Default Model Upgraded to GPT-6.1 Sol, Amazon Bedrock Adds Multi-Agent and Advanced Inference Support
If you rely on cloud platforms for model dispatch, the default model built into the system and the Amazon Bedrock catalog has officially switched to GPT-6.1 Sol. When paired with compatible models on Bedrock, the system simultaneously supports multi-agent V2 and Ultra inference features. At the same time, Bedrock Mantle now accepts AWS GovCloud regions.
Compatible models can use multi-agent V2 and Ultra inference on Amazon Bedrock, while Bedrock Mantle accepts AWS GovCloud regions.
FEATURE
Log In to MCP Servers from an Active Terminal Session
When you need to grant AI temporary access to external databases or services, you can initiate a login directly from your current session. MCP stands for Model Context Protocol (a protocol that lets AI connect to external tools). Enter the following command in an active terminal session to log in to the specified MCP server:
/mcp login <name>
Replace <name> with the name of the server you want to log in to.
FEATURE
Select Microphones and Speakers for Voice Conversations with Local Preference Storage
When discussing projects with AI using headphones, you can now freely choose where sound enters and exits. This update lets you pick dedicated microphones, speakers, and microphone input channels during voice conversations, with all preferences automatically saved to your local machine.
The next time you start a voice call, the system remembers your preferred audio input and output devices.
FEATURE
Daybreak Switches to Explicit Opt-In, Cyber Access Program Configurable per Turn
To use Daybreak features, you must now explicitly enable them. Setting daybreak=true alone no longer works; you must add --enable cli_daybreak or add the following to your configuration file:
{
"features": {
"cli_daybreak": true
}
}
By default, controls and indicators are hidden, /daybreak is disabled, and saved threads skip automatic Cyber routing, though preferences remain preserved. Enabling routing requires an eligible ChatGPT login, an OpenAI provider, and explicit model and program support.
For single-turn responses, you can specify the Cyber program via codex exec --cyber-access-program or the TypeScript SDK's cyberAccessProgram. After disabling cli_daybreak, explicit overrides with codex exec remain usable without altering saved program selections.
BUGFIX
Write Permission Elevation Preserves Read Restrictions, Launch Permissions Support Reconnection
When you approve expanded file access for AI, the system now delineates security boundaries with higher precision. Approved file system permission elevations can relax write scopes independently while strictly maintaining existing read denials and network connection limits. Background tasks faithfully inherit existing permissions from the turn that spawned them. When reconnecting in a terminal or launching a new session (an interactive connection for conversing with AI), explicitly specified launch permissions remain valid, and implicit client settings no longer accidentally overwrite server-side or saved-thread web search configurations.
FEATURE
Windows Elevated Sessions Switch to Embedded Server, Pressing Enter After Paste Submits Text Properly
When running the terminal with administrator privileges on Windows, elevated sessions can now start smoothly via an embedded server. Meanwhile, under protected user profile directories, PowerShell running inside the sandbox correctly preserves relative paths. Additionally, once the paste detection countdown finishes, pressing Enter properly submits text stored in the staging buffer, functioning normally even in Vim insert mode.
Elevated sessions can launch, relative paths are preserved under protected directories, and pressing Enter submits normally after paste detection expires.
BUGFIX
Thread Resumption Includes Latest History, Connection Retries Follow Server Guidance
If you resume a previously paused thread, the system now fully incorporates the latest committed history. At startup, the system detects recoverable SQLite database corruption earlier and preserves the corrupted database as a backup file. For network connections, response retries and WebSocket-to-HTTP fallback (a backup option used when the primary connection is unavailable) strictly follow server retry instructions, reducing premature failure decisions during server overloads. Login authentication guidance has been updated to explain that credentials may reside in the system keyring (the system's storage for security credentials) rather than implying they always live in auth.json. Furthermore, publishing older alpha versions or hotfix packages no longer accidentally rolls back the alpha tag on npm. Recoverable database corruption is detected earlier with damaged files retained, and connection retries follow server guidance to minimize early failures during overloads.
Original changelog
Original changelogDefault Model Upgraded to GPT-6.1 Sol, Amazon Bedrock Adds Multi-Agent and Advanced Inference Support
GPT-6.1 Sol is now the default model in the bundled and Amazon Bedrock catalogs. (#49318, #49339)
Amazon Bedrock supports multi-agent V2 and Ultra reasoning on compatible models; Bedrock Mantle also accepts AWS GovCloud regions. (#49345, #49813)
Original changelogLog In to MCP Servers from an Active Terminal Session
Sign in to MCP servers from an active terminal session with `/mcp login <name>`. (#49290)
Original changelogSelect Microphones and Speakers for Voice Conversations with Local Preference Storage
Choose your microphone, speaker, and microphone input channels for voice conversations, with preferences saved locally. (#49437, #49836)
Original changelogDaybreak Switches to Explicit Opt-In, Cyber Access Program Configurable per Turn
Daybreak is opt-in through `--enable cli_daybreak` or `features.cli_daybreak=true`; `daybreak=true` alone is insufficient. By default, controls and indicators are hidden, `/daybreak` is unavailable, and automatic Cyber routing is omitted—even for saved Daybreak threads. Saved preferences remain intact. Opt-in routing requires eligible ChatGPT sign-in, the OpenAI provider, and advertised model/program support. (#49856, #49858, #49859, #49861, #51207)
Select a Cyber access program per turn with `codex exec --cyber-access-program` or the TypeScript SDK’s `cyberAccessProgram` option. The explicit exec override remains available with `cli_daybreak` disabled and leaves the saved choice unchanged. (#49939, #51207)
Original changelogWrite Permission Elevation Preserves Read Restrictions, Launch Permissions Support Reconnection
Approved filesystem escalation can now grant broader write access while preserving denied reads and network restrictions. Background tasks retain their originating turn’s permissions. (#49353, #49880)
Explicit launch permissions survive terminal reconnects and new sessions, while implicit client settings no longer overwrite server or saved-thread web-search settings. (#49809, #49799)
Original changelogWindows Elevated Sessions Switch to Embedded Server, Pressing Enter After Paste Submits Text Properly
Elevated Windows terminal sessions can start using an embedded server, and sandboxed PowerShell preserves relative paths beneath protected user profiles. (#49855, #49690)
Enter correctly submits buffered input after paste detection expires, including in Vim insert mode. (#49810)
Original changelogThread Resumption Includes Latest History, Connection Retries Follow Server Guidance
Thread resume includes the latest committed history. Startup detects recoverable SQLite corruption earlier and preserves damaged databases as backups. (#49599, #49701)
Responses retries and WebSocket-to-HTTP fallback honor server retry guidance, reducing premature failures during overload. (#49441)
Authentication guidance now accounts for keyring storage instead of implying credentials always reside in `auth.json`. (#49361)
Publishing an older alpha or hotfix no longer moves npm alpha tags backward. (#49704)