繁體中文

新功能

預設模型換上 GPT-6.1 Sol,Amazon Bedrock 支援多代理與進階推論

如果你平時依賴雲端平台調度模型,現在內建與 Amazon Bedrock 目錄中的預設模型已正式換成 GPT-6.1 Sol。在 Bedrock 上搭配相容模型時,系統同步支援 multi-agent V2 與 Ultra 推論功能。同時 Bedrock Mantle 也開始接受 AWS GovCloud 區域。

相容模型可在 Amazon Bedrock 使用 multi-agent V2 與 Ultra 推論;Bedrock Mantle 則接受 AWS GovCloud 區域。

新功能

從運作中的終端機工作階段登入 MCP 伺服器

當你需要臨時授權 AI 連接外部資料庫或服務時,可以從目前的工作階段發起登入。在運作中的終端機工作階段輸入以下指令,登入指定 MCP(Model Context Protocol,讓 AI 連接外部工具的協定)伺服器:

/mcp login <name>

把 <name> 換成要登入的伺服器名稱。

新功能

語音對話自選麥克風與揚聲器,設定自動記在本機

戴耳機跟 AI 語音討論專案時,你現在可以自由指定聲音要從哪裡進出。這項更新讓你在語音對話中挑選專用的麥克風、揚聲器以及麥克風輸入聲道,而且所有偏好設定都會自動儲存在本機電腦上。

下一次開啟語音通話,系統就會記住你習慣的收音與播放設備。

新功能

Daybreak 改為明確啟用制,Cyber 存取方案可單輪指定

想使用 Daybreak 功能,現在必須明確開啟。單設 daybreak=true 已無效,需加上 --enable cli_daybreak 或在設定檔加入:

{
  "features": {
    "cli_daybreak": true
  }
}

預設會隱藏控制項與指示燈、停用 /daybreak,已存討論串也略過自動 Cyber 路由,但偏好設定仍保留。啟用路由需符合資格的 ChatGPT 登入、OpenAI 提供者,以及模型與方案明示支援。

單次回覆可用 codex exec --cyber-access-program 或 TypeScript SDK 的 cyberAccessProgram 指定 Cyber 方案;停用 cli_daybreak 後,codex exec 的明確覆寫仍可使用,且不改動已儲存的方案選擇。

問題修復

提升寫入權限不波及讀取限制,啟動權限支援斷線重連

當你核准 AI 擴大存取檔案時,系統現在能更精細地劃分安全邊界。經核准的檔案系統權限提升可以單獨放寬寫入範圍,同時嚴格維持原有的讀取拒絕與網路連線限制。背景任務也會確實繼承發起那一輪對話的既有權限。在終端機重連或開啟新工作階段(session,與 AI 對話的互動連線)時,明確指定的啟動權限會繼續維持有效,而客戶端的隱式設定也不會再意外覆寫伺服器端或已存討論串的網路搜尋設定。

新功能

Windows 特權工作階段改用內嵌伺服器,貼上後按 Enter 能正常送出

在 Windows 系統上以管理員權限操作終端機時,提升權限的工作階段現在可透過內嵌伺服器順利啟動。同時,受保護的使用者設定檔目錄下,沙箱內的 PowerShell 執行時能正確保留相對路徑。另外,當貼上偵測倒數結束後,按下 Enter 鍵會正確送出暫存緩衝區內的文字,即便在 Vim 插入模式下也能正常送出。

提升權限的工作階段可啟動、受保護目錄下保留相對路徑,貼上偵測到期後 Enter 也能正常送出。

問題修復

討論串重啟納入最新紀錄,連線重試遵循伺服器引導

如果你重新開啟先前暫停的討論串,系統現在會完整納入最新提交的歷史紀錄。在啟動時,系統能更早偵測出可復原的 SQLite 資料庫損毀,並將受損的資料庫保留為備份檔。在網路連線方面,回應重試以及 WebSocket 轉 HTTP 備援(fallback,主要線路不通時切換的備用方案)現在會嚴格遵循伺服器的重試指示,減少伺服器過載時過早判定失敗的狀況。登入認證指引已更新說明憑證可能存放在系統金鑰庫(keyring,系統存放安全憑證的地方),不再暗示憑證一律放在 auth.json 中。發布舊版 alpha 或緊急修復套件時,也不會再將 npm 上的 alpha 標籤意外倒退。現在會更早偵測可復原的資料庫損毀並保留受損檔案;連線重試遵循伺服器指引,減少過載時過早失敗。

English

FEATURE

Default Model Upgraded to GPT-6.1 Sol, Amazon Bedrock Adds Multi-Agent and Advanced Inference Support

If you rely on cloud platforms for model dispatch, the default model built into the system and the Amazon Bedrock catalog has officially switched to GPT-6.1 Sol. When paired with compatible models on Bedrock, the system simultaneously supports multi-agent V2 and Ultra inference features. At the same time, Bedrock Mantle now accepts AWS GovCloud regions.

Compatible models can use multi-agent V2 and Ultra inference on Amazon Bedrock, while Bedrock Mantle accepts AWS GovCloud regions.

FEATURE

Log In to MCP Servers from an Active Terminal Session

When you need to grant AI temporary access to external databases or services, you can initiate a login directly from your current session. MCP stands for Model Context Protocol (a protocol that lets AI connect to external tools). Enter the following command in an active terminal session to log in to the specified MCP server:

/mcp login <name>

Replace <name> with the name of the server you want to log in to.

FEATURE

Select Microphones and Speakers for Voice Conversations with Local Preference Storage

When discussing projects with AI using headphones, you can now freely choose where sound enters and exits. This update lets you pick dedicated microphones, speakers, and microphone input channels during voice conversations, with all preferences automatically saved to your local machine.

The next time you start a voice call, the system remembers your preferred audio input and output devices.

FEATURE

Daybreak Switches to Explicit Opt-In, Cyber Access Program Configurable per Turn

To use Daybreak features, you must now explicitly enable them. Setting daybreak=true alone no longer works; you must add --enable cli_daybreak or add the following to your configuration file:

{
  "features": {
    "cli_daybreak": true
  }
}

By default, controls and indicators are hidden, /daybreak is disabled, and saved threads skip automatic Cyber routing, though preferences remain preserved. Enabling routing requires an eligible ChatGPT login, an OpenAI provider, and explicit model and program support.

For single-turn responses, you can specify the Cyber program via codex exec --cyber-access-program or the TypeScript SDK's cyberAccessProgram. After disabling cli_daybreak, explicit overrides with codex exec remain usable without altering saved program selections.

BUGFIX

Write Permission Elevation Preserves Read Restrictions, Launch Permissions Support Reconnection

When you approve expanded file access for AI, the system now delineates security boundaries with higher precision. Approved file system permission elevations can relax write scopes independently while strictly maintaining existing read denials and network connection limits. Background tasks faithfully inherit existing permissions from the turn that spawned them. When reconnecting in a terminal or launching a new session (an interactive connection for conversing with AI), explicitly specified launch permissions remain valid, and implicit client settings no longer accidentally overwrite server-side or saved-thread web search configurations.

FEATURE

Windows Elevated Sessions Switch to Embedded Server, Pressing Enter After Paste Submits Text Properly

When running the terminal with administrator privileges on Windows, elevated sessions can now start smoothly via an embedded server. Meanwhile, under protected user profile directories, PowerShell running inside the sandbox correctly preserves relative paths. Additionally, once the paste detection countdown finishes, pressing Enter properly submits text stored in the staging buffer, functioning normally even in Vim insert mode.

Elevated sessions can launch, relative paths are preserved under protected directories, and pressing Enter submits normally after paste detection expires.

BUGFIX

Thread Resumption Includes Latest History, Connection Retries Follow Server Guidance

If you resume a previously paused thread, the system now fully incorporates the latest committed history. At startup, the system detects recoverable SQLite database corruption earlier and preserves the corrupted database as a backup file. For network connections, response retries and WebSocket-to-HTTP fallback (a backup option used when the primary connection is unavailable) strictly follow server retry instructions, reducing premature failure decisions during server overloads. Login authentication guidance has been updated to explain that credentials may reside in the system keyring (the system's storage for security credentials) rather than implying they always live in auth.json. Furthermore, publishing older alpha versions or hotfix packages no longer accidentally rolls back the alpha tag on npm. Recoverable database corruption is detected earlier with damaged files retained, and connection retries follow server guidance to minimize early failures during overloads.

原始 CHANGELOG

Original changelog預設模型換上 GPT-6.1 Sol,Amazon Bedrock 支援多代理與進階推論
GPT-6.1 Sol is now the default model in the bundled and Amazon Bedrock catalogs. (#49318, #49339)
Amazon Bedrock supports multi-agent V2 and Ultra reasoning on compatible models; Bedrock Mantle also accepts AWS GovCloud regions. (#49345, #49813)
Original changelog從運作中的終端機工作階段登入 MCP 伺服器
Sign in to MCP servers from an active terminal session with `/mcp login <name>`. (#49290)
Original changelog語音對話自選麥克風與揚聲器,設定自動記在本機
Choose your microphone, speaker, and microphone input channels for voice conversations, with preferences saved locally. (#49437, #49836)
Original changelogDaybreak 改為明確啟用制,Cyber 存取方案可單輪指定
Daybreak is opt-in through `--enable cli_daybreak` or `features.cli_daybreak=true`; `daybreak=true` alone is insufficient. By default, controls and indicators are hidden, `/daybreak` is unavailable, and automatic Cyber routing is omitted—even for saved Daybreak threads. Saved preferences remain intact. Opt-in routing requires eligible ChatGPT sign-in, the OpenAI provider, and advertised model/program support. (#49856, #49858, #49859, #49861, #51207)
Select a Cyber access program per turn with `codex exec --cyber-access-program` or the TypeScript SDK’s `cyberAccessProgram` option. The explicit exec override remains available with `cli_daybreak` disabled and leaves the saved choice unchanged. (#49939, #51207)
Original changelog提升寫入權限不波及讀取限制,啟動權限支援斷線重連
Approved filesystem escalation can now grant broader write access while preserving denied reads and network restrictions. Background tasks retain their originating turn’s permissions. (#49353, #49880)
Explicit launch permissions survive terminal reconnects and new sessions, while implicit client settings no longer overwrite server or saved-thread web-search settings. (#49809, #49799)
Original changelogWindows 特權工作階段改用內嵌伺服器,貼上後按 Enter 能正常送出
Elevated Windows terminal sessions can start using an embedded server, and sandboxed PowerShell preserves relative paths beneath protected user profiles. (#49855, #49690)
Enter correctly submits buffered input after paste detection expires, including in Vim insert mode. (#49810)
Original changelog討論串重啟納入最新紀錄,連線重試遵循伺服器引導
Thread resume includes the latest committed history. Startup detects recoverable SQLite corruption earlier and preserves damaged databases as backups. (#49599, #49701)
Responses retries and WebSocket-to-HTTP fallback honor server retry guidance, reducing premature failures during overload. (#49441)
Authentication guidance now accounts for keyring storage instead of implying credentials always reside in `auth.json`. (#49361)
Publishing an older alpha or hotfix no longer moves npm alpha tags backward. (#49704)