[Windows 26.901.51231] unified-computer-use materialization sets CUA_REPL_ENABLED_SURFACES=browser, stripping sky trusted RPC

Summary

On Codex Desktop 26.901.51231 for Windows, the bundled
unified-computer-use plugin is materialized with:

CUA_REPL_ENABLED_SURFACES="browser"

This disables the computer surface.

launch.mjs only registers the Sky trusted RPC service when
computer is present:

browser          -> browser RPC
computer         -> sky RPC
browser,computer -> browser + sky

As a result, sky.list_apps() and sky.list_windows() fail with:

Trusted RPC service is not configured: sky

Evidence

The source plugin .mcp.json contains no
CUA_REPL_ENABLED_SURFACES entry.

During Codex Desktop startup, the materialized cache file:

C:/Users/<user>/.codex/plugins/cache/openai-bundled/unified-computer-use/26.901.51231/.mcp.json

is generated with:

CUA_REPL_ENABLED_SURFACES="browser"

launch.mjs defaults to browser,computer if the variable is absent,
but the generated value overrides that default.

Manually changing the materialized value to:

browser,computer

is not persistent. After fully exiting and restarting Codex Desktop,
the cache file is re-materialized back to:

browser

The rewrite occurs during application startup before node_repl and
before a new task is created.

Expected

When Computer Use is enabled, the materialized configuration should
include:

CUA_REPL_ENABLED_SURFACES="browser,computer"

or omit the variable so that launch.mjs uses its default.

Actual

The generated configuration contains only:

CUA_REPL_ENABLED_SURFACES="browser"

which causes launch.mjs to remove the sky trusted RPC service.

Environment

• Windows
• Codex Desktop 26.901.51231
• unified-computer-use@openai-bundled 26.901.51231
• @oai/sky 0.6.26
• cua_node b474a88d5d105afa
• Node 24.19.0

Additional notes

The following were verified and are not the cause:

• node_repl/js is available
• @oai/sky imports successfully
• @oai/sky/service exists and exports handleRpc
• trusted code paths cover the Sky runtime
• native pipe configuration is present
• no stale Sky runtime is being referenced
• Computer Use plugin is enabled

No binaries, ACLs, UAC settings, or security controls were modified.

Start with launch.mjs and trace the startup materialization path that writes the bundled plugin's .mcp.json on Windows. Reproduce the rewrite during Codex Desktop startup, then verify that the generated CUA_REPL_ENABLED_SURFACES value preserves browser and computer, or is omitted so launch.mjs applies its default; confirm sky.list_apps() and sky.list_windows() work after restart.