製狀態輸出，或是擷取工作階段內的特定個別欄位。

這讓整理文件與分享除錯資訊變得更順暢。

當你手邊的工作階段正在進行，外部外掛有了變更也不需要關掉重開。

既有的工作階段現在具備動態感知能力，能在不中斷執行的情況下，即刻辨識剛安裝好的外掛工具。當外掛在外部完成升級或執行版本回捲時，當前視窗會立即重新整理相應的技能。連同內部定義的掛鉤（hook，特定事件發生時被觸發的小程式）也會一併更新，確保所有自動化流程即時生效。

開啟陌生專案目錄或在蘋果電腦上執行終端機，資安防線在開工當下就已全面就位。現在 Codex 在啟動過程中，若尚未與當前工作區建立明確的信任關係，會主動避免執行任何由工作區控制的輔助程式，杜絕惡意腳本趁虛而入。與此同時，macOS 系統下的沙盒（sandbox，隔離程式執行權限的保護層）也經過強化，能確實阻擋未經許可的終端機輸入注入攻擊。

這讓你在檢視未知程式碼時能受到更周密的保護。

透過遠端環境接續或分流既有進度時，設定與權限將維持一致。當你針對遠端工作階段執行續接（resume，接續先前中斷的進度）或分支操作時，先前已經儲存的授權與權限設定現在會完整延續，省去反覆確認授權的打擾。同時，全新開啟的工作階段以及衍生的分支，除非你在指令中明確指定其他模型，否則一律會嚴格遵守伺服器端配置的預設模型規格。

此舉確保了跨端協同作業的權限延續性與環境規範。

當你想接續處理某個對話，但該對話正巧在另一個應用程式中開啟時，現在不必再擔心進度衝突了。

Codex 會在介面上顯示唯讀的對話轉錄（transcript，完整對話逐字紀錄），讓你能回顧過往脈絡，並附上重新嘗試的按鈕選項。與此同時，你當前輸入框中正在撰寫的文字草稿也會受到完整保護，不會被清空或覆蓋，方便你在另一端釋放鎖定後立刻接手。

面對需要反覆審核權限的操作流程，自動審查機制的判斷現在更加嚴謹周全。在對話歷程經歷壓縮（compaction，精簡長對話以節省記憶體的機制）後，自動核准審查機制能更完善地保留原本的授權脈絡，避免重要授權因紀錄濃縮而遺失。更重要的是，一旦使用者在後續給出了全新的指令或補充回答，只要先前的核准因此失效，審查機制就會果斷駁回該項核准，防止舊授權被錯誤套用到新情境。

Looking to try the latest model during development? You can now select GPT-6-Astra directly from the model picker. This update is also available in the Amazon Bedrock service catalog. If you plan to migrate existing projects, the bundled OpenAI Docs skill has been updated with dedicated migration steps, compatibility notes, and prompting guidance for GPT-6-Astra.

Whether you invoke it from the local menu or cloud catalog, you can switch smoothly by following the guides.

Want to work on multiple branches simultaneously without cluttering your current directory? Codex now introduces experimental worktree support.

Simply pass the --worktree flag at startup or enter the /worktree command in a conversation to create isolated checkout directories for new or forked sessions. Once created, you can browse all existing worktrees and resume earlier progress at any time.

You no longer have to wait idly for Codex to stop before interacting while it writes code. When Codex runs in the background and asks a question, it can now surface prompt questions inline for immediate replies.

You can click suggested options provided by the interface or type custom text responses. Best of all, this interaction will not clear or affect your ongoing main draft in the input box, keeping both your thoughts and progress on track.

Multiple sessions on Windows can now share a single background server instead of each terminal window starting its own. This update also introduces daemon lifecycle management commands to check status, start, or stop the background server, alongside managed updates to ensure background services receive future upgrades smoothly.

Developers accustomed to Vim keybindings will enjoy a snappier draft editing experience. This update brings the classic R replace mode to Vim mode, allowing you to overwrite characters directly under the cursor. During text replacement, you can undo changes and use the dot key to repeat your previous replacement action. For legacy terminals, the update improves Escape key handling, making exiting edit modes more reliable and avoiding key delays or failures.

Pasting generated code or explanations into other document apps will no longer scramble formatting into plain text. Copying responses from Codex into rich-text applications now fully preserves the original styling and appearance. Meanwhile, the command-line /copy command has been enhanced to copy status output or extract specific individual fields from a session in addition to the response itself.

This makes organizing documentation and sharing debugging information much smoother.

When your current session is running, you no longer need to restart it when external plugins change.

Existing sessions now feature dynamic detection to recognize newly installed plugin tools without interrupting execution. When plugins are upgraded or rolled back externally, the active window immediately refreshes corresponding skills. Internally defined hooks are updated as well, ensuring all automated workflows take effect immediately.

When opening unfamiliar project directories or running terminals on Mac computers, security defenses are active right from the start. During startup, Codex actively avoids running workspace-controlled helpers before establishing trust with the current workspace, preventing malicious scripts from taking advantage. Meanwhile, the macOS sandbox has been strengthened to block unauthorized terminal input injection attacks.

This ensures thorough protection when inspecting unknown code.

Configurations and permissions remain consistent when resuming or branching progress in remote environments. When performing resume or fork operations on remote sessions, previously saved authorizations and permission settings are preserved, eliminating repetitive authorization prompts. Furthermore, fresh sessions and derived forks strictly respect server-configured default models unless you explicitly specify another model in your command.

This ensures permission continuity and environmental standards during remote collaboration.

You no longer have to worry about progress conflicts when resuming a conversation that happens to be open in another application.

Codex displays a read-only transcript in the interface so you can review past context, accompanied by a retry button option. Meanwhile, your ongoing text draft in the input box remains protected without being cleared or overwritten, allowing you to take over immediately once the lock is released on the other side.

When dealing with workflows that require repeated permission reviews, automatic approval mechanisms are now more rigorous. Following conversation compaction, automatic approval reviews better preserve original authorization context, preventing critical authorizations from being lost due to history condensation. More importantly, once users provide fresh instructions or supplementary answers that invalidate earlier approvals, the review mechanism promptly rejects those approvals to prevent obsolete authorizations from being misapplied in new contexts.