[macOS] Computer Use crashes in node_repl with sandbox_apply error (exit 71); direct MCP works

What version of the Codex App are you using (From “About Codex” dialog)?

26.825.51511 (build 7377)

What subscription do you have?

ChatGPT Pro

What platform is your computer?

Darwin 25.5.0 arm64

What issue are you seeing?

The official bundled Computer Use integration is unusable in local Codex tasks on macOS. Even a read-only Finder request causes the managed node_repl process to terminate before Computer Use can read the UI.

Prompt used:

Use Computer Use to read the title of the current Finder window. Do not click, type, or modify anything.

Actual result:

trusted Node process exited unexpectedly; kernel reset
sandbox_apply: Operation not permitted
macos_sandbox_failed
exited(code=71)
Expected result:
Computer Use should return the current Finder window title without clicking, typing, or modifying anything.
Diagnostic evidence:
- Reinstalling and updating the Codex desktop app and Computer Use did not resolve the issue.
- Restarting the desktop app and Computer Use did not resolve the issue.
- The failure remained after the bundled codex-cli updated from 0.151.0-alpha.7.1 to 0.151.0-alpha.7.2.
- Screen Recording and Accessibility permissions are granted.
- A direct MCP connection to the same bundled SkyComputerUseClient works successfully in the same workspace-write task.
- The direct MCP get_app_state call returned the Finder window title Desktop.
- Updating the system-installed Node.js does not help because the failing path uses the application-bundled runtime.
- Disabling the inner Node sandbox succeeds in a controlled test, but reduces isolation and is not a safe or durable workaround.
This strongly suggests a nested macOS sandbox compatibility issue in the bundled node_repl / @oai/sky path, rather than a Finder permission or Computer Use service failure.
I also attempted to report this through the in-app /feedback dialog four times. Every attempt failed with error code -32603 because the Sentry upload timed out after approximately 22–27 seconds.

Task/correlation ID:01a04c73-1f1b-7441-b6bc-3f0c6021f52d

### What steps can reproduce the bug?

1. Open the Codex desktop app on macOS.
2. Enable the official bundled Computer Use plugin.
3. Start a local Codex task using the default workspace-write sandbox.
4. Confirm that Screen Recording and Accessibility permissions are granted.
5. Send this prompt:

   "Use Computer Use to read the title of the current Finder window. Do not click, type, or modify anything."

6. The bundled Computer Use skill attempts to load @oai/sky through node_repl.
7. Before any Finder state is returned, the trusted Node process exits unexpectedly with:

   sandbox_apply: Operation not permitted
   macos_sandbox_failed
   exited(code=71)

8. Restart the Codex desktop app and Computer Use, then repeat the same prompt. The same failure occurs.
9. A direct MCP connection to the bundled SkyComputerUseClient succeeds with the same read-only Finder request.


### What is the expected behavior?

The bundled Computer Use integration should initialize successfully in a local Codex task without the trusted Node process exiting.

For the read-only request, Computer Use should use the granted Screen Recording and Accessibility permissions to read the current Finder window title and return “Desktop”.

It should complete without clicking, typing, modifying the UI, disabling any sandbox, or requiring a manually configured direct MCP workaround.

### Additional information

Additional diagnostic information:

- Codex App: 26.825.51511 (build 7377)
- Bundled codex-cli: 0.151.0-alpha.7.2
- Computer Use plugin: 26.828.1000919
- macOS: 26.5.2 (25F84), Darwin 25.5.0, arm64
- Screen Recording and Accessibility permissions are granted.

I have already reinstalled and updated the Codex app, restarted the app, restarted Computer Use, and reproduced the issue in a new task.

The bundled Computer Use path consistently fails with:

sandbox_apply: Operation not permitted
macos_sandbox_failed
trusted Node process exited unexpectedly; kernel reset
exited(code=71)

As a control test, connecting directly to the same bundled SkyComputerUseClient through MCP works and successfully returns the Finder window title “Desktop”. This suggests that macOS permissions and the Computer Use service itself are working, while the failure is specific to the bundled node_repl sandbox execution path.

The direct MCP configuration is only a workaround. No clicks, keyboard input, or UI modifications were performed during testing.

In-app feedback ID:
01a04c73-1f1b-7441-b6bc-3f0c6021f52d

However, the in-app feedback interface repeatedly reported that the feedback submission was unsuccessful.

Start with the bundled node_repl and @oai/sky execution path, then compare it with the direct SkyComputerUseClient MCP path that succeeds. Reproduce the read-only Finder request with the default workspace-write sandbox and inspect the sandbox_apply failure. Done means the bundled integration returns the Finder title “Desktop” without disabling the sandbox or requiring the MCP workaround.