當你核准 AI 擴大存取檔案時,系統現在能更精細地劃分安全邊界。經核准的檔案系統權限提升可以單獨放寬寫入範圍,同時嚴格維持原有的讀取拒絕與網路連線限制。背景任務也會確實繼承發起那一輪對話的既有權限。在終端機重連或開啟新工作階段(session,與 AI 對話的互動連線)時,明確指定的啟動權限會繼續維持有效,而客戶端的隱式設定也不會再意外覆寫伺服器端或已存討論串的網路搜尋設定。
新功能
Windows 特權工作階段改用內嵌伺服器,貼上後按 Enter 能正常送出
在 Windows 系統上以管理員權限操作終端機時,提升權限的工作階段現在可透過內嵌伺服器順利啟動。同時,受保護的使用者設定檔目錄下,沙箱內的 PowerShell 執行時能正確保留相對路徑。另外,當貼上偵測倒數結束後,按下 Enter 鍵會正確送出暫存緩衝區內的文字,即便在 Vim 插入模式下也能正常送出。
Default Model Upgraded to GPT-6.1 Sol, Amazon Bedrock Adds Multi-Agent and Advanced Inference Support
If you rely on cloud platforms for model dispatch, the default model built into the system and the Amazon Bedrock catalog has officially switched to GPT-6.1 Sol. When paired with compatible models on Bedrock, the system simultaneously supports multi-agent V2 and Ultra inference features. At the same time, Bedrock Mantle now accepts AWS GovCloud regions.
Compatible models can use multi-agent V2 and Ultra inference on Amazon Bedrock, while Bedrock Mantle accepts AWS GovCloud regions.
FEATURE
Log In to MCP Servers from an Active Terminal Session
When you need to grant AI temporary access to external databases or services, you can initiate a login directly from your current session. MCP stands for Model Context Protocol (a protocol that lets AI connect to external tools). Enter the following command in an active terminal session to log in to the specified MCP server:
/mcp login <name>
Replace <name> with the name of the server you want to log in to.
FEATURE
Select Microphones and Speakers for Voice Conversations with Local Preference Storage
When discussing projects with AI using headphones, you can now freely choose where sound enters and exits. This update lets you pick dedicated microphones, speakers, and microphone input channels during voice conversations, with all preferences automatically saved to your local machine.
The next time you start a voice call, the system remembers your preferred audio input and output devices.
FEATURE
Daybreak Switches to Explicit Opt-In, Cyber Access Program Configurable per Turn
To use Daybreak features, you must now explicitly enable them. Setting daybreak=true alone no longer works; you must add --enable cli_daybreak or add the following to your configuration file:
{
"features": {
"cli_daybreak": true
}
}
By default, controls and indicators are hidden, /daybreak is disabled, and saved threads skip automatic Cyber routing, though preferences remain preserved. Enabling routing requires an eligible ChatGPT login, an OpenAI provider, and explicit model and program support.
For single-turn responses, you can specify the Cyber program via codex exec --cyber-access-program or the TypeScript SDK's cyberAccessProgram. After disabling cli_daybreak, explicit overrides with codex exec remain usable without altering saved program selections.
BUGFIX
Write Permission Elevation Preserves Read Restrictions, Launch Permissions Support Reconnection
When you approve expanded file access for AI, the system now delineates security boundaries with higher precision. Approved file system permission elevations can relax write scopes independently while strictly maintaining existing read denials and network connection limits. Background tasks faithfully inherit existing permissions from the turn that spawned them. When reconnecting in a terminal or launching a new session (an interactive connection for conversing with AI), explicitly specified launch permissions remain valid, and implicit client settings no longer accidentally overwrite server-side or saved-thread web search configurations.
FEATURE
Windows Elevated Sessions Switch to Embedded Server, Pressing Enter After Paste Submits Text Properly
When running the terminal with administrator privileges on Windows, elevated sessions can now start smoothly via an embedded server. Meanwhile, under protected user profile directories, PowerShell running inside the sandbox correctly preserves relative paths. Additionally, once the paste detection countdown finishes, pressing Enter properly submits text stored in the staging buffer, functioning normally even in Vim insert mode.
Elevated sessions can launch, relative paths are preserved under protected directories, and pressing Enter submits normally after paste detection expires.
BUGFIX
Thread Resumption Includes Latest History, Connection Retries Follow Server Guidance
If you resume a previously paused thread, the system now fully incorporates the latest committed history. At startup, the system detects recoverable SQLite database corruption earlier and preserves the corrupted database as a backup file. For network connections, response retries and WebSocket-to-HTTP fallback (a backup option used when the primary connection is unavailable) strictly follow server retry instructions, reducing premature failure decisions during server overloads. Login authentication guidance has been updated to explain that credentials may reside in the system keyring (the system's storage for security credentials) rather than implying they always live in auth.json. Furthermore, publishing older alpha versions or hotfix packages no longer accidentally rolls back the alpha tag on npm. Recoverable database corruption is detected earlier with damaged files retained, and connection retries follow server guidance to minimize early failures during overloads.
原始 CHANGELOG
Original changelog預設模型換上 GPT-6.1 Sol,Amazon Bedrock 支援多代理與進階推論
GPT-6.1 Sol is now the default model in the bundled and Amazon Bedrock catalogs. (#49318, #49339)
Amazon Bedrock supports multi-agent V2 and Ultra reasoning on compatible models; Bedrock Mantle also accepts AWS GovCloud regions. (#49345, #49813)
Original changelog從運作中的終端機工作階段登入 MCP 伺服器
Sign in to MCP servers from an active terminal session with `/mcp login <name>`. (#49290)
Original changelog語音對話自選麥克風與揚聲器,設定自動記在本機
Choose your microphone, speaker, and microphone input channels for voice conversations, with preferences saved locally. (#49437, #49836)
Original changelogDaybreak 改為明確啟用制,Cyber 存取方案可單輪指定
Daybreak is opt-in through `--enable cli_daybreak` or `features.cli_daybreak=true`; `daybreak=true` alone is insufficient. By default, controls and indicators are hidden, `/daybreak` is unavailable, and automatic Cyber routing is omitted—even for saved Daybreak threads. Saved preferences remain intact. Opt-in routing requires eligible ChatGPT sign-in, the OpenAI provider, and advertised model/program support. (#49856, #49858, #49859, #49861, #51207)
Select a Cyber access program per turn with `codex exec --cyber-access-program` or the TypeScript SDK’s `cyberAccessProgram` option. The explicit exec override remains available with `cli_daybreak` disabled and leaves the saved choice unchanged. (#49939, #51207)
Original changelog提升寫入權限不波及讀取限制,啟動權限支援斷線重連
Approved filesystem escalation can now grant broader write access while preserving denied reads and network restrictions. Background tasks retain their originating turn’s permissions. (#49353, #49880)
Explicit launch permissions survive terminal reconnects and new sessions, while implicit client settings no longer overwrite server or saved-thread web-search settings. (#49809, #49799)
Original changelogWindows 特權工作階段改用內嵌伺服器,貼上後按 Enter 能正常送出
Elevated Windows terminal sessions can start using an embedded server, and sandboxed PowerShell preserves relative paths beneath protected user profiles. (#49855, #49690)
Enter correctly submits buffered input after paste detection expires, including in Vim insert mode. (#49810)
Original changelog討論串重啟納入最新紀錄,連線重試遵循伺服器引導
Thread resume includes the latest committed history. Startup detects recoverable SQLite corruption earlier and preserves damaged databases as backups. (#49599, #49701)
Responses retries and WebSocket-to-HTTP fallback honor server retry guidance, reducing premature failures during overload. (#49441)
Authentication guidance now accounts for keyring storage instead of implying credentials always reside in `auth.json`. (#49361)
Publishing an older alpha or hotfix no longer moves npm alpha tags backward. (#49704)